In the Internet of Things era, massive network data streams are continuously generated, often exhibiting unpredictable distributional evolution. This dynamic nature poses significant challenges for effective analysis. To address this, we propose a novel double-layer concept drift detection algorithm based on isolation forest, termed IF-DLDD, designed to identify multiple types of concept drift. The framework consists of a detection layer, where isolation forest detects anomalies across consecutive sliding windows, and a verification layer, where a T-test is employed to precisely localize drift points and reduce false alarms. We evaluate IF-DLDD on both noisy synthetic datasets and the real-world CIC-IDS2017 intrusion detection dataset. The results demonstrate that IF-DLDD achieves timely and accurate detection across diverse drift types, maintaining a high detection rate with low false positives and strong noise robustness. In network intrusion detection tasks, IF-DLDD effectively identifies all attack drifts with minimal false positives and detection delays under practical parameter settings. These findings highlight IF-DLDD as a promising and practical approach for concept drift detection in dynamic data streams.
Concept Drift Analysis Based on Isolation Forest for Effectively Detecting Network Attack in IoT Scenarios
Renjie Chu,M. Luo,Lei Yang,Jianming Xiao,Yuanyuan Liao
Published 2026 in IEEE Access
ABSTRACT
PUBLICATION RECORD
- Publication year
2026
- Venue
IEEE Access
- Publication date
Unknown publication date
- Fields of study
Computer Science, Engineering
- Identifiers
- External record
- Source metadata
Semantic Scholar
CITATION MAP
EXTRACTION MAP
CLAIMS
- No claims are published for this paper.
CONCEPTS
- No concepts are published for this paper.
REFERENCES
Showing 1-44 of 44 references · Page 1 of 1
CITED BY
- No citing papers are available for this paper.
Showing 0-0 of 0 citing papers · Page 1 of 1