Abstract:Introduction The convergence of the Internet of Anything (IoX), software-defined communication layer, and sophisticated cloud platform has steered the dawn of the fourth industrial revolution era (Industry 4.0). The technological leap forward has given shelter to the umbrella of cyber-physical systems such as Smart Grids, Agriculture, and Healthcare. The exponential growth of vulnerable spots (the Internet of Things) in multi-layer cyber-physical systems is involuntarily contributing to malignant IoT-generated denial-of-service attacks. The IoT devices manifest a high degree of diversity in traffic patterns, and a single dataset is insufficient to cover fiducial attack scenarios. In addition, the research community is pressing to overcome other roadblocks, such as an optimal architecture for solution efficacy, performance issues, and the need for comprehensive validation of the proposed solutions. Methods The paper offers a five-stage defense framework for building a mitigation against IoT-based DDoS attacks. The article brings forth an amalgamated dataset concocted from InSDN, BoT-IoT, and UNSW-Sydney datasets and a simulated dataset for IoT-DDoS to the research community. The paper employs a multi-stage Stack-Ensembled framework at the heart of the solution pillared on physical devices' behavioral attributes, resulting in a universal defense approach. The experiment leverages fog computing with distributed computational nodes to reduce response latency. Furthermore, the paper implements attack-detection-as-a-service on top of the Docker framework for a cost-effective, reusable, and portable framework. The novel design of the framework presents a light mitigation scheme to the SDN controller, ensuring a negligible impact on the controller's performance. Results and Discussion The hand-crafted feature selection process reduced the features by 80%, demonstrating a high accuracy of 99.99% with benchmark datasets, 98.84% accuracy in the simulation environment, and collateral damage of 1.52%. The experiment observes encouraging values for vital performance parameters that researchers often miss to discuss. Furthermore, the paper thoroughly analyzes IoT-DDoS mitigation framework performance parameters.

Defending Against DDOS Attacks on IoT Network Throughput: A Trust-Stackelberg Game Model

DDoS Defense for IoT: A Stackelberg Game Model-Enabled Collaborative Framework

Optimal control of DDoS defense with multi-resource max-min fairness

Game Strategies for Distributed Denial of Service Defense in the Cloud of Things

An effective DDoS attack mitigation strategy for IoT using an optimization-based adaptive security model

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Differential Game Approach for Attack-Defense Strategy Analysis in Internet of Things Networks

Dynamic Anti-Jamming Strategy in SIoT: A Stackelberg-Matching Game Approach

A Dynamic Game Approach to Designing Secure Interdependent IoT-Enabled Infrastructure Network

A Game-Theoretic Model On Coalitional Attacks In Smart Grid

Proactive Defense Against Physical Denial of Service Attacks using Poisson Signaling Games

A multi-point collaborative DDoS defense mechanism for IIoT environment

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

DDoS Detection for 6G Internet of Things: Spatial-Temporal Trust Model and New Architecture

Too Expensive to Attack: A Joint Defense Framework to Mitigate Distributed Attacks for the Internet of Things Grid

Real-Time DDoS Defense in 5G-Enabled IoT: A Multidomain Collaboration Perspective

Dynamic threshold strategy optimization for security protection in Internet of Things: An adversarial deep learning‐based game‐theoretical approach

Foggier Skies, Clearer Clouds: A Real-time IoT-DDoS Attack Mitigation Framework in Fog-Assisted Software-defined Cyber-Physical Systems

Quantitative Analysis of DoS Attacks and Client Puzzles in IoT Systems

Game-theoretical Model for Dynamic Defense Resource Allocation in Cyber-physical Power Systems Under Distributed Denial of Service Attacks