Abstract:The Message Queuing Telemetry Transport (MQTT) protocol stands out as one of the foremost and widely recognized messaging protocols in the field. It is often used to transfer and manage data between devices and is extensively employed for applications ranging from smart homes and industrial automation to healthcare and transportation systems. However, it lacks built-in security features, thereby making it vulnerable to many types of attacks such as man-in-the-middle (MitM), buffer overflow, pre-shared key, brute force authentication, malformed data, distributed denial-of-service (DDoS) attacks, and MQTT publish flood attacks. Traditional methods for detecting MQTT attacks, such as deep neural networks (DNNs), k-nearest neighbor (KNN), linear discriminant analysis (LDA), and fuzzy logic, may exist. The increasing prevalence of device connectivity, sensor usage, and environmental scalability become the most challenging aspects that novel detection approaches need to address. This paper presents a new solution that leverages an H2O-based distributed machine learning (ML) framework to improve the security of the MQTT protocol in networks, particularly in IoT environments. The proposed approach leverages the strengths of the H2O algorithm and architecture to enable real-time monitoring and distributed detection and classification of anomalous behavior (deviations from expected activity patterns). By harnessing H2O's algorithms, the identification and timely mitigation of potential security threats are achieved. Various H2O algorithms, including random forests, generalized linear models (GLMs), gradient boosting machine (GBM), XGBoost, and the deep learning (DL) algorithm, have been assessed to determine the most reliable algorithm in terms of detection performance. This study encompasses the development of the proposed algorithm, including implementation details and evaluation results. To assess the proposed model, various evaluation metrics such as mean squared error (MSE), root-mean-square error (RMSE), mean per class error (MCE), and log loss are employed. The results obtained indicate that the H2OXGBoost algorithm outperforms other H2O models in terms of accuracy. This research contributes to the advancement of secure IoT networks and offers a practical approach to enhancing the security of MQTT communication channels through distributed detection and classification techniques.

Beta Hebbian Learning for intrusion detection in networks with MQTT Protocols for IoT devices

Multiclass Classification Procedure for Detecting Attacks on MQTT-IoT Protocol

Securing MQTT protocol for IoT environment using IDS based on ensemble learning

A Deep Learning-Based Intrusion Detection System for MQTT Enabled IoT

Enhance the Detection of DoS and Brute Force Attacks within the MQTT Environment through Feature Engineering and Employing an Ensemble Technique

Intrusion Detection using Network Traffic Profiling and Machine Learning for IoT

Secure Enhancement for MQTT Protocol Using Distributed Machine Learning Framework

Big data analysis and distributed deep learning for next-generation intrusion detection system optimization

Enhanced Network Intrusion Detection System for Internet of Things Security Using Multimodal Big Data Representation with Transfer Learning and Game Theory

A model for intrusion detection system using hidden Markov and variational Bayesian model for IoT based wireless sensor network

ELBA-IoT: An Ensemble Learning Model for Botnet Attack Detection in IoT Networks

Hierarchical multistep approach for intrusion detection and identification in IoT and Fog computing-based environments

Effective Feature Engineering Framework for Securing MQTT Protocol in IoT Environments

Attack-Aware IoT Network Traffic Routing Leveraging Ensemble Learning

Meta-Learner-Based Approach for Detecting Attacks on Internet of Things Networks

Bi-Level Intrusion Detection in IoT Networks Using Ensemble Method and A-GRU-RNN Classifier

Enhancing IoT Network Security: Unveiling the Power of Self-Supervised Learning against DDoS Attacks

Top-Down Machine Learning-Based Architecture for Cyberattacks Identification and Classification in IoT Communication Networks

Anomaly Detection in IoT Networks: Machine Learning Approaches for Intrusion Detection

Design and Development of a Deep Learning-Based Model for Anomaly Detection in IoT Networks

An efficient deep recurrent neural network for detection of cyberattacks in realistic IoT environment