Enhancing IoT Security: An Optimization Algorithm for Fog Layer-Based DDoS Attack Mitigation Framework

The Internet of Things (IoT) refers to a network comprised of interconnected items, including computing devices and digital gadgets. Cloud-based IoT infrastructures are vulnerable to distributed denial of service (DDoS) attacks. A DDoS attack has the potential to incapacitate a server for an extended duration, resulting in service disruptions as a consequence of overwhelming system resources. This research presents a novel framework for mitigating DDoS attacks in IoT networks. The proposed system leverages the fog-cloud architecture to provide efficient, lightweight, and precise attack mitigation. Notably, the mitigation process is executed at the fog layer. The suggested fog layer uses Particle Swarm Optimization (PSO) to make allocating resources easier, which makes it possible for the mitigation framework to be set up quickly. This approach addresses the challenges associated with resource management on resource-constrained IoT devices. The mitigation framework uses the Fitness Leader Optimization (FLO) approach to construct a trained database, taking into consideration factors such as the needed time, the size of the request, and the number of created requests. The FLO system employs multilayer perceptron (MLP), k-nearest neighbors (KNN), and support vector machine (SVM) classification algorithms to effectively mitigate the assault. The results of this study show that adding classification algorithms to our framework made it easier to test networks for Internet of Things (IoT) devices, especially when the Particle Swarm Optimization (PSO) method was used together. The mitigation framework demonstrates a minimized fitness value of 0.284556 seconds, showcasing enhanced resource utilization and processing time optimization for IoT nodes and servers in a distributed fog environment. The total average of resource utilization is improved to 6.0850%, processing time is decreased to 17.0397, and fitness value is decreased to 0.0258 seconds in the proposed DDoS attack mitigation system. The machine learning classification model achieves high accuracy, with SVM leading at 99.6785% compared to others, emphasizing the robustness of the proposed framework in securing IoT networks.

Authors

Institutions

Publication Details

Journal
Iraqi Journal of Science
Published
2025-02-28
DOI
https://doi.org/10.24996/ijs.2025.66.2.19
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Enhancing IoT Security: An Optimization Algorithm for Fog Layer-Based DDoS Attack Mitigation Framework

Fryal Jassim Abd Al-Razaq, Mehdi Ebady Manaa, Hussein A. A. Al-Khamees
Iraqi Journal of Science
Network Security and Intrusion Detection
article

Enhancing IoT Security: An Optimization Algorithm for Fog Layer-Based DDoS Attack Mitigation Framework

Fryal Jassim Abd Al-Razaq, Mehdi Ebady Manaa, Hussein A. A. Al-Khamees
article en

Abstract

The Internet of Things (IoT) refers to a network comprised of interconnected items, including computing devices and digital gadgets. Cloud-based IoT infrastructures are vulnerable to distributed denial of service (DDoS) attacks. A DDoS attack has the potential to incapacitate a server for an extended duration, resulting in service disruptions as a consequence of overwhelming system resources. This research presents a novel framework for mitigating DDoS attacks in IoT networks. The proposed system leverages the fog-cloud architecture to provide efficient, lightweight, and precise attack mitigation. Notably, the mitigation process is executed at the fog layer. The suggested fog layer uses Particle Swarm Optimization (PSO) to make allocating resources easier, which makes it possible for the mitigation framework to be set up quickly. This approach addresses the challenges associated with resource management on resource-constrained IoT devices. The mitigation framework uses the Fitness Leader Optimization (FLO) approach to construct a trained database, taking into consideration factors such as the needed time, the size of the request, and the number of created requests. The FLO system employs multilayer perceptron (MLP), k-nearest neighbors (KNN), and support vector machine (SVM) classification algorithms to effectively mitigate the assault. The results of this study show that adding classification algorithms to our framework made it easier to test networks for Internet of Things (IoT) devices, especially when the Particle Swarm Optimization (PSO) method was used together. The mitigation framework demonstrates a minimized fitness value of 0.284556 seconds, showcasing enhanced resource utilization and processing time optimization for IoT nodes and servers in a distributed fog environment. The total average of resource utilization is improved to 6.0850%, processing time is decreased to 17.0397, and fitness value is decreased to 0.0258 seconds in the proposed DDoS attack mitigation system. The machine learning classification model achieves high accuracy, with SVM leading at 99.6785% compared to others, emphasizing the robustness of the proposed framework in securing IoT networks.

Iraqi Journal of Science
University of Babylon (IQ), Alsalam University College (IQ)
Openalex Percentile: Top 97%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.