⚠ Official Notice: www.ijisrt.com is the official website of the International Journal of Innovative Science and Research Technology (IJISRT) Journal for research paper submission and publication. Please beware of fake or duplicate websites using the IJISRT name.



Multiclass IoT Intrusion Detection Using a Hybrid CNN–BiLSTM–Attention Architecture


Authors : Umaru Mustapha Audu; Zayyanu Umar; Karatu Musa Tanimu; Sirajo Abdullahi Bakura

Volume/Issue : Volume 11 - 2026, Issue 9 - September


Google Scholar : https://tinyurl.com/454ur6fc

DOI : https://doi.org/10.38124/ijisrt/26sep806

Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.


Abstract : The rapid expansion of Internet of Things (IoT) technologies has increased the complexity of network environments and exposed connected devices to diverse cybersecurity threats. Conventional intrusion detection approaches often face limitations in identifying multiple attack categories, particularly in highly imbalanced IoT network traffic. This study proposes a hybrid Convolutional Neural Network–Bidirectional Long Short-Term Memory with Attention (CNN– BiLSTM–Attention) model for multiclass intrusion detection in IoT environments.

Keywords : Internet of Things (IoT); Intrusion Detection System; Deep Learning; Convolutional Neural Network; Bidirectional Long Short-Term Memory; Attention Mechanism; Multiclass Classification; BoT-IoT; SMOTE; Cybersecurity.

References :

  1. R. Chataut, A. Phoummalayvane, and R. Akl, “Unleashing the power of IoT: A comprehensive review of IoT applications and future prospects in healthcare, agriculture, smart homes, smart cities, and Industry 4.0,” Sensors, vol. 23, no. 16, p. 7194, 2023, doi: 10.3390/s23167194.
  2. A. Djenna, S. Harous, and D. E. Saidouni, “Internet of Things meet Internet of threats: New concern cyber security issues of critical cyber infrastructure,” Applied Sciences, vol. 11, no. 10, p. 4580, 2021, doi: 10.3390/app11104580.
  3. O. Jullian, B. Otero, E. Rodriguez, N. Gutierrez, H. Antona, and R. Canal, “Deep-learning based detection for cyber-attacks in IoT networks: A distributed attack detection framework,” Journal of Network and Systems Management, vol. 31, Art. no. 33, 2023, doi: 10.1007/s10922-023-09722-7.
  4. R. Atassi, “Anomaly detection in IoT networks: Machine learning approaches for intrusion detection,” Fusion: Practice and Applications, vol. 13, no. 1, pp. 126–134, 2023, doi: 10.54216/FPA.130110.
  5. G. Logeswari, J. D. Roselind, K. Tamilarasi, and V. Nivethitha, “A comprehensive approach to intrusion detection in IoT environments using hybrid feature selection and multi-stage classification techniques,” IEEE Access, vol. 13, pp. 24970–24987, 2025, doi: 10.1109/ACCESS.2025.3532895.
  6. P. Sinha, D. Sahu, S. Prakash, T. Yang, R. S. Rathore, and V. K. Pandey, “A high performance hybrid LSTM CNN secure architecture for IoT environments using deep learning,” Scientific Reports, vol. 15, Art. no. 9684, 2025, doi: 10.1038/s41598-025-94500-5.
  7. A. K. Sahu, S. Sharma, M. Tanveer, and R. Raja, “Internet of Things attack detection using hybrid deep learning model,” Computer Communications, vol. 176, pp. 146–154, 2021, doi: 10.1016/j.comcom.2021.05.024.
  8. M. Zhong, Y. Zhou, and G. Chen, “Sequential model based intrusion detection system for IoT servers using deep learning methods,” Sensors, vol. 21, no. 4, p. 1113, 2021, doi: 10.3390/s21041113.
  9. T. Altaf, X. Wang, W. Ni, G. Yu, R. P. Liu, and R. Braun, “GNN-based network traffic analysis for the detection of sequential attacks in IoT,” Electronics, vol. 13, no. 12, p. 2274, 2024, doi: 10.3390/electronics13122274.
  10. E. Gelenbe and M. Nakip, “Traffic based sequential learning during botnet attacks to identify compromised IoT devices,” IEEE Access, vol. 10, pp. 126536–126549, 2022, doi: 10.1109/ACCESS.2022.3226700.
  11. M. Ramzan, M. Shoaib, A. Altaf, S. Arshad, F. Iqbal, Á. K. Castilla, and I. Ashraf, “Distributed denial of service attack detection in network traffic using deep learning algorithm,” Sensors, vol. 23, no. 20, p. 8642, 2023, doi: 10.3390/s23208642.
  12. F. Alasmary, S. Alraddadi, S. Al-Ahmadi, and J. Al-Muhtadi, “ShieldRNN: A distributed flow-based DDoS detection solution for IoT using sequence majority voting,” IEEE Access, vol. 10, pp. 88263–88275, 2022, doi: 10.1109/ACCESS.2022.3200477.
  13. K. Sundar, A. Neyaz, and Q. Liu, “IoT network attack detection using supervised machine learning,” International Journal of Artificial Intelligence and Expert Systems, vol. 10, no. 2, pp. 18–32, 2021.
  14. O. Salman, I. H. Elhajj, A. Chehab, and A. Kayssi, “A machine learning based framework for IoT device identification and abnormal traffic detection,” Transactions on Emerging Telecommunications Technologies, vol. 33, no. 3, Art. no. e3743, 2022, doi: 10.1002/ett.3743.
  15. I. A. Kandhro, S. M. Alanazi, F. Ali, A. Kehar, K. Fatima, M. Uddin, and S. Karuppayah, “Detection of real-time malicious intrusions and attacks in IoT empowered cybersecurity infrastructures,” IEEE Access, vol. 11, pp. 9136–9148, 2023, doi: 10.1109/ACCESS.2023.3238664.
  16. Z. Mohammad and T. S. Bharati, “Enhancing cybersecurity in IoT systems: A hybrid deep learning approach for real-time attack detection,” Discover Internet of Things, vol. 5, Art. no. 73, 2025, doi: 10.1007/s43926-025-00156-y.
  17. H. R. Sayegh, W. Dong, and A. M. Al-madani, “Enhanced intrusion detection with LSTM-based model, feature selection, and SMOTE for imbalanced data,” Applied Sciences, vol. 14, no. 2, p. 479, 2024, doi: 10.3390/app14020479.
  18. A. O. Widodo, B. Setiawan, and R. Indraswari, “Machine learning-based intrusion detection on multi-class imbalanced dataset using SMOTE,” Procedia Computer Science, vol. 234, pp. 578–583, 2024, doi: 10.1016/j.procs.2024.03.042.
  19. Y. Guan, M. Noferesti, and N. Ezzati-Jivan, “A two-tiered framework for anomaly classification in IoT networks utilizing CNN-BiLSTM model,” Software Impacts, vol. 20, p. 100646, 2024, doi: 10.1016/j.simpa.2024.100646.
  20. B. Omarov, Z. Sailaukyzy, A. Bigaliyeva, A. Kereyev, L. Naizabayeva, and A. Dautbayeva, “One dimensional Conv-BiLSTM network with attention mechanism for IoT intrusion detection,” Computers, Materials & Continua, vol. 77, no. 3, pp. 3765–3781, 2023, doi: 10.32604/cmc.2023.042469.
  21. N. Koroniotis, N. Moustafa, E. Sitnikova, and B. Turnbull, “Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset,” Future Generation Computer Systems, vol. 100, pp. 779–796, 2019, doi: 10.1016/j.future.2019.05.041.

The rapid expansion of Internet of Things (IoT) technologies has increased the complexity of network environments and exposed connected devices to diverse cybersecurity threats. Conventional intrusion detection approaches often face limitations in identifying multiple attack categories, particularly in highly imbalanced IoT network traffic. This study proposes a hybrid Convolutional Neural Network–Bidirectional Long Short-Term Memory with Attention (CNN– BiLSTM–Attention) model for multiclass intrusion detection in IoT environments.

Keywords : Internet of Things (IoT); Intrusion Detection System; Deep Learning; Convolutional Neural Network; Bidirectional Long Short-Term Memory; Attention Mechanism; Multiclass Classification; BoT-IoT; SMOTE; Cybersecurity.

Paper Submission Last Date
30 - September - 2026

SUBMIT YOUR PAPER CALL FOR PAPERS
Video Explanation for Published paper

Never miss an update from Papermashup

Get notified about the latest tutorials and downloads.

Subscribe by Email

Get alerts directly into your inbox after each post and stay updated.
Subscribe
OR

Subscribe by RSS

Add our RSS to your feedreader to get regular updates from us.
Subscribe