Performance Tradeoff in ML-Based Intrusion Detection Systems: Efficacy vs. Resource Usage
Nathan Dai, Suleyman Uludag · 2024
The rise in cyber attacks demands improved network security for resource-constrained IoT devices. We assess machine learning models on the CICIDS-2017 dataset, emphasizing the need for a balance between performance and resource efficiency. Principal component analysis (PCA) aids in creating efficient models, with XGBoost and Decision Tree as suitable options, providing decent performance without excessive resource requirements. Rebalancing techniques can enhance recall but may lower precision.