Advanced Transformer-Enhanced Framework for Real-Time IoT Malware Detection

An improvement of the Internet of Things (IoT) was forecast for changing the healthcare industry and is generating the increase of the Internet of Medical Things (IoMT). The IoT revolution was surpassed the present-day human service with promise social prospects, mechanical, and financial. During this condition, it can be essential for framing an effectual approach for guaranteeing the safety and reliability of t patient’s symptomatic information which are transmitted and received in IoT criteria. This study introduces a new data fusion model in IoT environment. The proposed model is called SSOECC-MIC model focuses on the design of effective encryption scheme with optimal key generation process for IoT environment. To achieve this, the SSOECC-MIC model designs an ECC model for the encryption and decryption of medical images effectively. To further improve the security performance of the ECC model, the optimal key generation process is carried out by the use of swallow swarm optimization (SSO) algorithm. For examining the enhanced performance of the SSOECC-MIC model, a wide ranging experimental analysis is carried out. The experimental outcomes reported the betterment of the SSOECC-MIC model over recent models.

여러 사물 인터넷 기기들을 조합, 활용하여 다양한 서비스를 제공할 수 있게 된 환경에서 추천시스템은 사용자가 원하는 서비스를 선택하는 데 있어 도움을 줄 수 있다. 기존의 추천 시스템에 대한 많은 연구는 주로 개인 사용자 대상의 추천에 집중되어 있으나 사물 인터넷 환경에서는 개인과 그룹 모두 사용자가 될 수 있으므로 그룹에 대한 추천 방법이 필요로 하다. 본 연구는 사물 인터넷 환경에서 그룹사용자들의 서비스 선호도를 분석하고, 이를 바탕으로 특정 장소에서 서비스를 이용한 적이 없는 새로운 그룹 사용자에게 서비스를 추천할 수 있는 방법을 개발하였다. 본 연구에서는 그룹의 구성 정보를 기반으로 그룹들 간의 유사도를 측정하여 사용자 기반 협업 필터링을 적용하였다. 실험에서는 실제 사물 인터넷 테스트 베드 환경에서 수집된 데이터를 사용하였으며 실험 결과를 통해 제안한 서비스 추천 방법이 효과적임을 확인할 수 있었다.

Recently, IETF (Internet Engineering Task Force) presented CoAP (Constrained Application Protocol) for the communication between sensor and actuator nodes in a constrained environment such as small amount of memory and low power. IETF CoAP protocol can convert easily, and can use to monitor or control infrastructure utilities through low-power sensor and actuator networks in IoT (Internet of Things) and M2M (Machine-to-Machine) environment. IETF CoAP protocol provides the special requirements of this constrained environment, especially considering energy, automation, and other IoT applications. In this paper, we design and implement a node registration and discovering based CoAP in IoT environment. The node is a CoAP node which is designed for working in constrained environment. For node registration in IoT, we used CoRE RD (Resource Directory) functionalities to register CoAP node’s information which works in IoT environment.

The proliferation of Internet of Things (IoT) devices has introduced unprecedented connectivity and convenience but also heightened the vulnerability to botnet attacks. There are an increasing number of Internet of Things (IoT) devices connected to the network these days, and due to the advancement in technology, the security threads and cyberattacks, such as botnets, are emerging and evolving rapidly with high-risk attacks. These attacks disrupt IoT transition by disrupting networks and services for IoT devices. Many recent studies have proposed ML and DL techniques for detecting and classifying botnet attacks in the IoT environment. This project presents a straightforward approach to detect botnet activity within IoT networks through the utilization of machine learning techniques. By analyzing network traffic patterns and employing unsupervised learning algorithms, we demonstrate an effective method to identify and mitigate botnet threats in IoT environments. By this project we intend to offer a valuable contribution in enhancing the security of IoT ecosystem. Key Word: Internet of Things(IoT),cybersecurity, botnet attacks, machine learning(ML),UNSW-NB15 dataset, exploratory data analysis, XgBoost

Recent growth in the Internet of Things (IoT) looks promising for realizing a smart environment of the future. However, concerns about the security of IoT devices are escalating as they are inherently constrained by limited resources, heterogeneity, and lack of standard security controls or protocols. Due to their inability to support state-of-the-art secure network protocols and defense mechanisms, standard security solutions are unsuitable for dynamic IoT environments that require large and smart IoT infrastructure deployments. At present, the IoT based smart environment deployments predominantly use cloud-centric approaches to enable continuous and on-demand data exchange that leads to further security and privacy risks. While standard security protocols, such as Virtual Private Networks (VPNs), have been explored for certain IoT environments recently, the implementation models reported have several variations and are not practically scalable for any dynamically scalable IoT deployment. This paper addresses current drawbacks in providing the required flexibility, interoperability, scalability, and low-cost practical viability of a secure IoT infrastructure. We propose an adaptive end-to-end security model that supports the defense requirements for a scalable IoT infrastructure. With low-cost embedded controllers, such as the Raspberry Pi, allowing for the convergence of more sophisticated networking protocols to be embedded at the IoT monitoring interface, we propose a scalable IoT security model integrating both the IoT devices and the controller as one embedded device. Our approach is unique, with a focus on the integration of a security protocol at the embedded interface. In addition, we demonstrate a prototype implementation of our IoT security model for a smart water monitoring system. We believe that our modest first step would instill future research interests in this direction.

In the modern era, web data retrieval and data analytics play a crucial role for taking intelligent decisions in Internet of Things (IoT) environment. In IoT environment, various objects perform the tasks of sensing and computation for providing uninterrupted services (e.g., e-health, e- transportation, security access, etc.) to the end users. However, accessing the relevant and accurate information with reduced delay is still a challenging task in IoT environment. Although this aspect has been explored in the literature, the existing proposals have high complexity and require long time for accessing the relevant information from different IoT objects located across the globe. The information may be located across different web pages, which are linked together irrespective of their geographical locations. So, this paper addresses the issues such as accuracy, context- aware, reduced delay with low complexity in accessing the information from a remote device by the end users. In the proposed scheme, the strength of a web page which contains the relevant information to be fetched is judged by the quality of content and the inter- connections between different web pages. The proposed scheme simplifies the rank score calculation of these web pages and provides quality web pages at the top of the search result pages by demoting spam web pages. Bias connected web pages are verified by the linkage information of spam web pages. The Quality Assessment for Information Retrieval (QAIR) algorithm is proposed for the classification of web pages. The proposed algorithm computes the QAIR score by evaluating the web page quality. Microsoft Learning to Rank dataset has been used for the experiments, which consists of 239092 query-url pairs. By using this dataset, the computed QAIR score is compared with the PageRank score. This comparison determines the category of web page, i.e., either the page is strong or weak. The proposed scheme has been validated with decision tree followed by ten- fold cross validation, which results in an accuracy of 92.4%.

The rapid expansion of Internet of Things (IoT) devices has highlighted the shortcomings of traditional centralized identity management systems, which often suffer from single points of failure, high latency, and limited scalability. These challenges are particularly significant in IoT environments with limited resources, where secure and efficient identity management is crucial for real-time data processing and decision-making. This paper introduces a consortium blockchain-based IoT identity management system enhanced by fog computing. By utilizing blockchain’s decentralized and tamper-resistant features, the system secures identity management, while fog computing minimizes latency by processing data closer to its source. Our system is designed to scale effectively, even in densely populated IoT deployments, while maintaining low energy consumption and high throughput. Simulation results show notable reductions in latency and improvements in throughput, with the system achieving an average latency of 175.15 ms for registration operations with a 0.35 MB payload. The system’s robustness is further demonstrated by its resilience to common IoT security threats, such as man-in-the-middle attacks and node compromise. Key contributions include the innovative integration of blockchain and fog computing, enhanced scalability and efficiency, improved security through decentralized identity management, and adaptability to emerging technologies like quantum-resistant cryptography.

Background: Internet of Things (IoT) is one of the most promising technologies that aims to enhance humans’ quality of life (QoL). IoT plays a significant role in several fields such as healthcare, automotive industries, agriculture, education, and many cross-cutting business applications. Objectives: This paper explores the multifaceted security issues of IoT environments, highlighting current gaps and presenting modern technological solutions. This paper aims to systematically explore the diverse security challenges in IoT environments, critically assess current technological solutions, and identify unresolved issues along with potential directions for future research. Methods: A systematic literature review was conducted for the period 2020–2025, covering more than 50 studies from IEEE, ACM, Elsevier, and SpringerLink. Selected papers were evaluated based on relevance, peer-review status, and contribution to IoT security. Findings: IoT systems face unique challenges such as weak authentication, lightweight encryption requirements, and large-scale heterogeneity. This study synthesizes current solutions like multi-factor authentication, blockchain, and machine learning for intrusion detection. Novelty: Unlike traditional reviews, this paper evaluates technologies under real-world constraints and identifies specific research gaps such as scalable lightweight security frameworks and zero-trust model adoption in IoT. Significance: The paper provides the most extensive survey of security issues associated with the IoT. Based on an up-to-date analysis of different IoT security frameworks and standards proposed in the literature, the paper contributes to the field by pointing out the directions in which further research is needed. It’s one of the most cited survey papers in IoT security, meaning many other researchers trust and refer to it.

Internet of Things (IoT) is being applied to areas as smart-cities, home environment, agriculture, industry, etc. Developing, deploying and testing IoT projects require high investments on devices, fog nodes, cloud nodes, analytic nodes, hardware and software. New projects require high investments on devices, fog nodes, cloud nodes, analytic nodes, hardware and software before each system can be developed. In addition, the systems should be developed to test them, which implies time, effort and development costs. However, in order to decrease the cost associated to develop and test the system the IoT system can be simulated. Thus, simulating environments help to model the system, reasoning about it, and take advantage of the knowledge obtained to optimize it. Designing IoT simulation environments has been tackled focusing on low level aspects such as networks, motes and so on more than focusing on the high level concepts related to IoT environments. Additionally, the simulation users require high IoT knowledge and usually programming capabilities in order to implement the IoT environment simulation. The concepts to manage in an IoT simulation includes the common layers of an IoT environment including Edge, Fog and Cloud computing and heterogeneous technology. Model-driven development is an emerging software engineering area which aims to develop the software systems from domain models which capture at high level the domain concepts and relationships, generating from them the software artefacts by using code-generators. In this paper, a model-driven development approach has been developed to define, generate code and deploy IoT systems simulation. This approach makes it possible to design complex IoT simulation environments and deploy them without writing code. To do this, a domain metamodel, a graphical concrete syntax and a model to text transformation have been developed. The IoT simulation environment generated from each model includes the sensors, actuators, fog nodes, cloud nodes and analytical characteristics, which are deployed as microservices and Docker containers and where elements are connected by using publish-subscribe communication protocol. Additionally, two case studies, focused on smart building and agriculture IoT environments, are presented to show the simulation expressiveness.

The proliferation of Internet of Things (IoT) devices has introduced significant challenges in cybersecurity, particularly in the realm of intrusion detection. While effective, traditional centralized machine learning approaches often compromise data privacy and scalability due to the need for data aggregation. In this study, we propose a federated learning framework for near-real-time intrusion detection in IoT environments. Federated learning enables decentralized model training across multiple devices without exchanging raw data, thereby preserving privacy and reducing communication overhead. Our approach builds upon a previously proposed hybrid model, which combines a machine learning model deployed on IoT devices with a second-level cloud-based analysis. This previous work required all data to be passed to the cloud in aggregate form, limiting security. We extend this model to incorporate federated learning, allowing for distributed training while maintaining high accuracy and privacy. We evaluate the performance of our federated-learning-based model against a traditional centralized model, focusing on accuracy retention, training efficiency, and privacy preservation. Our experiments utilize actual attack data partitioned across multiple nodes. The results demonstrate that this hybrid federated learning not only offers significant advantages in terms of data privacy and scalability but also retains the previous competitive accuracy. This paper also explores the integration of federated learning with cloud-based infrastructure, leveraging platforms such as Databricks and Google Cloud Storage. We discuss the challenges and benefits of implementing federated learning in a distributed environment, including the use of Apache Spark and MLlib for scalable model training. The results show that all the algorithms used maintain an excellent identification accuracy (98% for logistic R=regression, 97% for SVM, and 100% for Random Forest). We also report a very short training time (less than 11 s on a single machine). The previous very low application time is also confirmed (0.16 s for over 1,697,851 packets). Our findings highlight the potential of federated learning as a viable solution for enhancing cybersecurity in IoT ecosystems, paving the way for further research in privacy-preserving machine learning techniques.

The interconnected system consisting of tangible items featuring the capacity to transmit information is called the Internet of Things (IoT). The design encompasses various gadgets, including industrial machinery and electrical appliances. IoT devices are unprotected from safety hazards; eventually, it is important to remain vigilant about this provision to preserve data and establish that IoT systems can withstand new hacking attempts. The research seeks to provide a novel approach for machine learning (ML)--based danger indicator identification in IoT environments. Thus, a Binary Chimpanzee-Optimized Fine-Tuned Linear Least Squares Twin Support Vector Machine (BC-FTLLS-TSVM) method is introduced for detecting attack signs in IoT settings. To improve the efficiency of the proposed threat identification mechanism, an N-BaIoT dataset that accommodates the unpredictability of damaging attacks against IoT gadgets is utilized. The method includes the BCOA to feed the selection of features and greater parameters using the FTLLS-TSVM, to advance the accuracy of monitoring IoT threat signs. The proposed framework is performed by applying Python programming. Various metrics, such as Accuracy (97.50%), Precision (97.85%), F1 Score (98.35%), and False Positive Rate (FPR) (2.5%), were evaluated during the validation phase to evaluate the proposed BC-FTLLS-TSVM method. The results of the experiment show that the BC-FTLLS-TSVM paradigm procures improved classification of hazard signs in an IoT environment compared to other existing techniques. By leveraging optimized feature selection and fine-tuning through BCOA and FTLLS-TSVM, the proposed method creates effective detection of security threats. The results emphasize the ability of this approach to increase the defense and IoT systems' resistance to emerging cyber threats.

In the face of constantly changing cyber threats, a variety of actions, tools, and regulations must be considered to safeguard information assets and guarantee the confidentiality, reliability, and availability of digital resources. The purpose of this research is to create an artificial intelligence (AI)-driven system to enhance sustainability for cyber threat detection in Internet of Things (IoT) environments. This study proposes a modern technique named Artificial Fish Swarm-driven Weight-normalized Adaboost (AF-WAdaBoost) for optimizing accuracy and sustainability in identifying attacks, thus contributing to heightening security in IoT environments. CICIDS2017, NSL-KDD, and UNSW-NB15 were used in this study. Min-max normalization is employed to pre-process the obtained raw information. The proposed model AF-WAdaBoost dynamically adjusts classifiers, enhancing accuracy and resilience against evolving threats. Python is used for model implementation. The effectiveness of the suggested AF-WAdaBoost model in identifying different kinds of cyber-threats in IoT systems is examined through evaluation metrics like accuracy (98.69%), F-measure (94.86%), and precision (95.72%). The experimental results unequivocally demonstrate that the recommended model performed better than other traditional approaches, showing essential enhancements in accuracy and strength, particularly in a dynamic environment. Integrating AI-driven detection balances offers sustainability in cybersecurity, ensuring the confidentiality, reliability, and availability of information assets, and also helps in optimizing the accuracy of systems.

Due to the advanced growth in the development of artificial intelligence (AI) and the Internet of Things (IoT) environment in smart societies, the identification of attacks and anomalies in the IoT environment has become more challenging. Owing to a raised utilization of IoT models in various fields, threats as well as attacks are increased significantly, which spoils the efficiency of the IoT model. In this chapter, an AI-based improved grasshopper optimization algorithm with tumbling effect (IGO-T) for attack and anomaly detection is presented for IoT sites. The presented IGO-T model will perform effective and rapid attack and anomaly identification in the IoT infrastructure. To improve the outcome of the grasshopper optimization algorithm, the tumbling effect is integrated into it. For evaluation purposes, a freely accessible dataset from Kaggle is employed. The dataset holds a total of 357,952 instances along with 13 attributes. The simulation outcome exhibited maximum performance with the accuracy of 99.6% in the training and testing datasets.

The Internet of Things (IoT) is an important component of the smart environment, which produces a large volume of data that is considered challenging to handle. In addition, the IoT architecture is vulnerable to many cyberattacks that can target operational devices. Therefore, there is a need for monitoring IoT traffic to analyze, detect malicious activity, and classify cyberattack types. This research proposes a security framework to monitor asymmetrical network traffic in an IoT environment. The framework offers a network intrusion detection system (NIDS) to detect and classify cyberattacks, implemented using a machine learning (ML) model residing in the middleware layer of the IoT architecture. A dimensionality reduction technique known as principal component analysis (PCA) is utilized to facilitate data transmission, which is intended to be sent from the middleware layer to the cloud layer with reduced complexity and fewer unnecessary inputs without compromising the information content. Therefore, the reduced IoT traffic data are sent to the cloud and the PCA data are retransformed to approximate the original data for visualizing the IoT traffic. The NIDS is responsible for reporting the attack type to the cloud in the event of an attack. Our findings indicate that the proposed framework has promising results in classifying the attack type, which achieved a classification accuracy of 98%. In addition, the dimension of the IoT traffic data is reduced by around 50% and it has a similarity of around 90% compared to the original data.

The rapid growth of Internet of Things (IoT) devices, including smartwatches, home assistants, and connected appliances, has brought significant convenience to daily life, but it has also introduced serious security challenges. These devices often transmit sensitive data, making them vulnerable to theft, misuse, and unauthorized access. Current security measures are insufficient to address the complex and evolving nature of IoT systems, leaving many of them exposed to potential breaches and cyberattacks. This review explores recent developments in IoT security, focusing on how advanced technologies, such as machine learning, can be utilized to enhance the protection of IoT systems. The main objective of this paper is to examine potential solutions to the security problems that arise in IoT environments. It includes a thorough analysis of recent research and technological innovations in the field, with a particular emphasis on how different security methods are applied across IoT systems. By identifying the most common security vulnerabilities and outlining their impact on IoT networks, the review suggests improved methods to safeguard IoT data and ensure privacy. The findings aim to support researchers, developers, and businesses in designing more secure IoT solutions, and contribute to the establishment of stronger data protection policies. Ultimately, the review serves as a resource for those seeking to enhance the security of IoT devices and systems in an increasingly interconnected world.