Abstract:Introduction The convergence of the Internet of Anything (IoX), software-defined communication layer, and sophisticated cloud platform has steered the dawn of the fourth industrial revolution era (Industry 4.0). The technological leap forward has given shelter to the umbrella of cyber-physical systems such as Smart Grids, Agriculture, and Healthcare. The exponential growth of vulnerable spots (the Internet of Things) in multi-layer cyber-physical systems is involuntarily contributing to malignant IoT-generated denial-of-service attacks. The IoT devices manifest a high degree of diversity in traffic patterns, and a single dataset is insufficient to cover fiducial attack scenarios. In addition, the research community is pressing to overcome other roadblocks, such as an optimal architecture for solution efficacy, performance issues, and the need for comprehensive validation of the proposed solutions. Methods The paper offers a five-stage defense framework for building a mitigation against IoT-based DDoS attacks. The article brings forth an amalgamated dataset concocted from InSDN, BoT-IoT, and UNSW-Sydney datasets and a simulated dataset for IoT-DDoS to the research community. The paper employs a multi-stage Stack-Ensembled framework at the heart of the solution pillared on physical devices' behavioral attributes, resulting in a universal defense approach. The experiment leverages fog computing with distributed computational nodes to reduce response latency. Furthermore, the paper implements attack-detection-as-a-service on top of the Docker framework for a cost-effective, reusable, and portable framework. The novel design of the framework presents a light mitigation scheme to the SDN controller, ensuring a negligible impact on the controller's performance. Results and Discussion The hand-crafted feature selection process reduced the features by 80%, demonstrating a high accuracy of 99.99% with benchmark datasets, 98.84% accuracy in the simulation environment, and collateral damage of 1.52%. The experiment observes encouraging values for vital performance parameters that researchers often miss to discuss. Furthermore, the paper thoroughly analyzes IoT-DDoS mitigation framework performance parameters.

P2IDF: A Privacy-Preserving based Intrusion Detection Framework for Software Defined Internet of Things-Fog (SDIoT-Fog)

P2TIF: A Blockchain and Deep Learning Framework for Privacy-preserved Threat Intelligence in Industrial IoT

A distributed ensemble design based intrusion detection system using fog computing to protect the internet of things networks

Intrusion Detection Framework for Industrial Internet of Things Using Software Defined Network

Intelligent intrusion detection framework for multi-clouds – IoT environment using swarm-based deep learning classifier

Smart Multistage Privacy-Preserving Framework for Intrusion Detection in Multi-Domain SDN

Intrusion detection in internet of things-based smart farming using hybrid deep learning framework

Advancing IoT security: a comprehensive AI-based trust framework for intrusion detection

Towards Enhancing Privacy-Preservation of a Federated Learning CNN Intrusion Detection System in IoT: Method and Empirical Study

Foggier Skies, Clearer Clouds: A Real-time IoT-DDoS Attack Mitigation Framework in Fog-Assisted Software-defined Cyber-Physical Systems

A differential privacy aided DeepFed intrusion detection system for IoT applications

Optimized common features selection and deep-autoencoder (OCFSDA) for lightweight intrusion detection in Internet of things

AI-based Two-Stage Intrusion Detection for Software Defined IoT Networks

Security and Privacy in Fog/Cloud-based IoT Systems for AI and Robotics

An Efficient Deep Learning Mechanisms for IoT/Non-IoT Devices Classification and Attack Detection in SDN-Enabled Smart Environment

Feature engineering and deep learning-based intrusion detection framework for securing edge IoT

IIDS: Design of Intelligent Intrusion Detection System for Internet-of-Things Applications

Intrusion detection framework using auto‐metric graph neural network optimized with hybrid woodpecker mating and capuchin search optimization algorithm in IoT network

Privacy-Preserving Federated Learning-Based Intrusion Detection Technique for Cyber-Physical Systems

Hierarchical multistep approach for intrusion detection and identification in IoT and Fog computing-based environments

Secure SDN–IoT Framework for DDoS Attack Detection Using Deep Learning and Counter Based Approach