Trust-aware authentication and authorization for IoT: a federated machine learning approach

Ahmed, Kazi Istiaque and Tahir, Mohammad and Lau, Sian Lun and Habaebi, Mohamed Hadi and Ahad, Abdul and Mughees, Amna (2024) Trust-aware authentication and authorization for IoT: a federated machine learning approach. IEEE Internet of Things Journal, Early Access (online). pp. 1-16. ISSN CD: 2372-2541 E-ISSN 2327-4662

	PDF Restricted to Registered users only Download (5MB) | Request a copy
Preview	PDF Download (114kB) | Preview

Abstract

The need for strong authentication and authorization (AA) security measures is growing with the proliferation of the Internet of Things (IoT). This paper presents an advanced trust-aware authentication and authorization system for IoT environments. Using real-world data collected from Zigbee Zolertia Z1 devices, a Federated Machine Learning model was developed that utilizes Physical Layer properties such as Received Signal Strength Indicator (RSSI), Link Quality Indicator (LQI), device Internal Temperature, device Battery Level, and device MAC address. The proposed solution for AA IoT utilizes a trust calculation algorithm based on Federated Learning (FL), which is suitable for IoT environments and enables data privacy and scalability. Incorporating device-specific information, such as internal temperature and battery level, helps a more nuanced evaluation of the device’s status, improving the precision of trust calculations. The proposed architecture performs particularly well for unauthorized intrusion attempts modelled using spoofing, replay and Sybil attacks. Specifically, the proposed methodology can detect malicious AA activities classified as Writing + Reading attempts with 100% accuracy, demonstrating its effectiveness in protecting IoT devices from attacks. Furthermore, the model achieves 99.18% accuracy in reading access permissions and 99.99% accuracy in identifying Write + Read + Execute permissions, highlighting its reliability in implementing access control restrictions for improving security in IoT environments. This research helps improve IoT security by addressing crucial challenges in the ever-expanding world of networked devices.

Item Type:	Article (Journal)
Uncontrolled Keywords:	Internet of Things (IoT), Machine learning (ML), Artificial Neural Networks (ANN), Federated Learning (FL), Authentication, Authorization, Access control, Security, Networking, Trust, and Trust Management.
Subjects:	T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK7800 Electronics. Computer engineering. Computer hardware. Photoelectronic devices
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Engineering > Department of Electrical and Computer Engineering
Depositing User:	Dr. Mohamed Hadi Habaebi
Date Deposited:	16 Jan 2025 16:54
Last Modified:	16 Jan 2025 16:54
URI:	http://irep.iium.edu.my/id/eprint/118470

Actions (login required)

View Item