Abstract:The Message Queuing Telemetry Transport (MQTT) protocol stands out as one of the foremost and widely recognized messaging protocols in the field. It is often used to transfer and manage data between devices and is extensively employed for applications ranging from smart homes and industrial automation to healthcare and transportation systems. However, it lacks built-in security features, thereby making it vulnerable to many types of attacks such as man-in-the-middle (MitM), buffer overflow, pre-shared key, brute force authentication, malformed data, distributed denial-of-service (DDoS) attacks, and MQTT publish flood attacks. Traditional methods for detecting MQTT attacks, such as deep neural networks (DNNs), k-nearest neighbor (KNN), linear discriminant analysis (LDA), and fuzzy logic, may exist. The increasing prevalence of device connectivity, sensor usage, and environmental scalability become the most challenging aspects that novel detection approaches need to address. This paper presents a new solution that leverages an H2O-based distributed machine learning (ML) framework to improve the security of the MQTT protocol in networks, particularly in IoT environments. The proposed approach leverages the strengths of the H2O algorithm and architecture to enable real-time monitoring and distributed detection and classification of anomalous behavior (deviations from expected activity patterns). By harnessing H2O's algorithms, the identification and timely mitigation of potential security threats are achieved. Various H2O algorithms, including random forests, generalized linear models (GLMs), gradient boosting machine (GBM), XGBoost, and the deep learning (DL) algorithm, have been assessed to determine the most reliable algorithm in terms of detection performance. This study encompasses the development of the proposed algorithm, including implementation details and evaluation results. To assess the proposed model, various evaluation metrics such as mean squared error (MSE), root-mean-square error (RMSE), mean per class error (MCE), and log loss are employed. The results obtained indicate that the H2OXGBoost algorithm outperforms other H2O models in terms of accuracy. This research contributes to the advancement of secure IoT networks and offers a practical approach to enhancing the security of MQTT communication channels through distributed detection and classification techniques.

Safeguarding IoT networks against DDoS attacks using deep learning based zero trust network access

A Deep Learning-Based Intrusion Detection System for MQTT Enabled IoT

Effective DDoS Mitigation Via ML-Driven In-network Traffic Shaping

Detection of DoS Attacks for IoT in Information-Centric Networks Using Machine Learning: Opportunities, Challenges, and Future Research Directions

A Novel Deep Learning-Based Intrusion Detection System for IoT Networks

Multi-Level Deep Neural Network for Distributed Denial-of-Service Attack Detection and Classification in Software-Defined Networking Supported Internet of Things Networks

5G Networks and IoT Devices: Mitigating DDoS Attacks with Deep Learning Techniques

Secure Enhancement for MQTT Protocol Using Distributed Machine Learning Framework

Enhancing the security in IoT and IIoT networks: An intrusion detection scheme leveraging deep transfer learning

Adaptive Machine Learning Based Distributed Denial-of-Services Attacks Detection and Mitigation System for SDN-Enabled IoT

An Efficient Deep Learning-Based Detection and Classification System for Cyber-Attacks in IoT Communication Networks

Strengthening network DDOS attack detection in heterogeneous IoT environment with federated XAI learning approach

A Real-Time Intrusion Detection System for DoS/DDoS Attack Classification in IoT Networks Using KNN-Neural Network Hybrid Technique

Software-Defined-Networking-Based One-versus-Rest Strategy for Detecting and Mitigating Distributed Denial-of-Service Attacks in Smart Home Internet of Things Devices

Hybrid architecture for mitigating DDoS and other intrusions in SDN-IoT using MHDBN-W deep learning model

Deep Learning Based Device Classification Method for Safeguarding Internet of Things.

Advanced machine learning approach for DoS attack resilience in internet of vehicles security

A hybrid deep learning-based intrusion detection system for IoT networks

Deep learning in distributed denial-of-service attacks detection method for Internet of Things networks

Deep Multi-Locality Convolutional Neural Network for DDoS Detection in Smart Home IoT.

Enhancing Cybersecurity in IoT Networks: A Deep Learning Approach to Anomaly Detection