Abstract:The Internet of Things (IoT) has gained popularity with interconnected devices and diverse network applications, leading to increased vulnerability of sensitive data to security threats. Many researchers have focused on intrusion detection without considering prevention mechanisms. To overcome these issues, we propose the honeypot and blockchain-based intrusion detection and prevention (HB-IDP) model, in which edge computing is introduced to reduce the latency during communication. Initially, three-fold authentication is performed for entities (users, devices, and gateway) to ensure legitimacy using the camellia encryption algorithm (CEA), which provides secret keys. The proposed datasets (i.e., UNSW-NB15 and BoT-IoT) are pre-processed at the gateway using min–max normalization to reduce redundancy and complexity during feature extraction and classification. Signature-based intrusion detection is performed on the pre-processed data, with known attacks classified into three classes (normal, malicious, and suspicious) using the improved isolation forest (IIF) algorithm. Suspicious data are forwarded for anomaly detection to the edge level; here, a honeypot is deployed to attract the attacker’s patterns. Ensemble learning technique, including multi-layer perceptron (MLP), general adversarial network (GAN), and lightweight convolutional neural Network (LCNN), is applied to classify suspicious packet behaviors. Once intrusions are detected, the proposed work prevents future intrusions by generating reports, which are then encrypted by the CEA algorithm and provided to legitimate users. All transactions (i.e., key generation, report generation, and attacker patterns) are stored in the blockchain. The HB-IDP model’s performance and effectiveness were evaluated using network simulator 3.26 (NS-3.26), showcasing its superiority over existing approaches.

AntiConcealer: Reliable Detection of Adversary Concealed Behaviors in EdgeAI Assisted IoT

Honey-block: Edge Assisted Ensemble Learning Model for Intrusion Detection and Prevention Using Defense Mechanism in IoT

ADRIoT: an Edge-Assisted Anomaly Detection Framework Against IoT-Based Network Attacks

Intrusion Detection for Secure Social Internet of Things Based on Collaborative Edge Computing: A Generative Adversarial Network-Based Approach.

Efficient Intrusion Detection Toward IoT Networks Using Cloud–edge Collaboration

Efficient Fault-Tolerant Information Barrier Coverage in Internet of Things

EdgeShield: A Universal and Efficient Edge Computing Framework for Robust AI

Cyber situation perception for Internet of Things systems based on zero-day attack activities recognition within advanced persistent threat

IoT-KEEPER: Detecting Malicious IoT Network Activity Using Online Traffic Analysis at the Edge

A Trusted Edge Computing System Based on Intelligent Risk Detection for Smart IoT

A Collaborative Stealthy DDoS Detection Method Based on Reinforcement Learning at the Edge of Internet of Things

A Collaborative Stealthy DDoS Detection Method based on Reinforcement Learning at the Edge of the Internet of Things

Blockchain based AI-enabled Industry 4.0 CPS Protection against Advanced Persistent Threat

Trusted Edge Computing System Based on Intelligent Risk Detection for Smart IoT

Intelligent Intrusion Detection for Internet of Things Security: A Deep Convolutional Generative Adversarial Network-enabled Approach

Advancing IoT security: a comprehensive AI-based trust framework for intrusion detection

Intelligent Threat Detection—AI-Driven Analysis of Honeypot Data to Counter Cyber Threats

Idetector: A Novel Real-Time Intrusion Detection Solution for IoT Networks

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

A Blended Deep Learning Intrusion Detection Framework For Consumable Edge-Centric IoMT Industry

Federated Edge Intelligence for Enhanced Security in Consumer Intermittent Healthcare Devices Using Adversarial Examples