Detection and Mitigation in IoT Ecosystems Using oneM2M Architecture and Edge-Based Machine Learning

Yu-Yong Luo, Yu-Hsun Chiu and Chia-Hsin Cheng ()
Additional contact information
Yu-Yong Luo: Department of Electrical Engineering, National Formosa University, Yunlin 632301, Taiwan
Yu-Hsun Chiu: Department of Electrical Engineering, National Formosa University, Yunlin 632301, Taiwan
Chia-Hsin Cheng: Department of Electrical Engineering, National Formosa University, Yunlin 632301, Taiwan

Future Internet, 2025, vol. 17, issue 9, 1-25

Abstract: Distributed denial-of-service (DDoS) attacks are a prevalent threat to resource-constrained IoT deployments. We present an edge-based detection and mitigation system integrated with the oneM2M architecture. By using a Raspberry Pi 4 client and five Raspberry Pi 3 attack nodes in a smart-home testbed, we collected 200,000 packets with 19 features across four traffic states (normal, SYN/UDP/ICMP floods), trained Decision Tree, 2D-CNN, and LSTM models, and deployed the best model on an edge computer for real-time inference. The edge node classifies traffic and triggers per-attack defenses on the device (SYN cookies, UDP/ICMP iptables rules). On a held-out test set, the 2D-CNN achieved 98.45% accuracy, outperforming the LSTM (96.14%) and Decision Tree (93.77%). In end-to-end trials, the system sustained service during SYN floods (time to capture 200 packets increased from 5.05 s to 5.51 s after enabling SYN cookies), mitigated ICMP floods via rate limiting, and flagged UDP floods for administrator intervention due to residual performance degradation. These results show that lightweight, edge-deployed learning with targeted controls can harden oneM2M-based IoT systems against common DDoS vectors.

Keywords: Internet of Things (IoT); distributed denial-of-service; oneM2M; edge computing; machine learning; intrusion detection; network traffic classification (search for similar items in EconPapers)
JEL-codes: O3 (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
https://www.mdpi.com/1999-5903/17/9/411/pdf (application/pdf)
https://www.mdpi.com/1999-5903/17/9/411/ (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:gam:jftint:v:17:y:2025:i:9:p:411-:d:1744773

Access Statistics for this article

Future Internet is currently edited by Ms. Grace You

More articles in Future Internet from MDPI
Bibliographic data for series maintained by MDPI Indexing Manager ().