Optimizing Intrusion Detection in IoMT Networks Through Interpretable and Cost-Aware Machine Learning

Abdelatif Hafid (), Mohamed Rahouti and Mohammed Aledhari
Additional contact information
Abdelatif Hafid: ESISA Analytica, École Supérieure d’Ingénierie en Sciences Appliquées, Fez 30050, Morocco
Mohamed Rahouti: Department of Computer & Information Science, Fordham University, Bronx, NY 10458, USA
Mohammed Aledhari: Department of Data Science, University of North Texas, Denton, TX 76207, USA

Mathematics, 2025, vol. 13, issue 10, 1-22

Abstract: The rise of the Internet of Medical Things (IoMT) has enhanced healthcare delivery but also exposed critical cybersecurity vulnerabilities. Detecting attacks in such environments demands accurate, interpretable, and cost-efficient models. This paper addresses the critical challenges in network security, particularly in IoMT, through advanced machine learning (ML) approaches. We propose a high-performance cybersecurity framework leveraging a carefully fine-tuned XGBoost classifier to detect malicious attacks with superior predictive accuracy while maintaining interpretability. Our comprehensive evaluation compares the proposed model with a well-regularized Logistic Regression baseline using key performance metrics. Additionally, we analyze the security-cost trade-off in designing ML systems for threat detection and employ SHAP (SHapley Additive exPlanations) to identify key features driving predictions. We further introduce a late fusion approach based on max voting that effectively combines the strengths of both models. Results demonstrate that while XGBoost achieves higher accuracy (0.97) and recall (1.00) compared to Logistic Regression, our late fusion model provides a more balanced performance with improved precision (0.98) and reduced false negatives, making it particularly suitable for security-sensitive applications. This work contributes to developing robust, interpretable, and efficient ML solutions for addressing evolving cybersecurity challenges in networked environments.

Keywords: machine learning; IoMT; network security; XGBoost; late fusion; SHAP; cybersecurity; logistic regression; intrusion detection (search for similar items in EconPapers)
JEL-codes: C (search for similar items in EconPapers)
Date: 2025
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/2227-7390/13/10/1574/pdf (application/pdf)
https://www.mdpi.com/2227-7390/13/10/1574/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jmathe:v:13:y:2025:i:10:p:1574-:d:1652984

Access Statistics for this article

Mathematics is currently edited by Ms. Emma He

More articles in Mathematics from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().