Batch‐based security‐aware spectrum sharing with simultaneous assignment decisions in time‐critical IoT networks with cognitive radio capabilities

The environmental impacts that are associated with the interconnected sensor devices in the Internet of Things (IoT) network are minimized with the utilization of green communication. This is because, when the IoT devices tend to grow, the IoT system becomes more prone to issues regarding the utilization of resources, sustainability, and energy consumption within the communication system. Tuning the communication protocols, lowering the IoT device’s energy usage rate, and establishing an effective technique for the transmission of data are performed. This is achieved by the green communication technique, which aids in the establishment of significant energy savings in the IoT network. For devices with limited power sources, the green communication technology offers an extended battery life. Despite the enormous potential of IoT technology, a number of obstacles need to be overcome, including those related to load balancing, security, storage, privacy, energy management, and device heterogeneity. In response to the challenges posed by conventional models, an innovative solution for the selection of Cluster Head (CH) using a hybrid approach is devised here. The energy consumption of sensor nodes is influenced by various factors, such asCH load, temperature, distance, residual energy, the number of alive nodes, delay, and so on. To address these challenges in IoT networks, a hybrid approach that combines the Squid Game Optimizer (SGO) and the Artificial Gorilla Troops Optimizer (AGTO) for the optimal selection of CH is suggested. The implemented approach is named Hybrid Squid Game with Artificial Gorilla Troops Optimizer (HSG-AGTO). This approach aims to optimize the above-mentioned factors and overcome energy consumption challenges in IoT networks. The effectiveness of the model is validated, and the results demonstrate the superior performance of the suggested model.

The rapid proliferation of Internet of Things (IoT) devices has ushered in a new era of connectivity and data exchange, revolutionizing various industries. However, the inherent vulnerabilities in traditional centralized transaction systems pose significant security challenges, particularly when dealing with sensitive data generated by IoT devices. This paper introduces an ICAA (Integrity Consensus Authorization Algorithm) for securing transaction records over the IoT network by leveraging Decentralized Distributed Ledger Technology (DDL), integrating the PICA (Proof-of-Integrity Consensus Algorithm) and CTAP (Context-Aware Transaction Authorization Protocol). The proposed system addresses the limitations of centralized architectures by employing a decentralized ledger, ensuring transparency, immutability, and tamper-resistant transaction records. The Proof-of-Integrity Consensus Algorithm enhances the security of the network by validating and confirming transactions based on the integrity of the data stored in the distributed ledger. This consensus mechanism minimizes the risk of fraudulent activities and unauthorized modifications, making it well-suited for the dynamic and distributed nature of IoT environments. Furthermore, the integration of the Context-Aware Transaction Authorization Protocol enhances the adaptability of the system to the diverse contexts in which IoT devices operate. The synergy between the Proof-of-Integrity Consensus Algorithm and the Context-Aware Transaction Authorization Protocol creates a comprehensive and secure framework for managing transaction records in IoT networks. . The proposed HGGC is 5.026% better than the ECMQV-MAC, 0.4215% better than QKD, and 0.0843% better than OTP in the nodes 200. The proposed model contributes to the establishment of a trustworthy and resilient infrastructure for the IoT, laying the foundation for secure and transparent transactions in the connected world.

With the growth of wireless network technology-based devices, identifying the communication behaviour of wireless connectivity enabled devices, e.g. Internet of Things (IoT) devices, is one of the vital aspects, in managing and securing IoT networks. Initially, devices use frames to connect to the access point on the local area network and then, use packets of typical communication protocols through the access point to communicate over the Internet. Toward this goal, network packet and IEEE 802.11 media access control (MAC) frame analysis may assist in managing IoT networks efficiently, and allow investigation of inclusive behaviour of IoT devices. This paper presents network traffic traces data of D-Link IoT devices from packet and frame levels. Data collection experiment has been conducted in the Network Systems and Signal Processing (NSSP) laboratory at Universiti Brunei Darussalam (UBD). All the required devices, such as IoT devices, workstation, smartphone, laptop, USB Ethernet adapter, and USB WiFi adapter, have been configured accordingly, to capture and store network traffic traces of the 14 IoT devices in the laboratory. These IoT devices were from the same manufacture (D-Link) with different types, such as camera, home-hub, door-window sensor, and smart-plug.

Background. With the proliferation of Internet of Things (IoT) networks in the digital age, the risk of cyberattacks, especially DDoS attacks, is also increasing. IoT devices such as smart refrigerators, thermostats, webcams and other Internet-connected home appliances are being targeted by attackers who can use them as part of a botnet to conduct DDoS attacks. These devices often have inadequate network security and are rarely updated, making them vulnerable. DDoS attacks can result in significant losses such as lost revenue, reputational damage and costs to restore services. So, the vulnerability of IoT networks to DDoS attacks and the need to develop effective protection measures is a pressing issue. Objective. The purpose of the paper is to analyse software that supports DDoS attacks in IoT networks. Provide general recommendations to help improve approaches to defence measures in IoT networks against DDoS-enabled malware. Methods. Five main DDoS attack models are considered: agent-handler model, reflexive model, IRC-based model, web-based model, and P2P-based model. Three most dangerous software capable of DDoS attacks on IoT networks are analyzed: Mirai, XOR.DDoS and Linux.Hydra. Results. There are many models and methods of DDoS attacks on IoT networks. The most dangerous are Mirai, XOR.DDoS and Linux.Hydra. Each of these software has its own specific characteristics and methods of carrying out attacks. The study also showed that there are several effective measures to counter these attacks, including setting strong passwords, regularly updating software, setting up traffic filters and restricting network access. Conclusions. Key aspects of DDoS attacks, their models and process steps are considered. The paper focuses on the three most dangerous software used to conduct such attacks and provides recommendations on how to counteract them.

Internet of Things (IoT) have opened the door to a world of unlimited possibilities for implementations in varied sectors in society, but it also has many challenges. One of those challenges is security and privacy. IoT devices are more susceptible to security threats and attacks. Due to constraints of the IoT devices such as area, power, memory, etc., there is a lack of security solutions that are compatible with IoT devices and applications, which is leading this world of securely connected things to the “internet of insecure things.” A promising solution to this problem is going beyond the standard or classical techniques to implementing the security solutions in the hardware of the IoT device. The integration of emerging technologies in IoT networks, such as machine learning, blockchain, fog/edge/cloud computing, and quantum computing have added more vulnerable points in the network. This paper introduces a comprehensive study on IoT security threats and solutions. Additionally, this survey outlines how emerging technologies such as machine learning and blockchain are integrated in IoT, challenges resulted from this integration, and potential solutions to these challenges. The paper utilizes the 4-layer IoT architecture as a reference to identify security issues with corresponding solutions.

The cell-free (CF) network architecture has promising applications in Internet of Things (IoT) networks due to its dynamic and adaptive nature in resource allocation. However, due to the openness of wireless channels and the information interaction of sensitive data, the security issues of CF IoT networks have become more severe, especially in the case of powerful opponents. In this article, a high-level secure transmission technique is utilized to protect the privacy of users, which is called covert communication. Specifically, in the CF IoT network conceived, one IoT device secretly transmits sensitive information to an access point (AP) under the cover of a selected jammer to avoid being detected by other curious IoT devices, which are regarded as potential eavesdroppers (Eves) and determined by the central processing unit (CPU) based on greedy degree. Then, we analyze the joint impact of jamming and greedy degree on the detection error probability (DEP) for Eve, and determine Eve’s minimum DEP as well as the corresponding optimal threshold. To enhance energy efficiency while ensuring communication security, three jamming scheduling schemes have been proposed, namely, the jamming scheduling for both the receiver (Bob) and Eve (JSBE), the jamming scheduling for Eve (JSE), and the jamming scheduling for Bob (JSB). Numerical results indicate that greedy degree dominates the average minimum DEP for Eve when IoT devices tend to be lightweight. Furthermore, JSBE scheme demonstrates superiority in terms of covert rate, covert outage probability (COP), and covert energy efficiency (CEE), which provides an effective solution for high-security transmission of energy-constrained nodes in CF IoT networks.

Extensive internet of things (IoT) devices being in-fected by malware are an increasingly important viable objective in IoT cyberattacks e.g., botnet, virus, trojan, etc. The botnets got leverage from unsecured IoT devices (e.g., CCTV, Raspberry Pi, Arduino Uno, ESP8266, etc) that operates by using the Internet traffic. In recent year, the high-profile IoT device’s vendor and the researcher from all over universities are exploring the robustness of IoT devices against botnet attacks. This research uses a deep learning approach to prevent botnet attacks on IoT networks. The deep residual one-dimensional CNN (1DCNN) model as the proposed method is used for botnet traffic detection. Two algorithms are provided: data processing for the N-BaIoT dataset and IoT botnet detection training and testing. For data processing, training, and testing, the datasets were evaluated, and the model was optimized with different optimizers. This research used RMS Prop, ADaDelta, AdaGrad, AdaMax, and Adam as optimizers and the CNN was compared with LSTM, CNN with RNN, and Deep residual 1DCNN, respectively. The results showed that Deep Residual 1DCNN with Adam has the highest training accuracy of 88.67%, 88.67% for validation accuracy, and 88.53%for test accuracy.

Optimizing beamforming in IoT-WET: A symbiotic-based approach under imperfect channel state information

Comparative study of IoT forensic frameworks

The need for secure Internet of Things (IoT) devices is growing as IoT\ndevices are becoming more integrated into vital networks. Many systems rely on\nthese devices to remain available and provide reliable service. Denial of\nservice attacks against IoT devices are a real threat due to the fact these low\npower devices are very susceptible to denial-of-service attacks. Machine\nlearning enabled network intrusion detection systems are effective at\nidentifying new threats, but they require a large amount of data to work well.\nThere are many network traffic data sets but very few that focus on IoT network\ntraffic. Within the IoT network data sets there is a lack of CoAP denial of\nservice data. We propose a novel data set covering this gap. We develop a new\ndata set by collecting network traffic from real CoAP denial of service attacks\nand compare the data on multiple different machine learning classifiers. We\nshow that the data set is effective on many classifiers.\n

Edge computing provides cloud services at the edge of the network for Internet of Things (IoT) devices. It aims to address low latency of the network and alleviates data processing of the cloud. This “cloud-edge-device” paradigm brings convenience as well as challenges for location-privacy protection of the IoT. In the edge computing environment, the fixed edge equipment supplies computing services for adjacent IoT devices. Therefore, edge computing suffers location leakage as the connection and authentication records imply the location of IoT devices. This article focuses on the location awareness in the edge computing environment. We adopt the “deniability” of authentication to prevent location leakage when IoT devices connect to the edge nodes. In our solution, an efficient deniable authentication based on a two-user ring signature is constructed. The robustness of authentication makes the fixed edge equipment accept the legal end devices. Besides, the deniability of authentication cannot convince any third party that the fact of this authentication occurred as communication transcript is no longer an evidence for this connection. Therefore, it handles the inherent location risk in edge computing. Compared to efficient deniable authentications, our protocol saves 10.728% and 14.696% computational cost, respectively.

Internet of Things (IoT) has been thriving in recent years, playing an important role in a multitude of various domains, including industry 4.0, smart transportation, home automation, and healthcare. As a result, a massive number of IoT devices are deployed to collect data from our surrounding environment and transfer these data to other systems over the Internet. This may lead to cybersecurity threats, such as denial of service attacks, brute‐force attacks, and unauthorized accesses. Unfortunately, many IoT devices lack solid security mechanisms and hardware security supports because of their limitations in computational capability. In addition, the heterogeneity of devices in IoT networks causes nontrivial challenges in detecting security threats. In this article, we present a collaborative intrusion detection system (IDS), namely, MidSiot, deployed at both Internet gateways and IoT local gateways. Our proposed IDS consists of three stages: (1) classifying the type of each IoT device in the IoT network; (2) differentiating between benign and malicious network traffic; and (3) identifying the type of attacks targeting IoT devices. The last two stages are handled by the Internet gateways, whereas the first stage is on the local gateway to leverage the computational resources from edge devices. The evaluation results on three popular IDS datasets (IoTID20, CIC‐IDS‐2017, and BOT‐IoT) indicate our proposal could detect seven common cyberattacks targeting IoT devices with an average accuracy of 99.68% and outperforms state‐of‐the‐art IDSs. This demonstrates that MidSiot could be an effective and practical IDS to protect IoT networks.

In recent years, Internet of Things (IoT) networks have been received much attention due to their intelligence and automation. Numerous devices are deployed in the networks, and many applications are willing to obtain the distribution of IoT devices in one range for data analysis. However, some distributions of IoT devices include sensitive information which may disclose the privacy of their owners. And most IoT devices cannot afford heavy computation because of their low computing power and limited storage capacity. In this paper, we propose a privacy-preserving and efficient scheme that satisfies local differential privacy and supports O(1) -time-complexity range counting query which can find the number of IoT devices in a range. It also allows IoT devices to join or exit dynamically. Finally, theoretical analysis proves that our scheme satisfies local differential privacy, and our experiments show that our range counting query scheme can get the microsecond level.

The ability to deploy such systems throughout a region, or perhaps a nation, will increase as IoT infrastructure develops. Although Internet of Things (IoT) devices are capable of offering intelligent services, the massive amounts of data they gather and analyze pose a severe security threat. Researchers have spent a lot of work building sophisticated NIDS to prevent the exploitation of IoT data in smart applications. However, present methods may be vulnerable to attack, particularly new attacks, due to a lack of sufficient and evenly distributed attack data used to train the detection strategy. This study introduces a original hierarchical adversarial attack (HAA) generation strategy, which in turn targets the convolutional neural network-based intrusion detection in IoT devices with a limited budget, and therefore realizes the level-aware black-box adversarial attack approach. To generate adversarial instances with little disturbance, an intelligent approach is developed that relies on a saliency map methodology. To do this, a shadow CNN framework has been constructed. Using a random walk having restart based hierarchical node selection approach, a subset of the targeted IoT network's nodes with the lowest structural strength are selected. The proposed HAA generation technique is evaluated in comparison to three reference methods using the publicly available data set UNSW-SOSR2019. In a comparison of the two most sophisticated convolutional neural network (CNN) designs, GCN and JK-Net, it was shown that the classification accuracy for NIDS in IoT settings may be reduced by more than 30%.

With rapid advancements in the technology, almost all the devices around are becoming smart and contribute to the Internet of Things (IoT) network. When a new IoT device is added to the network, it is important to verify the authenticity of the device before allowing it to communicate with the network. Hence, access control is a crucial security mechanism that allows only the authenticated node to become the part of the network. An access control mechanism also supports confidentiality, by establishing a session key that accomplishes secure communications in open public channels. Recently, blockchain has been implemented in access control protocols to provide a better security mechanism. The foundation of this survey article is laid on IoT, where a detailed description on IoT, its architecture and applications is provided. Further, various security challenges and issues, security attacks possible in IoT and their countermeasures are also provided. We emphasize on the blockchain technology and its evolution in IoT. A detailed description on existing consensus mechanisms and how blockchain can be used to overpower IoT vulnerabilities is highlighted. Moreover, we provide a comprehensive description on access control protocols. The protocols are classified into certificate-based, certificate-less and blockchain-based access control mechanisms for better understanding. We then elaborate on each use case like smart home, smart grid, health care and smart agriculture while describing access control mechanisms. The detailed description not only explains the implementation of the access mechanism, but also gives a wider vision on IoT applications. Next, a rigorous comparative analysis is performed to showcase the efficiency of all protocols in terms of computation and communication costs. Finally, we discuss open research issues and challenges in a blockchain-envisioned IoT network.