Abstract

Despite providing unparalleled connectivity and convenience, the exponential growth of the Internet of Things (IoT) ecosystem has triggered significant cybersecurity concerns. These concerns stem from various factors, including the heterogeneity of IoT devices, widespread deployment, and inherent computational limitations. Integrating emerging technologies to address these concerns becomes imperative as the dynamic IoT landscape evolves. Machine Learning (ML), a rapidly advancing technology, has shown considerable promise in addressing IoT security issues. It has significantly influenced and advanced research in cyber threat detection. This survey provides a comprehensive overview of current trends, methodologies, and challenges in applying machine learning for cyber threat detection in IoT environments. Specifically, we further perform a comparative analysis of state-of-the-art ML-based Intrusion Detection Systems (IDSs) in the landscape of IoT security. In addition, we shed light on the pressing unresolved issues and challenges within this dynamic field. We provide a future vision with Generative AI and large language models to enhance IoT security. The discussions present an in-depth understanding of different cyber threat detection methods, enhancing the knowledge base of researchers and practitioners alike. This paper is a valuable resource for those keen to delve into the evolving world of cyber threat detection leveraging ML and IoT security.

Introduction

Brendan O’Brien astutely observed, ”If you think the Internet has changed your life, think again. The Internet of Things is about to change it all over again!” [۱]. This is indeed the case, as the Internet of Things (IoT) has heralded unprecedented connectivity. The advancements in sensor technology, wireless communication, and data analytics have spurred an exponential increase in connected devices. This influx of connectivity, brought about by integrating IoT into various industries, cities, and households, promotes unmatched efficiency and convenience. As the backbone of IoT, sensors and actuators acquire and convert data from the physical world into digital signals. These compact devices amass a diverse range of data, thereby enabling real-time monitoring and control of numerous systems and processes.

However, the rapid proliferation and extensive integration of IoT devices into everyday life have ushered in various security challenges. These issues must be robustly addressed to ensure the safety and reliability of this expanding ecosystem. The sheer volume and variety of IoT devices and their often inconsistent security features and protocols engender a fragmented environment teeming with potential attack vectors. IoT devices frequently prioritize low cost and user simplicity over security, making them susceptible to breaches and exploitation. As a result, these devices are at risk of various cyber threats, including data breaches, Distributed Denial-of-Service (DDoS) attacks, and malware infections. Any security breach in these devices could significantly compromise privacy and crucial infrastructure systems, given the sensitive nature of the data they handle. Moreover, IoT devices, potentially serving as entry points, might allow attackers to infiltrate broader networks, amplifying the potential impact of security breaches. Another primary concern is the security of communication routes between IoT devices and networks, as many IoT devices utilize wireless communication protocols susceptible to interception or manipulation. These vulnerabilities can be exacerbated by the resource constraints of specific IoT devices, which prevent them from adopting contemporary encryption and authentication techniques. Furthermore, the long lifespan and widespread deployment of IoT devices compound the difficulty of managing security upgrades and patches, as many devices may not receive regular updates or may be difficult to access for maintenance. This could lead to an increased number of outdated or vulnerable devices, further exacerbating security concerns [2].

Conclusion

IoT devices have become fundamental to everyday life, offering increased connectivity and convenience. However, this accelerated development in IoT devices also brought several security challenges that need to be addressed to guarantee the safety and reliability of these interconnected systems. The survey was organized into five sections detailing the role of machine learning in enhancing IoT security. We have provided an overview of the current trends in ML for cyber threat detection in IoT environments. Furthermore, we survey recent cyber detection methods, define them, highlight the approach, and detail the attack surface utilized along with their evaluations. The utilized ML techniques are also discussed, defined, and compared regarding advantages and drawbacks in the relevant use cases. Moreover, open issues were discussed briefly, concluding that further research and development is required as no current solution can address the issues related to IoT cyber threat detection. A holistic strategy combining diverse techniques and strategies is required as a final recommendation. We present this survey as a reference for the current advancements in the field and point out the direction being taken. Our goal is for the survey to create a more secure and resilient IoT environment by identifying the current issues, understanding their root causes and possible implications, and developing innovative solutions.