Home > Published Issues > 2026 > Volume 17, No. 10, 2026 >
JAIT 2026 Vol.17(10): 1888-1903
doi: 10.12720/jait.17.10.1888-1903

GPU-accelerated Fine-grained Multi-class Intrusion Detection for IoMT Networks: A 51-Class Benchmark with Latency-aware Evaluation

Ali Haider 1,*, Omar Bin Samin 1, Ammar Bathich 2, Haleem Farman 3, and Sohaib Bin Altaf Khattak 3
1. School of Computer Science & Information Technology, Institute of Management Sciences, Peshawar, Pakistan
2. Faculty of Computer & Information Technology, Al-Madinah International University, Kuala Lumpur, Malaysia
3. Smart Systems Engineering Lab, Department of Communications and Network Engineering, College of Engineering, Prince Sultan University, Riyadh, Saudi Arabia
Email: ali.haider@imsciences.edu.pk (A.H.); omar.samin@imsciences.edu.pk (O.B.S.); ammar.bathich@mediu.edu.my (A.B.); hfarman@psu.edu.sa (H.F.); skhattak@psu.edu.sa (S.B.A.K.)
*Corresponding author

Manuscript received May 3, 2026; revised May 28, 2026; accepted July 9, 2026; published October 9, 2026.

Abstract—While this connectivity is transforming clinical care, it also presents a massive attack surface, one that is still largely unprotected, which can be exploited with Denial-of-Service (DoS) and Distributed DoS attacks and via reconnaissance, Message Queuing Telemetry (MQTT) protocol abuse, Address Resolution Protocol (ARP) spoofing, and malformed-data injection. The original test and evaluation of the Cloud-Integrated Cloud-of-Things Medical Things 2024 dataset focused only on Central Processing Unit based classifiers with two coarse taxonomies and omitted the fine-grained taxonomy of Wi-Fi/MQTT and the use of Graphics Processing Unit (GPU) based classifiers, which were not evaluated. This paper builds on these gaps by comparing six machine learning classifiers implemented using NVIDIA Rapid Analytics on Platforms in Data Science (RAPIDS) to others that are machine learning—XGBoost with Compute Unified Device Architecture (CUDA) support, and CatBoost with GPU acceleration and evaluating them against 7,160,831 training samples in all fifty-one attack classes. The accuracy, precision, recall, F1-Score, per-sample inference latency, and novel composite metric latency-adjusted accuracy index are used to evaluate performance, which combines the predictive performance with the suitability for real-time deployment in Internet of Medical Thing (IoMT) gateway scenarios. The highest accuracy (83.63%) and per-sample latency (0.0018 ms) are achieved by GPU RF, and CatBoost achieves the best detection per class with 81.24% accuracy and a weighted F1-Score of 0.807. The label-encoding vocabulary mismatch between training and test is a practically relevant failure mode that is shown to collapse XGBoost to near-random performance. The models that are linear and distance-based in nature do not perform well on the 51-class problem, indicating that non-linear ensemble models are required to discriminate between attacks in clinical IoMT environments. Overall, the findings provide a sound basis for the scalable and latency-efficient use of GPU-accelerated ensemble learning for real-time ID in IoMT systems.
 
Keywords—Internet of Medical Thing (IoMT), intrusion detection system, Cloud-Integrated Cloud-of-Things Medical Things (CICIoMT) 2024, Rapid Analytics on Platforms in Data Science (RAPIDS) cuML, CatBoost, random forest, healthcare cybersecurity, latency-aware accuracy index
 
Cite: Ali Haider, Omar Bin Samin, Ammar Bathich, Haleem Farman, and Sohaib Bin Altaf Khattak, "GPU-accelerated Fine-grained Multi-class Intrusion Detection for IoMT Networks: A 51-Class Benchmark with Latency-aware Evaluation," Journal of Advances in Information Technology, Vol. 17, No. 10, pp. 1888-1903, 2026. doi: 10.12720/jait.17.10.1888-1903

Copyright © 2026 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).

Article Metrics in Dimensions