An amalgamated correlation and regression based feature selection with ensemble learning approach for IoT network attack detection

Internet of Things (IoT) networks are being designed to connect billions of sensors/devices for an application-specific environment to provide services and carry out special tasks. It enables the virtual connection of the real-world physical devices with Internet cyberspace. While, there is an exponentially growing trend in the use of IoT technology for diverse applications such as smart agriculture, smart industries, smart hospitals, smart homes, etc., there are pressing design issues which affect the IoT network performance in the long run, for example, replacement of batteries for increasing the lifetime of devices to maintain the network longevity. To tackle this challenge, various wireless powered-based energy transfer paradigms were proposed over time. Backscatter communication (BackCom) is likewise one of the energy-efficient solutions proposed, which can satisfy the stringent green communication aspects of IoT networks. To achieve massive connectivity in BackCom-enabled IoT network, selecting a suitable multiple access scheme is also a crucial part. Most multiple access schemes proposed for BackCom systems are based on frequency or timeslots sharing techniques. Multiple access techniques proposed for BackCom IoT system can reap the gain of non-orthogonal multiple access (NOMA) principle. In NOMA, multiple end nodes (ENs) of sensors network is served in the same resource block, thereby, increasing the spectrum efficiency of BackCom IoT system. In this chapter, we discuss the prospects of backscatter technique with application of NOMA for green communication in IoT network.

Background. With the proliferation of Internet of Things (IoT) networks in the digital age, the risk of cyberattacks, especially DDoS attacks, is also increasing. IoT devices such as smart refrigerators, thermostats, webcams and other Internet-connected home appliances are being targeted by attackers who can use them as part of a botnet to conduct DDoS attacks. These devices often have inadequate network security and are rarely updated, making them vulnerable. DDoS attacks can result in significant losses such as lost revenue, reputational damage and costs to restore services. So, the vulnerability of IoT networks to DDoS attacks and the need to develop effective protection measures is a pressing issue. Objective. The purpose of the paper is to analyse software that supports DDoS attacks in IoT networks. Provide general recommendations to help improve approaches to defence measures in IoT networks against DDoS-enabled malware. Methods. Five main DDoS attack models are considered: agent-handler model, reflexive model, IRC-based model, web-based model, and P2P-based model. Three most dangerous software capable of DDoS attacks on IoT networks are analyzed: Mirai, XOR.DDoS and Linux.Hydra. Results. There are many models and methods of DDoS attacks on IoT networks. The most dangerous are Mirai, XOR.DDoS and Linux.Hydra. Each of these software has its own specific characteristics and methods of carrying out attacks. The study also showed that there are several effective measures to counter these attacks, including setting strong passwords, regularly updating software, setting up traffic filters and restricting network access. Conclusions. Key aspects of DDoS attacks, their models and process steps are considered. The paper focuses on the three most dangerous software used to conduct such attacks and provides recommendations on how to counteract them.

A fuzzy based Co-Operative Blackmailing Attack detection scheme for Edge Computing nodes in MANET-IOT environment

Internet of Things (IoT) networks have established unparalleled connection possibilities and convenient features and have set new challenges associated with dubious security barriers and potential attacks. This study evaluates attack detection performance of LSTM-Based Variant models namely LSTM, DeepBiLSTM and BLSTM recurrent neural networks by bringing up experiment analysis of the IoT networks. We evaluate the three models using benchmark IoT dataset in terms of detection accuracy, precision, recall and F1 measure. The experiment results indicate that the three LSTM-based models, LSTM, BiLSTM, and DeepBiLSTM, demonstrate a high level of performance, regardless of the batch size (32, 64, 128, 256, and 512). DeepBiLSTM has a little better overall performance, which validates its soundness and suitability towards scale in detecting attacks in large IoT networks.

The exponential growth of the Internet of Things (IoT) has led to the rapid expansion of interconnected systems, which has also increased the vulnerability of IoT devices to security threats such as distributed denial-of-service (DDoS) attacks. In this paper, we propose a machine learning pipeline that specifically addresses the issue of DDoS attack detection in IoT networks. Our approach comprises of (i) a processing module to prepare the data for further analysis, (ii) a dynamic attribute selection module that selects the most adaptive and productive features and reduces the training time, and (iii) a classification module to detect DDoS attacks. We evaluate the effectiveness of our approach using the CICI-IDS-2018 dataset and five powerful yet simple machine learning classifiers—Decision Tree (DT), Gaussian Naive Bayes, Logistic Regression (LR), K-Nearest Neighbor (KNN), and Random Forest (RF). Our results demonstrate that DT outperforms its counterparts and achieves up to 99.98% accuracy in just 0.18 s of CPU time. Our approach is simple, lightweight, and accurate for detecting DDoS attacks in IoT networks.

The environmental impacts that are associated with the interconnected sensor devices in the Internet of Things (IoT) network are minimized with the utilization of green communication. This is because, when the IoT devices tend to grow, the IoT system becomes more prone to issues regarding the utilization of resources, sustainability, and energy consumption within the communication system. Tuning the communication protocols, lowering the IoT device’s energy usage rate, and establishing an effective technique for the transmission of data are performed. This is achieved by the green communication technique, which aids in the establishment of significant energy savings in the IoT network. For devices with limited power sources, the green communication technology offers an extended battery life. Despite the enormous potential of IoT technology, a number of obstacles need to be overcome, including those related to load balancing, security, storage, privacy, energy management, and device heterogeneity. In response to the challenges posed by conventional models, an innovative solution for the selection of Cluster Head (CH) using a hybrid approach is devised here. The energy consumption of sensor nodes is influenced by various factors, such asCH load, temperature, distance, residual energy, the number of alive nodes, delay, and so on. To address these challenges in IoT networks, a hybrid approach that combines the Squid Game Optimizer (SGO) and the Artificial Gorilla Troops Optimizer (AGTO) for the optimal selection of CH is suggested. The implemented approach is named Hybrid Squid Game with Artificial Gorilla Troops Optimizer (HSG-AGTO). This approach aims to optimize the above-mentioned factors and overcome energy consumption challenges in IoT networks. The effectiveness of the model is validated, and the results demonstrate the superior performance of the suggested model.

Grant-free random access has the potential to sup-port massive connectivity in Internet of Things (IoT) networks, where joint activity detection and channel estimation (JADCE) is a key issue that needs to be tackled. The existing methods for JADCE usually suffer from one of the following limitations: high computational complexity, ineffective in inducing sparsity, and incapable of handling complex matrix estimation. To mitigate all the aforementioned limitations, we in this paper develop an effective unfolding neural network framework built upon the proximal operator method to tackle the JADCE problem in IoT networks, where the base station is equipped with multiple antennas. Specifically, the JADCE problem is formulated as a group-sparse-matrix estimation problem, which is regularized by non-convex minimax concave penalty (MCP). This problem can be iteratively solved by using the proximal operator method, based on which we develop a unfolding neural network structure by parameterizing the algorithmic iterations. By further exploiting the coupling structure among the training parameters as well as the analytical computation, we develop two additional unfolding structures to reduce the training complexity. We prove that the proposed algorithm achieves a linear convergence rate. Results show that our proposed three unfolding structures not only achieve a faster convergence rate but also obtain a higher estimation accuracy than the baseline methods.

In this paper, we address the problem of green Compressed Sensing (CS) reconstruction within Internet of Things (IoT) networks, both in terms of computing architecture and reconstruction algorithms. The approach is novel since, unlike most of the literature dealing with energy efficient gathering of the CS measurements, we focus on the energy efficiency of the signal reconstruction stage given the CS measurements. As a first novel contribution, we present an analysis of the energy consumption within the IoT network under two computing architectures. In the first one, reconstruction takes place within the IoT network and the reconstructed data are encoded and transmitted out of the IoT network; in the second one, all the CS measurements are forwarded to off-network devices for reconstruction and storage, i.e., reconstruction is off-loaded. Our analysis shows that the two architectures significantly differ in terms of consumed energy, and it outlines a theoretically motivated criterion to select a green CS reconstruction computing architecture. Specifically, we present a suitable decision function to determine which architecture outperforms the other in terms of energy efficiency. The presented decision function depends on a few IoT network features, such as the network size, the sink connectivity, and other systems’ parameters. As a second novel contribution, we show how to overcome classical performance comparison of different CS reconstruction algorithms usually carried out w.r.t. the achieved accuracy. Specifically, we consider the consumed energy and analyze the energy vs. accuracy trade-off. The herein presented approach, jointly considering signal processing and IoT network issues, is a relevant contribution for designing green compressive sampling architectures in IoT networks.

Ensemble classification using traffic flow metrics to predict distributed denial of service scope in the Internet of Things (IoT) networks

Destructive cyber-attacks and cybercriminals are increasing with the increase in IoT (Internet of Things) devices globally. This ha/s led to the need for increase in security in IoT systems. Innovative and novel techniques are used by the intruders to accomplish malicious goals effectively through cyber-attacks. An Intrusion Detection System (IDS) is used for classification of attacks in IoT networks based on anomaly detection and machine learning techniques. Inefficiency is observed in the conventional machine learning models and intrusion detection techniques as the network technologies are unpredictable. Accurate identification of various anomalies is possible with deep learning models in several research segments. The input data along with its prominent characteristics may be categorized automatically for classification and anomaly detection using convolutional neural networks (CNN). Faster computations are enabled due to the performance efficiency of CNN. For IoT networks, an intrusion detection model based on anomaly detection is designed and developed in this paper. A multiclass classification framework is created initially using a CNN model. Further, 3D CNN is used for implementation of the proposed model. Various intrusion detection datasets from IoT networks are used for validation of the proposed CNN model. Pre-trained multiclass CNN model is used for implementation of multiclass and binary classification based on transfer learning. When compared to the conventional deep learning models, the proposed multiclass and binary classification framework has attained improved F1 score, recall, precision and accuracy.

Massive multi-player multi-armed bandits for IoT networks: An application on LoRa networks

A blockchain-enabled Model integrates blockchain technology with Intrusion Detection Systems to enhance the security of Internet of Things (IoT) networks. It ensures data integrity, decentralization, and tamper-proof logging of intrusion detection. The approach improves trust, transparency, and real-time threat detection in distributed IoT environments. The existing blockchain-based IDS approaches, Blockchain Enabled (BCE-IoT), uniquely integrate blockchain consensus with federated-style local training, lightweight cryptography, and Shapley Additive Explanations (SHAP)-based explainability, ensuring both security and interpretability in IoT environments. The proposed work combines Blockchain technology with explainable artificial intelligence solutions to create a new cybersecurity Model that strengthens intrusion detection within IoT networks. The proposed model enhances transparency in tracking cyberattacks by combining blockchain security storage capabilities with SHAP, an explainable AI. This research utilises machine learning and artificial intelligence to detect threats in real-time, countering Distributed Denial of Service (DDoS), Denial of Service (DoS), scanning, Cross-Site Scripting (XSS), injection, password, and backdoor attacks. BCE-IoT delivers more precise security by combining blockchain’s permanent data features and AI anomaly detectors, thereby reducing security alert mistakes. The performance effectiveness of Blockchain-Enabled IoT surpasses that of the Content Integrity Detection System. It combines Blockchain and Software-Defined Networking to enhance security in network environments, utilising blockchain-based mutual confirmation for software-defined networking to detect and block cyber threats. The evaluation establishes BCE-IoT as an effective IoT network security solution that delivers strong cybersecurity features, is adaptable to modern connected environments, and offers interpretable security solutions. The performance evaluations demonstrate that BCE-IoT provides a robust, flexible, and interpretable cybersecurity solution suitable for modern IoT environments.

The rapid expansion of Internet of Things (IoT) networks has brought significant challenges, particularly in optimizing energy consumption, maintaining security, and managing dynamic network conditions. Many existing artificial intelligence (AI)-based solutions, while effective, often demand substantial computational resources, making them unsuitable for edge environments with limited energy and processing capabilities. This study introduces an innovative lightweight AI framework specifically designed to enhance both security and energy efficiency in IoT networks operating at the edge. By combining ensemble learning techniques with attention-based neural networks, the framework enables real-time anomaly detection and optimized resource allocation across dynamic IoT systems. Analytical modeling and simulation results indicate that the proposed approach achieves a 30% reduction in energy usage and a 25% improvement in anomaly detection accuracy compared to existing methods. Additionally, its scalable architecture ensures broad applicability across smart cities, critical infrastructure monitoring, and healthcare IoT systems. By addressing these key gaps, this research contributes to advancing the practical deployment of IoT networks in diverse real-world applications.

The rapid expansion of Internet of Things (IoT) networks has heightened the risk of sophisticated malware attacks due to the inherent vulnerabilities of resource-constrained devices. This study proposes the SEQIRE model - a novel compartmental framework inspired by epidemiological modeling - to analyze, detect, and control malware propagation in IoT ecosystems. The model extends classical SEIR-type structures by incorporating two additional compartments: Quarantined (Q) and Enhanced Monitoring (E*), enabling a more accurate representation of real-world cybersecurity interventions. A system of nonlinear ordinary differential equations was formulated to describe device transitions across six compartments: Susceptible, Exposed, Quarantined, Infected, Recovered, and Enhanced Monitoring. Theoretical analyses, including boundedness, positivity, and Lyapunov-based global stability, were conducted to ensure model feasibility. The basic reproduction number R0​ was derived using the Next-Generation Matrix method as a threshold condition for malware persistence. Numerical simulations using Python’s Runge-Kutta (RK45) method over a 200-day window validated the model's predictive performance. Key parameters - quarantine rate (γ), recovery rate (μ), and monitoring activation rate (θ) - were varied to assess their influence on infection suppression. Results indicate that increasing these parameters significantly reduces infection peaks and accelerates system stabilization. The SEQIRE model offers both analytical rigor and practical utility for dynamic threat mitigation in IoT networks. Its flexibility allows for deployment in real-time detection systems and supports decision-making for resource-optimized cybersecurity strategies.

Context: The concern for security in IoT networks is becoming increasingly common, considering the accelerated use of these devices in recent years. Problem: Traditional methods for detecting attacks in IoT networks are ineffective due to device heterogeneity. While learning approaches show promise in threat detection, the computational limitations of IoT devices make it challenging to implement these solutions. Solution: This work proposes a deep learning solution for IoT attack detection, focusing on efficient threat mitigation using the Programming Protocol-independent Packet Processors (P4) language, adaptable feature extraction for algorithm inference, and execution on SBC devices. SI theory: This work is based on General Systems Theory and Machine Learning Theory, emphasizing integrating components in IoT networks and learning for attack detection. Methods: This study uses a case study to evaluate the effectiveness of deep learning algorithms in detecting attacks in IoT networks, adopting a descriptive and quantitative approach with metrics like accuracy and F1 score. Results: In our work, the Long Short Term Memory (LSTM), Convolutional Neural Network (CNN), and Gated Recurrent Unit (GRU) algorithms achieved accuracy rates of 96.9%, 95.6%, and 93.9%, respectively. However, the CNN model was selected for the final implementation due to its superior inference time and resource consumption performance. Contributions and impact in the IS area: This work contributes to Information Systems by integrating deep learning and P4 programming for attack detection and mitigation in IoT networks, enhancing security, and promoting further research in the field.