Anomaly Detection Tools for the Lifecycle Security of Smart Systems
The explosive growth of the Internet of Things (IoT) demands security mechanisms that adapt to emerging threats. Telemetry meets this need by fusing federated learning, explainable AI, and privacy-preserving analytics into a multi-layer monitoring framework. Lightweight agents such as r-Monitoring impose only 0.27 % CPU overhead at device level, while the BACON federated anomaly detector safeguards system traffic. On a 21-sensor industrial robot, TELEMETRY's Nokia pipeline flagged subtle speed anomalies with 73% accuracy; within the NF-ToN-IoT corpus, BACON differentiated benign from malicious flows with 96% accuracy and markedly fewer false positives than signature baselines. The Misuse Detection Toolkit ensemble further achieved 97.7% validation accuracy across 50 training epochs, underscoring the framework's adaptability. Together, these layers cut detection latency and reduce on-device resource use, illustrating how ML-driven, federated monitoring can harden next-generation IoT deployments. Ongoing work explores graph-based analytics, adaptive models, and more scalable federation schemes.
Authors
- Armando Aguayo-Mendoza (ORCID: https://orcid.org/0000-0002-1707-9224)
- George N. Triantafyllou (ORCID: https://orcid.org/0000-0001-5322-206X)
- Óscar García-Perales (ORCID: https://orcid.org/0009-0003-0781-6141)
- Norbert Goetze
- Rosella Omana Mancilla (ORCID: https://orcid.org/0000-0002-6566-9560)
- Diego Argüello Ron (ORCID: https://orcid.org/0000-0002-6004-385X)
- Antonis Mpantis
Institutions
- Athens Technology Center (Greece) (GR)
- Engineering (Italy) (IT)
- Ingegneria dei Sistemi (Italy) (IT)
- Nokia (Germany) (DE)
Publication Details
- Published
- 2025-06-16
- DOI
- https://doi.org/10.1109/smartcomp65954.2025.00086
- Citations
- 1
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 1.49