The network attacks are increasing both in frequency and intensity with the rapid growth of internet of things (IoT) devices. Recently, denial of service (DoS) and distributed denial of service (DDoS) attacks are reported as the most frequent attacks in IoT networks. The traditional security solutions like firewalls, intrusion detection systems, etc., are unable to detect the complex DoS and DDoS attacks since most of them filter the normal and attack traffic based upon the static predefined rules. However, these solutions can become reliable and effective when integrated with artificial intelligence (AI) based techniques. During the last few years, deep learning models especially convolutional neural networks achieved high significance due to their outstanding performance in the image processing field. The potential of these convolutional neural network (CNN) models can be used to efficiently detect the complex DoS and DDoS by converting the network traffic dataset into images. Therefore, in this work, we proposed a methodology to convert the network traffic data into image form and trained a state-of-the-art CNN model, i.e., ResNet over the converted data. The proposed methodology accomplished 99.99\% accuracy for detecting the DoS and DDoS in case of binary classification. Furthermore, the proposed methodology achieved 87\% average precision for recognizing eleven types of DoS and DDoS attack patterns which is 9\% higher as compared to the state-of-the-art.

A majority of the population of developing countries is associated with agriculture directly or indirectly. The liaison of engineering technology and Sustainable Development Goals (SDGs) can build a bridge for farmers to enhance their skills regarding advancements through future generation agriculture trends. The next-generation trends include better soil preparation, intelligent irrigation systems, advanced methods of crop nutrient inspection, smart fertilizers applications, and multi-cropping practices. This work proposes a smart Decision Support System (DSS) that acquires the input parameters based on real-time monitoring to optimize the yield that realizes sustainability by improving per hectare production and lessening water seepage wastage in agribusiness. The proposed model comprises three basic units including an intelligent sensor module, smart irrigation system and controlled fertilizer module. The system has integrated sensors, cloud employing decision support layers, and networking based DSS to recommend cautions for optimum sustainable yield. The intelligent sensors module contains a temperature and humidity sensor, NPK sensor, soil moisture sensor, soil conductivity sensor, and pH sensor to transmit the statistics to the cloud over the internet via Long Range (LoRa) using Serial Peripheral Interface (SPI) communication protocol. Moreover, an android application has been developed for real-time data monitoring according to GPS location and node information (accessed remotely). Furthermore, the DSS contemplates the accessible information from sensors, past patterns, monitoring climate trends and creating cautions required for sustainable fertilizer consumption. The presented results and comparison validate the novelty of the design as it embraces smart irrigation with smart control and smart decision-making based on accurate real-time field data. It is better than existing systems as it transmits the data over the LoRa that is an open-source communication with long-range transmission ability up to several kilometres. The sensor nodes helped in advancing the yield of crops, which resulted in achieving inclusive and sustainable economic goals.

The network attacks are increasing both in frequency and intensity with the rapid growth of internet of things (IoT) devices. Recently, denial of service (DoS) and distributed denial of service (DDoS) attacks are reported as the most frequent attacks in IoT networks. The traditional security solutions like firewalls, intrusion detection systems, etc., are unable to detect the complex DoS and DDoS attacks since most of them filter the normal and attack traffic based upon the static predefined rules. However, these solutions can become reliable and effective when integrated with artificial intelligence (AI) based techniques. During the last few years, deep learning models especially convolutional neural networks achieved high significance due to their outstanding performance in the image processing field. The potential of these convolutional neural network (CNN) models can be used to efficiently detect the complex DoS and DDoS by converting the network traffic dataset into images. Therefore, in this work, we proposed a methodology to convert the network traffic data into image form and trained a stateof-the-art CNN model, i.e., ResNet over the converted data. The proposed methodology accomplished 99.99% accuracy for detecting the DoS and DDoS in case of binary classification. Furthermore, the proposed methodology achieved 87% average precision for recognizing eleven types of DoS and DDoS attack patterns which is 9% higher as compared to the state-of-the-art.

The advancement in the domain of IoT accelerated the development of new communication technologies such as the Message Queuing Telemetry Transport (MQTT) protocol. Although MQTT servers/brokers are considered the main component of all MQTT-based IoT applications, their openness makes them vulnerable to potential cyber-attacks such as DoS, DDoS, or buffer overflow. As a result of this, an efficient intrusion detection system for MQTT-based applications is still a missing piece of the IoT security context. Unfortunately, existing IDSs do not provide IoT communication protocol support such as MQTT or CoAP to validate crafted or malformed packets for protecting the protocol implementation vulnerabilities of IoT devices. In this paper, we have designed and developed an MQTT parsing engine that can be integrated with network-based IDS as an initial layer for extensive checking against IoT protocol vulnerabilities and improper usage through a rigorous validation of packet fields during the packet-parsing stage. In addition, we evaluate the performance of the proposed solution across different reported vulnerabilities. The experimental results demonstrate the effectiveness of the proposed solution for detecting and preventing the exploitation of vulnerabilities on IoT protocols.

Authors' Contributions MT conceived the idea, provided guidance for the studies and manuscript write-up. AA performed experimental work. ASH, AN, SF and SS facilitated the conduction of experiments. ARA and MW helped in data analysis and manuscript write-up.

No abstract

No abstract

In this research we propose a framework that will strengthen the IoT devices security from dual perspectives; avoid devices to become attack target as well as a source of an attack. Unlike traditional devices, IoT devices are equipped with insufficient host-based defense system and a continuous internet connection. All time internet enabled devices with insufficient security allures the attackers to use such devices and carry out their attacks on rest of internet. When plethora of vulnerable devices become source of an attack, intensity of such attacks increases exponentially. Mirai was one of the first well-known attack that exploited large number of vulnerable IoT devices, that bring down a large part of Internet. To strengthen the IoT devices from dual security perspective, we propose a two step framework. Firstly, confine the communication boundary of IoT devices; IoT-Sphere. A sphere of IPs that are allowed to communicate with a device. Any communication that violates the sphere will be blocked at the gateway level. Secondly, only allowed communication will be evaluated for potential attacks and anomalies using advance detection engines. To show the effectiveness of our proposed framework, we perform couple of attacks on IoT devices; camera and google home and show the feasibility of IoT-Sphere.