Investigation of Augmented Datasets for Security in Internet of Medical Things (IoMT) Ecosystems

This study investigates data augmentation as a strategy for addressing dataset scarcity in Internet of Medical Things (IoMT) cybersecurity and improving intrusion-detection system performance. Four augmentation methods—Rule-Based, Tabular Variational Autoencoder (TVAE), Conditional Tabular Generative Adversarial Network (CTGAN), and Gaussian Copula—were applied to two publicly available IoMT datasets (ECU-IoHT and WUSTL-EHMS) to generate augmented training data with differing class distributions and feature characteristics. Eleven machine learning algorithms were evaluated using Matthews Correlation Coefficient (MCC), F1-score, accuracy, and error-based metrics. Results showed consistent performance improvements across all evaluated models relative to the baseline datasets. The Rule-Based method produced the strongest overall results, achieving the highest MCC (0.9757), F1-score (99.19%), and accuracy (99.18%) with LightGBM, alongside low false-positive and false-negative rates. Among the generative approaches, TVAE delivered the strongest overall practical performance (F1-score = 96.94%, accuracy = 96.92%), while CTGAN achieved a marginally higher MCC (0.9047) and also produced competitive results with balanced class representation. Gaussian Copula generated the weakest overall outcomes, primarily due to highly skewed class distributions. Traditional models, such as Logistic Regression and Naive Bayes, recorded the largest relative gains, indicating that augmentation can substantially improve simpler classifiers in data-scarce environments. Overall, the findings demonstrate that augmentation quality depends not only on dataset expansion, but also on preserving class balance, feature diversity, and realistic traffic relationships. These results provide practical guidance for strengthening IoMT intrusion-detection systems in healthcare environments.