Skip to content

Deep learning models for anomaly traffic detection in Internet of Things devices S&T60

  • School: School of Science and Technology
  • Study mode(s): Full-time / Part-time
  • Starting: 2022
  • Funding: UK student / EU student (non-UK) / International student (non-EU) / Fully-funded


NTU's Fully-funded PhD Studentship Scheme 2022

Project ID: S&T60

This project aims to develop machine learning techniques for detecting anomaly traffic in Internet of Things (IoT) Devices, especially in Smart Home. As billion IoT devices have been used worldwide, their security becomes an important problem. To prevent IoT devices from hacking attack, Intrusion Detection Systems (IDS) can be used in IoT systems. Network attacks often lead to certain changes in network traffic, or anomaly traffic. Symptoms of attacks can be detected by IDS through traffic anomalies. Currently many works exploit deep learning in IDS for efficiently detecting attacks. In this project, a smart home environment will be set up consisting of different smart devices. Simulated attacks are implemented in the smart home. Traffic data (normal and abnormal) are collected and used for the purpose of research in this project.  In smart home environment, attacks seldom happen, and the collected data will be regarded as imbalanced data.

This project will investigate a new way of applying machine learning to anomaly traffic detection, which combines both supervised leaning and non-supervised learning together. For detecting the behavioural change of IoT devices, both clustering and supervised learning will be applied to the analysis of the collected traffic data. Through clustering, IoT traffic attributes are clustered to characterize devices’ behaviour. Based on clustered data, deep learning models will be designed and built for classifying normal and abnormal traffic. The models will be trained with hyper-parameter tuning for the best performance. The performance of these models will be evaluated.  Furthermore, a new architecture of IDS which combines the approaches of clustering and classification will be designed for Smart Home security.  This architecture will provide a new framework for monitoring and analysing Smart Home devices’ anomaly traffic.  The main research questions in this project are

  1. Whether the performance of the combination of clustering and classification models is better than pure classification models?
  2. How to develop efficient machine learning models which combine supervised learning and non-supervised learning together for reduce the impact of data imbalanced data?

School strategic research priority

This research aligns with Computer Science and Informatic Research Centre.

Entry qualifications

For the eligibility criteria, visit our studentship application page.

How to apply

For guidance and to make an application, please visit our studentship application page. The application deadline is Friday 14 January 2022.

Fees and funding

This is part of NTU's 2022 fully-funded PhD Studentship Scheme.

Guidance and support

Download our full applicant guidance notes for more information.

Still need help?

+44 (0)115 941 8418