Abstract:The internet of things (IoT) has prepared the way for a highly linked world, in which everything is interconnected, and information exchange has become more easily accessible via the internet, making it feasible for various applications that enrich the quality of human life. Despite such a potential vision, users’ privacy on these IoT devices is a significant concern. IoT devices are subject to threats from hackers and malware due to the explosive expansion of IoT and its use in commerce and critical infrastructures. Malware poses a severe danger to the availability and reliability of IoT devices. If left uncontrolled, it can have profound implications, as IoT devices and smart services can collect personally identifiable information (PII) without the user’s knowledge or consent. These devices often transfer their data into the cloud, where they are stored and processed to provide the end users with specific services. However, many IoT devices do not meet the same security criteria as non-IoT devices; most used schemes do not provide privacy and anonymity to legitimate users. Because there are so many IoT devices, so much malware is produced every day, and IoT nodes have so little CPU power, so antivirus cannot shield these networks from infection. Because of this, establishing a secure and private environment can greatly benefit from having a system for detecting malware in IoT devices. In this paper, we will analyze studies that have used ML as an approach to solve IoT privacy challenges, and also investigate the advantages and drawbacks of leveraging data in ML-based IoT privacy approaches. Our focus is on using ML models for detecting malware in IoT devices, specifically spyware, ransomware, and Trojan horse malware. We propose using ML techniques as a solution for privacy attack detection and test pattern generation in the IoT. The ML model can be trained to predict behavioral architecture. We discuss our experiments and evaluation using the “MalMemAnalysis” datasets, which focus on simulating real-world privacy-related obfuscated malware. We simulate several ML algorithms to prove their capabilities in detecting malicious attacks against privacy. The experimental analysis showcases the high accuracy and effectiveness of the proposed approach in detecting obfuscated and concealed malware, outperforming state-of-the-art methods by 99.50%, and would be helpful in safeguarding an IoT network from malware. Experimental analysis and results are provided in detail.

ML Privacy Meter: Aiding Regulatory Compliance by Quantifying the Privacy Risks of Machine Learning

An Overview of Privacy in Machine Learning

Survey: Leakage and Privacy at Inference Time

Systematic Evaluation of Privacy Risks of Machine Learning Models

DPMLBench: Holistic Evaluation of Differentially Private Machine Learning

Privacy Threats and Protection in Machine Learning

Privacy-Preserving Machine Learning: Methods, Challenges and Directions

Privacy at a Price: Exploring its Dual Impact on AI Fairness

Privacy Budgeting for Growing Machine Learning Datasets

Unawareness detection: Discovering black-box malicious models and quantifying privacy leakage risks

Rethinking Privacy in Machine Learning Pipelines from an Information Flow Control Perspective

SecureMLDebugger: A Privacy-Preserving Machine Learning Debugging Tool.

Privacy Preservation Using Machine Learning in the Internet of Things

The Impact of Machine Learning Algorithms and Big Data on Privacy in Data Collection and Analysis

InvMetrics: Measuring Privacy Risks for Split Model–Based Customer Behavior Analysis

Towards the Science of Security and Privacy in Machine Learning

SoK: Wildest Dreams: Reproducible Research in Privacy-preserving Neural Network Training

State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey

Representation Magnitude has a Liability to Privacy Vulnerability

Privacy Side Channels in Machine Learning Systems

Machine Learning with Privacy by Knowledge Aggregation and Transfer