cs.CRcs.NI

Advanced Anomaly Detection and Threat Intelligence in Zero Trust IoT Environments Using Machine Learning

Muhammad Umair Basharat, Jawad Hussain, Waqas Khalid, Chiew Foong Kwong

Apr 25, 2026

AI Summarygemma4:e4b

This paper enhances anomaly detection and threat intelligence in Zero Trust IoT environments by applying and comparing various machine learning classifiers, notably using SMOTE to improve accuracy on network intrusion datasets.

Abstract

More Like This

The growing adoption of IoT and cloud computing, combined with rapid advancements in digital technologies, has considerably increased the cyber-attack surface, resulting in increasingly complex and persistent attacks. Traditional security methods, primarily based on perimeter defenses, are insufficient to meet these developing threats, especially within the context of a Zero Trust Security (ZTS) architecture. This study investigates the application of sophisticated artificial intelligence (AI) and machine learning (ML) techniques, including the use of the Synthetic Minority Oversampling Technique (SMOTE), to improve anomaly detection and threat intelligence systems. This study focuses on how Support Vector Machine (SVM), Random Forest (RF), and Decision Tree (DT) classifiers might increase threat detection accuracy in IoT environments. The research endeavors to improve cybersecurity resilience by mitigating false positives and providing actionable intelligence through supervised learning algorithms. The KDD Cup 1999 dataset is used in the study to assess how well these models perform in simulating various network intrusions and regular traffic. The application of SMOTE significantly enhanced the performance of these models by addressing class imbalance, leading to improved detection accuracy. Furthermore, as supplementary methods for detecting malicious URLs and advanced persistent threats (APTs), edge-based machine learning and blockchain technology are investigated. This study addresses the shortcomings of conventional security systems and supports the growing demand for reliable threat detection in a world that is becoming more interconnected. It also advances the creation of more proactive and adaptable cybersecur

This paper evaluates a novel black-box adversarial attack to demonstrate the vul…

02Low24%

In-network Attack Detection with Federated Deep Learning in IoT Networks: Real Implementation and An…

This paper proposes and evaluates a federated deep learning framework using auto…

03Low23%

Explainable Threat Attribution for IoT Networks Using Conditional SHAP and Flow Behavior Modelling

This paper proposes an explainable threat attribution system for IoT networks th…

04Low23%

Interpretable Ensemble Learning for Network Traffic Anomaly Detection: A SHAP-based Explainable AI F…

The paper proposes an ensemble learning framework combined with SHAP-based Expla…

05Low22%

Machine Learning for Network Attacks Classification and Statistical Evaluation of Adversarial Learni…

This paper proposes a comprehensive framework for network intrusion detection us…

06Low20%

MA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library

MA-IDS proposes a Multi-Agent RAG framework that uses LLMs and a self-building E…

07Low20%

Machine Learning-Based Detection of MCP Attacks

This paper develops and evaluates supervised machine learning models to detect m…

08Low19%

Optimizing IoT Intrusion Detection with Tabular Foundation Models for Smart City Forensics

The paper demonstrates that using the transformer-based foundation model TabPFNv…