Abstract:The rise of smart cities, smart homes, and smart health powered by the Internet of Things (IoT) presents significant challenges in design, deployment, and security. The seamless data processing across a complex network of interconnected devices in unprotected conditions makes it vulnerable to potential breaches, underscoring the need for robust security at various levels of the network. Traditional security methods based on statistics often struggle to comprehend data patterns and provide the desired level of security. This work proposes a novel hybrid framework that combines Whale Optimization and Deep Learning with a trust-index to identify malicious nodes engaging in various attacks such as DoS, DDoS, Drop attack, and Tamper Attacks, thus enhancing IoT node security. The developed framework first calculates a trust-index score for IoT nodes based on drop attack, tamper attack, replay attack, and multiple-max attack. Subsequently, it utilizes the trust index score in the Optimized Neural Network model to effectively identify the malicious IoT node. The neural network optimization is achieved through a fitness function that determines optimal weights using the Whale Optimization Algorithm. The proposed framework has been tested across varying network sizes, comprising 100, 500, and 1000 nodes. The resulting outcomes were evaluated against benchmark security methods such as Logical regression, Random Forest, Support Vector Machine, Bayesian models, ANN, Elephant herding optimization, and Lion algorithm using metrics like specificity, sensitivity, accuracy, precision, False Positive Rate, False Negative Rate, False Discovery Rate, Error, F1 score, Matthews Correlation Coefficient, and Negative Predictive Value. The results reveal a notable enhancement in accuracy (26.63%, 13.04%, 17.78%, 30.52%, 22.45%, 4.26%, and 2.24%) for a 100-node network when compared to the benchmark security methods. Furthermore, the proposed framework consistently demonstrates strong performance even when applied to larger IoT networks with a higher node count.

PlumeWalk: Towards Threat Provenance Localization for IoT Networks.

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Provenance-enabled Packet Path Tracing in the RPL-based Internet of Things

TRACEGADGET: Detecting and Tracing Network Level Attack Through Federal Provenance Graph

Attack detection and mitigation using Intelligent attack graph model for Forensic in IoT Networks

PROV5GC: Hardening 5G Core Network Security with Attack Detection and Attribution Based on Provenance Graphs

Combating Advanced Persistent Threats: Challenges and Solutions

Intrusion Detection using Network Traffic Profiling and Machine Learning for IoT

A Hybrid Framework Leveraging Whale Optimization and Deep Learning With Trust-Index for Attack Identification in IoT Networks

A Provenance-Aware Distributed Trust Model for Resilient Unmanned Aerial Vehicle Networks

PathGuard: Trustworthy Routing for Sustainable and Secure IoT-WSN Networks

Threat analysis model to control IoT network routing attacks through deep learning approach

SPRINKLER: A Multi-RPL Man-in-the-Middle Identification Scheme in IoT Networks

Enhancing IoT Device Security through Network Attack Data Analysis Using Machine Learning Algorithms

threaTrace: Detecting and Tracing Host-based Threats in Node Level Through Provenance Graph Learning

Large-Scale Security Analysis of Real-World Backend Deployments Speaking IoT-Focused Protocols

Security Approaches for Data Provenance in the Internet of Things: A Systematic Literature Review

Scalable Attestation Protocol Resilient to Physical Attacks for IoT Environments

Unveiling Behavioral Transparency of Protocols Communicated by IoT Networked Assets (Full Version)

I Still See You: Why Existing IoT Traffic Reshaping Fails

A trusted mechanism against device reputation attacks in Web‐of‐Things applications