Jisoo Lee
|
Sanghoon Jeon
| 2026, 12(3)
| 2
| number of Cited : 0
With the increasing security threats from the proliferation of IP cameras, the importance of machine learning-based anomaly detection is growing. However, existing studies are often biased toward single datasets, limiting their generalization performance in heterogeneous network environments. This study proposes a robust Stacking ensemble-based intrusion detection model by cross-utilizing the host-based N-BaIoT and network-based Kitsune datasets. Specifically, RF, NN, and AdaBoost were configured as base learners, and hyperparameter optimization was performed in the Orange3 environment. Experimental results show that the proposed model achieves an AUC greater than 0.999 under the intra-validation scenario. In inter-validation scenarios, performance degradation is observed due to differences in data characteristics. Information Gain analysis reveals that the asymmetric anomaly signals between the strong attack patterns in N-BaIoT and the relatively subtle anomalies in Kitsune are the primary cause of this performance degradation. Furthermore, the proposed stacking model demonstrates more robust performance than single machine learning models, suggesting its applicability to real-world security solutions where heterogeneous data sources coexist.