Skip to content
Open access

A Hybrid Machine Learning-Based Smart Home IoT Security System for Threat Detection, Classification, and Alert Mechanisms

Aug 2026 · International journal of computer information systems and industrial management applications · 0 citations

TL;DR

A machine learning-driven intrusion detection system that aims to detect attacks on IoT devices and suggests that machine learning methods can be successfully used to differentiate between legitimate and malicious network behavior, which can be used as a viable solution to enhance the security and surveillance of IoT-based systems.

Abstract

The growing usage of Internet of Things gadgets has facilitated smart environments including automated homes, smart lighting systems, and smart industrial applications. In spite of these advantages, the IoT devices are frequently not well secured because of their poor computing power and compact architecture. This makes them very susceptible to cyberattacks that may cripple the functionality of their devices, interfere with network processes or reveal confidential information. The identification of malicious activity on the IoT networks has thus become a key challenge to cybersecurity. This paper has discussed a machine learning-driven intrusion detection system that aims to detect attacks on IoT devices. An actual IoT system based on ESP32 microcontrollers and a smart bulb was used to create network traffic both in the regular operation environment and in the simulated attack environment. To enhance the efficiency of the model, the data obtained on the traffic was subjected to various preprocessing steps such as data cleaning, feature encoding, normalization and feature selection. Local Outlier Factor (LOF) based anomaly detection method was employed to determine abnormal network behavior with a random forest classifier used to determine the category of attack. The system is constantly watching the IoT traffic and sends automatic email notifications in case of suspicious activity. The outcomes of the experiment suggest that machine learning methods can be successfully used to differentiate between legitimate and malicious network behavior, which can be used as a viable solution to enhance the security and surveillance of IoT-based systems. The proposed system achieved an accuracy of 88.22%, precision of 90.41%, recall of 85.51%, and an F1-score of 87.89%, demonstrating effective detection of malicious IoT network activity.

Read PDF

Similar papers

Open access Aug 2026

Multiclass Cyber Attack Classification in Smart Home IoT Networks Using Ensemble Machine Learning with the ML-EdgeIIoT Dataset

A machine learning-based intrusion detection framework for multiclass classification of eight categories of IoT network attacks, namely Backdoor, MITM, DDoS, Ransomware, Password Attack, SQL Injection, Prob-attacks, and Normal traffic is designed and evaluated while minimizing false positives and false negatives.

Abhay Kumar Ray, Rupak Sharma, Sunil Kumar Pandey · 0 citations
2026

Enhancing IoT Smart Home Security Through Machine Learning-Based Cyberattack Detection: A Comparative Evaluation

Smart homes depend on interconnected sensors, cameras, routers, mobile applications, and cloud services. This connectivity improves automation and convenience, but it also expands the attack surface for Distributed Denial of Service (DDoS), Denial of Service (DoS), Mirai botnet, brute-force, spoofing, reconnaissance, and man-in-the-middle attacks. Traditional signature-based security is often insufficient because IoT devices are resource-constrained, heterogeneous, and frequently deployed with weak authentication or delayed firmware updates. This study evaluates supervised machine-learning classifiers for detecting cyberattacks in smart-home IoT network traffic using the CICIoT2023 dataset. Four algorithms, namely Random Forest, Decision Tree, k-Nearest Neighbour, and Support Vector Machine, were compared under 50:50, 70:30, and 80:20 train-test split settings. The models were evaluated using accuracy, precision, recall, and F1-score, with emphasis on DDoS, Mirai, and brute-force attack classes that are particularly relevant to smart-home environments. The findings show that tree-based classifiers are highly effective for IoT attack detection. Random Forest achieved the strongest overall accuracy and precision, while Decision Tree showed the most stable recall and F1-score for brute-force detection. The results indicate that Random Forest is suitable as a general-purpose smart-home IDS classifier, whereas Decision Tree or a hybrid ensemble strategy should be considered when missed brute-force attacks carry high operational risk. The paper contributes a clearer empirical comparison of lightweight supervised learning models and provides implementation guidance for smart-home intrusion detection systems.

Nurin Abyana Balqis Jailani, Haniza Nahar, N. M. Salleh et al. · 0 citations
Review Open access Sep 2026

Review of Machine Learning Intrusion Detection Systems in Internet of Things Environment

The use of Internet of Things (IoT) technology entails incorporating numerous devices into heterogeneous networks, which is done in order to provide intelligence as well as automation in services. Yet, increased connectivity also poses various issues relating to the cyber-security of these networks, and resource-constrained nature of IoT devices hampers the effectiveness of conventional cyber-security techniques due to evolving threats. Intrusion Detection Systems (IDSs) has become an integral part of IoT network security. The purpose of this research is to analyze Machine Learning (ML)-based approaches to detect cyber-attacks in the environment of IoT. The review includes the types of learning approaches that were used in studies on existing IDSs, classifiers, databases, the types of attacks and anomalies detected, techniques to select features, as well as methods for evaluation of IDS. Thus, the analysis demonstrates that using machine learning enables to detect a variety of cyber-attacks and anomalies. Still, there are some barriers, such as imbalanced and small-size database, feature redundancy, computational constraints, false positives, and identification of new attacks. Thus, the review highlights the benefits and draw backs of currently existing IDS based on machine learning and proposes possible areas for future studies.

Mustafa Mohammed Jasim, Firas Mohammed Adress, A. Fadhil · 0 citations
Open access Aug 2026

Adaptive Machine Learning Framework for Real-Time Cyber-Attack Detection and Prevention in IoT Networks

This paper introduces an innovative ML-based security paradigm that improves the attack detection accuracy by combining adaptive feature extraction techniques with a context-attentive hybrid mechanism and maximizes detection accuracy and computational efficiency.

P. P. Bairagi, Ashish Bagwari, Sailen Dutta Kalita et al. · 0 citations
Open access Aug 2026

Hybrid Intrusion Detection System with Real-Time Concept Drift Detection for Enhanced IoT Security

A hybrid IDS framework that integrates supervised Random Forest classification, unsupervised Isolation Forest anomaly monitoring, and Kolmogorov–Smirnov (KS)-based concept drift monitoring is presented, providing initial evidence of generalization to one held-out attack family but should not be interpreted as proof of broad zero-day detection capability.

Muath A. Obaidat, Meryem Abouali, Aneeza Shakeel · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.