SavedAdd your journal

Journals / Scientific Journal of Mehmet Akif Ersoy University / 2026 / Volume: 9 Issue: 1

Traffic-to-Image-Based IoT Intrusion Detection: Multi-Dataset Performance and Efficiency Analysis

Amine Gonca Toprak(Türk Telekom)0000-0003-2425-5342
Öykü Berfin Mercan(Türk Telekom)0000-0001-7727-0197
Mustafa Serdar Osmanca(Türk Telekom)0000-0002-6939-2765
Pages
—
Publication Date
2026-10-25
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

Overall, the results establish performance–efficiency trade-offs under controlled class-wise evaluation while highlighting the need for label-independent validation before drawing conclusions about practical intrusion detection performance.

📌 3 Key Takeaways

🎯
Objective & Hypothesis:This study presents a unified traffic-to-image-based intrusion detection framework evaluated across three heterogeneous IoT/IIoT benchmark datasets: CICIoT2023, TON-IoT, and Edge-IIoTset.
📊
Key Findings & Data:MobileViT-XXS, EfficientNet-B0, and Swin-Tiny were systematically compared in terms of classification performance and computational efficiency.
💡
Conclusion & Impact:Overall, the results establish performance–efficiency trade-offs under controlled class-wise evaluation while highlighting the need for label-independent validation before drawing conclusions about practical intrusion detection performance.
🔬Design:Modeling & Simulation
📍Scope:Comprehensive Sample
⚙️Variables:IoT intrusion detection · traffic-to-image conversion · MobileViT

Abstract

This study presents a unified traffic-to-image-based intrusion detection framework evaluated across three heterogeneous IoT/IIoT benchmark datasets: CICIoT2023, TON-IoT, and Edge-IIoTset. MobileViT-XXS, EfficientNet-B0, and Swin-Tiny were systematically compared in terms of classification performance and computational efficiency. Under the controlled class-wise window construction protocol, MobileViT-XXS achieved a macro-F1 of 98.12% on CICIoT2023, while Swin-Tiny reached 99.88% and 100% on Edge-IIoTset and TON-IoT, respectively. Five-seed experiments characterized performance variability across training runs, with mean macro-F1 scores of 97.21% for MobileViT-XXS on CICIoT2023 and 99.53% and 99.17% for Swin-Tiny on Edge-IIoTset and TON-IoT, respectively. Sensitivity analyses showed generally strong performance across alternative representation settings. However, under label-independent window construction, MobileViT-XXS macro-F1 on CICIoT2023 decreased to 35.72%, with a mean window purity of 12.75%, revealing a substantial limitation of the class-wise representation under heterogeneous traffic conditions. Efficiency analysis further showed that MobileViT-XXS provides substantially lower model size and parameter count than the larger architectures, while the reported latency and throughput measurements reflect performance on the NVIDIA A100 experimental platform. Overall, the results establish performance–efficiency trade-offs under controlled class-wise evaluation while highlighting the need for label-independent validation before drawing conclusions about practical intrusion detection performance.

🔖

Cite This Article

Toprak, A. G., Mercan, Ö. B., Osmanca, M. S. (2026). Traffic-to-Image-Based IoT Intrusion Detection: Multi-Dataset Performance and Efficiency Analysis. Scientific Journal of Mehmet Akif Ersoy University, Volume: 9 Issue: 1. https://doi.org/10.70030/sjmakeu.2033131

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (21)

  1. Gyamfi, E., & Jurcut, A. (2022). Intrusion detection in Internet of Things systems: A review on design approaches leveraging multi-access edge computing, machine learning, and datasets. Sensors, 22(10), 3744. https://doi.org/10.3390/s22103744
  2. Liao, H., Murah, M. Z., Hasan, M. K., Aman, A. H. M., Fang, J., Hu, X., & Khan, A. U. R. (2024). A survey of deep learning technologies for intrusion detection in Internet of Things. IEEE Access, 12, 4745–4761. https://doi.org/10.1109/ACCESS.2023.3349287
  3. Neto, E. C. P., Dadkhah, S., Ferreira, R., Zohourian, A., Lu, R., & Ghorbani, A. A. (2023). CICIoT2023: A real-time dataset and benchmark for large-scale attacks in IoT environment. Sensors, 23(13), 5941. https://doi.org/10.3390/s23135941
  4. Ferrag, M. A., Friha, O., Hamouda, D., Maglaras, L., & Janicke, H. (2022). Edge-IIoTset: A new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning. IEEE Access, 10, 40281–40306. https://doi.org/10.1109/ACCESS.2022.3165809
  5. Tseng, S. M., Wang, Y. Q., & Wang, Y. C. (2024). Multi-class intrusion detection based on Transformer for IoT networks using CIC-IoT-2023 dataset. Future Internet, 16(8), 284. https://doi.org/10.3390/fi16080284
  6. Ho, C. M. K., Yow, K. C., Zhu, Z., & Aravamuthan, S. (2022). Network intrusion detection via flow-to-image conversion and Vision Transformer classification. IEEE Access, 10, 97780–97793. https://doi.org/10.1109/ACCESS.2022.3200034
  7. Zhou, H., Zou, H., Li, W., Li, D., & Kuang, Y. (2025). HiViT-IDS: An efficient network intrusion detection method based on Vision Transformer. Sensors, 25(6), 1752. https://doi.org/10.3390/s25061752
  8. Tan, M., & Le, Q. V. (2019). EfficientNet: Rethinking model scaling for convolutional neural networks. Proceedings of the 36th International Conference on Machine Learning (ICML), 97, 6105–6114. https://proceedings.mlr.press/v97/tan19a.html
  9. Mehta, S., & Rastegari, M. (2022). MobileViT: Light-weight, general-purpose, and mobile-friendly Vision Transformer. Proceedings of the 10th International Conference on Learning Representations (ICLR). https://openreview.net/forum?id=vh-0sUt8HlG
  10. Liu, Z., Lin, Y., Cao, Y., Hu, H., Wei, Y., Zhang, S., Lin, S., & Guo, B. (2021). Swin Transformer: Hierarchical Vision Transformer using shifted windows. Proceedings of the IEEE/CVF International Conference on Computer Vision (ICCV), 10012–10022. https://doi.org/10.1109/ICCV48922.2021.00986
  11. Toprak, A. G., Mercan, Ö. B., Tok, Y. E., & Karahan, S. N. (2025). Explainable and trustworthy artificial intelligence in 6G THz networks: Challenges, solutions, and future perspectives. ITU Journal of Wireless Communications and Cybersecurity, 2(2), 61–80. https://izlik.org/JA82BY83GF
  12. Hattak, A., Martinelli, F., Mercaldo, F., & Santone, A. (2024). Leveraging deep learning for intrusion detection in IoT through visualized network data. Proceedings of the 21st International Conference on Security and Cryptography (SECRYPT), 722–729. https://doi.org/10.5220/0012768400003767
  13. Latif, S., Boulila, W., Koubaa, A., Zou, Z., & Ahmad, J. (2024). DTL-IDS: An optimized intrusion detection framework using deep transfer learning and genetic algorithm. Journal of Network and Computer Applications, 221, 103784. https://doi.org/10.1016/j.jnca.2023.103784
  14. Zhou, H., Zou, H., Zhou, P., Shen, Y., Li, D., & Li, W. (2025). CBCTL-IDS: A transfer learning-based intrusion detection system optimized with the Black Kite Algorithm for IoT-enabled smart agriculture. IEEE Access, 13, 46601–46615. https://doi.org/10.1109/ACCESS.2025.3550800
  15. Alatewish, H. J., & Shaari, H. (2025). Intrusion detection in IoT using traffic-to-image conversion and lightweight Vision Transformers. Proceedings of the 2025 IEEE International Multi-Conference on Smart Systems and Green Process (IMC-SSGP), 1–6. https://doi.org/10.1109/IMC-SSGP67001.2025.11474245
  16. Ferrag, M. A., Ndhlovu, M., Tihanyi, N., Cordeiro, L. C., Debbah, M., Lestable, T., & Thandi, N. S. (2024). Revolutionizing cyber threat detection with large language models: A privacy-preserving BERT-based lightweight model for IoT/IIoT devices. IEEE Access, 12, 23733–23750. https://doi.org/10.1109/ACCESS.2024.3363469
  17. Mercan, Ö. B., Toprak, A. G., & Osmanca, M. S. (2025). Traditional machine learning and large language model approach in network intrusion detection. Proceedings of the 2025 33rd Signal Processing and Communications Applications Conference (SIU), 1–4. https://doi.org/10.1109/SIU66497.2025.11112369
  18. Mercan, Ö. B., Toprak, A. G., & Osmanca, M. S. (2025). Multi-class classification for IoT attack detection: An LLM-based approach. Proceedings of the 2025 33rd Signal Processing and Communications Applications Conference (SIU), 1–4. https://doi.org/10.1109/SIU66497.2025.11112284
  19. Alsaedi, A., Moustafa, N., Tari, Z., Mahmood, A., & Anwar, A. (2020). TON_IoT telemetry dataset: A new generation dataset of IoT and IIoT for data-driven intrusion detection systems. IEEE Access, 8, 165130–165150. https://doi.org/10.1109/ACCESS.2020.3022862
  20. Battiti, R. (1994). Using mutual information for selecting features in supervised neural net learning. IEEE Transactions on Neural Networks, 5(4), 537–550. https://doi.org/10.1109/72.298224
  21. Selvaraju, R. R., Cogswell, M., Das, A., Vedantam, R., Parikh, D., & Batra, D. (2017). Grad-CAM: Visual explanations from deep networks via gradient-based localization. Proceedings of the IEEE International Conference on Computer Vision (ICCV), 618–626. https://doi.org/10.1109/ICCV.2017.74