Claim Missing Document
Check
Articles

Found 31 Documents
Search

Explainable IoT Intrusion Detection Using Random Forest, SMOTE, and SHAP Julfikar Mawansyah; Anik Nur Handayani; Aji Prasetya Wibawa; Triyanna Widiyaningtyas; Mokh. Sholihul Hadi; Fidyah Ajeng Wulandari
Jurnal Elektronika dan Telekomunikasi Vol. 26 No. 1 (2026)
Publisher : National Research and Innovation Agency

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.55981/jet.823

Abstract

Class imbalance in Internet of Things (IoT) Intrusion Detection System (IDS) datasets is a major challenge that degrades the detection performance on minority attacks and complicates model interpretability. This study investigates the performance of an IoT IDS based on Random Forest (RF) combined with the Synthetic Minority Over-sampling Technique (SMOTE) and explainable AI analysis using SHapley Additive exPlanations (SHAP) on the public IoTID20 dataset. The research pipeline consists of data preprocessing (cleaning, numerical and categorical feature encoding, normalization), stratified train–test split into 7,000 training and 3,000 test samples, training an RF baseline on the imbalanced training set, applying SMOTE to balance the DoS, Scan, Normal, and MITM ARP Spoofing classes, and training an RF–SMOTE model. The models are compared using accuracy, precision, recall, and F1-score per class as well as macro averages. Afterwards, SHAP is employed to analyse global feature importance for both models. Experimental results show that the RF baseline already achieves very high performance with an accuracy of about 0.99 and a macro F1-score of approximately 0.984, while the RF–SMOTE model maintains the same accuracy with a macro F1-score of around 0.983. SMOTE substantially improves the class distribution in the training set but yields only minor differences in aggregate performance, RF–SMOTE slightly enhances sensitivity for some minority classes, whereas the F1-score for the MITM ARP Spoofing class decreases marginally compared to the baseline. SHAP analysis indicates that flow-related traffic features such as connection duration, packet counts, byte volume, and packet direction ratios are consistently the most influential features in both models. Changes in SHAP values for the RF–SMOTE model highlight an increased relative contribution of features representing rare attack patterns, making explanations for minority classes more prominent. Overall, the proposed RF–SMOTE–SHAP framework delivers a high-performing IoT IDS while providing improved transparency in explaining detection decisions, thereby supporting the development of trustworthy and interpretable IDS solutions for IoT environments.
Co-Authors A.N. Afandi Achmad Safii Adi Izhar Che Ani Agung Witjoro Ahmad Fuadi Ahmad Sariful Anwar Ahmad Shukri Firdhaus Kamaruzaman Ahmad, Sharaf Aji Prasetya Wibawa Alfin Firmansyah Andriana Kusuma Dewi Anik Nur Handayani Annisa Firly Aprilia Putri Arfienda Miawa Tyassilva Arfiyansyah, Rizky Argeshwara, Dityo Kreshna Arif Nur Afandi Aripriharta - Arisatya Bharotoyakti Arrohman, Maulana Ludfi Aswin Rosadi Busaeri, Siti Rahbiah Che Ani, Adi Izhar Choirul Tri Fandiansyah Deva Putri Lestari Dito Valentino Dityo Kreshna Argeshwara Dityo Kreshna Argeshwara Dwi Arini Mufarichah Dwi Puri Fatmala Dyah Lestari Faidzin, Ilham Fatma Cahyaningrum Fattah, Muhammad Hattah Febryan, Febryan Fido Arya Kusuma Fidyah Ajeng Wulandari Firdhaus Kamaruzaman, Ahmad Shukri Hamdani Mohammad Farid, Mohammad Afiq Hari, Nirwana Haidar Hasanuddin, Tasrif I Made Wirawan I Made Wirawan Irvan, Mhd Joumil Aidil Saifuddin Julfikar Mawansyah Lisma Hafifatul Aprilia M Syamsul Huda M. Alfian Mizar M. Farrel Akbar Firzatullah M. Rodzi Faiz Mhd. Irvan, Mhd. Irvan Moh. Zainul Falah Mohammad Afiq Hamdani Mohammad Farid Mohd Ikmal Fitri Maruzuki Muhammad Afnan Habibi Muhammad Afnan Habibi Muhammad Yazid Muhiban Syabani Muladi Pradipta Adi Nugroho Ramdan Satra Ratna Juwita Resi Sari Dwijayanti Kartikasari Riski Achmad Fauzi Rizky Asillia P Sari Rosnani Rosnani Ryan Harris Abdillah Samsul Setumin Satia Nur Maharani Setumin, Samsul Shidiqi, Maulana Ahmad As Shidiqi, Maulana As Siti Juliana Abu Bakar Siti Sendari Siti Zubaidah Soenar Soekopitojo Soraya Norma Mustika Sugiono, Bhima Satria Rizki Sugiono, Bhima Satria Rizky Sujito Sujito Sujito Sujito Sumarno . Sunaryono Susilo, Suhiro Wongso Syaad Patmanthara Syafiq Ubaidilah Syaiful Anwar Tiara Windrias Putri Triyanna Widiyaningtyas Yandhika Surya Akbar Gumilang Yuli Agustina, Yuli Zaeni, Ilham Ari Elbaith Zulkham Umar Rosyidin Zulkham Umar Rosyidin