The proliferation of IoT devices and their reliance on Wi-Fi networks have introduced significant security vulnerabilities, particularly the KRACK and Kr00k attacks, which exploit weaknesses in WPA2 encryption to intercept and manipulate sensitive data. Traditional IDS using classifiers face challenges such as model overfitting, incomplete feature extraction, and high false positive rates, limiting their effectiveness in real-world deployments. To address these challenges, this study proposes a robust multiclass machine learning based intrusion detection framework. The methodology integrates advanced feature selection techniques to identify critical attributes, mitigating redundancy and enhancing detection accuracy. Two distinct ML architectures are implemented: a baseline classifier pipeline and a stacked ensemble model combining noise injection, Principal Component Analysis (PCA), and meta learning to improve generalization and reduce false positives. Evaluated on the AWID3 data set, the proposed ensemble architecture achieves superior performance, with an accuracy of 98%, precision of 98%, recall of 98%, and a false positive rate of just 2%, outperforming existing state-of-the-art methods. This work demonstrates the efficacy of combining preprocessing strategies with ensemble learning to fortify network security against sophisticated Wi-Fi attacks, offering a scalable and reliable solution for IoT environments. Future directions include real-time deployment and adversarial resilience testing to further enhance the model's adaptability.
翻译:物联网设备的普及及其对Wi-Fi网络的依赖引入了严重的安全漏洞,特别是KRACK和Kr00k攻击,这些攻击利用WPA2加密协议的弱点来拦截和操纵敏感数据。传统基于分类器的入侵检测系统面临模型过拟合、特征提取不完整以及高误报率等挑战,限制了其在实际部署中的有效性。为应对这些挑战,本研究提出了一种基于鲁棒多类机器学习的入侵检测框架。该方法整合了先进的特征选择技术以识别关键属性,从而减少冗余并提升检测精度。研究实现了两种不同的机器学习架构:基线分类器流水线,以及结合噪声注入、主成分分析和元学习的堆叠集成模型,以提升泛化能力并降低误报率。在AWID3数据集上的评估表明,所提出的集成架构取得了卓越性能,准确率达到98%,精确率与召回率均为98%,误报率仅为2%,性能优于现有先进方法。本工作证明了将预处理策略与集成学习相结合对于强化网络安全以抵御复杂Wi-Fi攻击的有效性,为物联网环境提供了可扩展且可靠的解决方案。未来研究方向包括实时部署与对抗性韧性测试,以进一步提升模型的适应能力。