Open Access

Global Firefly Optimization Model for IoT Attack Detection

PDF

Dr. Erion Hoxha ¹ , Dr. Elira Dervishi ¹ ,

⁴ Department of Artificial Intelligence and Automation Albanian Institute of Smart Technologies Tirana, Albania

⁴ Laboratory of Intelligent Computing Systems Balkan Center for AI Research Tirana, Albania

Abstract

The rapid expansion of Internet of Things (IoT) deployments has increased the exposure of distributed devices, gateways, communication networks, and cloud-edge infrastructures to denial-of-service (DoS), distributed denial-of-service (DDoS), botnet, and volumetric attacks. Conventional intrusion detection approaches often face difficulties in distinguishing malicious traffic from legitimate high-volume activity while maintaining low computational overhead and rapid response. This paper proposes a Global Firefly Optimization Model (GFOM) for IoT attack detection, integrating firefly-based global optimization with an IoT-oriented attack detection architecture. The proposed model treats feature selection, detection-parameter optimization, and attack classification as interconnected optimization problems. Its theoretical foundation is derived from the observed limitations of existing IoT DDoS detection, SDN-based mitigation, edge defense, deep learning, and fog-enabled security approaches. The model introduces a multi-stage workflow consisting of traffic acquisition, preprocessing, discriminative feature construction, firefly-based global optimization, attack classification, confidence assessment, and response prioritization. The methodology emphasizes global search capability to reduce redundant feature combinations and improve detection-model configuration. The literature indicates that efficient mitigation requires coordination across IoT, edge, SDN, fog, and cloud layers rather than isolated detection mechanisms. The proposed framework therefore positions optimization as an intermediary intelligence layer between raw network observations and security decisions. The study provides a theoretically grounded architecture and evaluation methodology for developing adaptive IoT attack detection systems while recognizing that empirical validation on benchmark and real-world traffic datasets remains necessary.

Keywords

Internet of Things, IoT Security, DDoS Detection, Firefly Optimization

References

Z. R. Alashhab, M. Anbar, M. M. Singh, I. H. Hasbullah, P. Jain and T. A. Al-Amiedy, “Distributed denial of service attacks against cloud computing environment: Survey, issues, challenges and coherent taxonomy,” Appl. Sci., vol. 12, no. 23, Dec. 2022, Art. no. 12441.

W. Chen, S. Xiao, L. Liu, X. Jiang, and Z. Tang, “A DDoS attacks traceback scheme for SDN-based smart city,” Comput. Elec. Eng., vol. 81, 2020, Art. no. 106503.

J. Galeano-Brajones, J. Carmona-Murillo, J. F. Valenzuela-Valdés, and F. Luna-Valero, “Detection and mitigation of DoS and DDoS attacks in IoT-based stateful SDN: An experimental approach,” Sensors, vol. 20, no. 3, 2020, Art. no. 816.

Y. Jia, F. Zhong, A. Alrawais, B. Gong, and X. Cheng, “FlowGuard: An intelligent edge defense mechanism against IoT DDoS attacks,” IEEE Internet Things J., vol. 7, no. 10, pp. 9552–9562, 2020.

C. O. Kumar and P. R. S. Bhama, “Detecting and confronting flash attacks from IoT botnets,” J. Supercomput., vol. 75, no. 12, pp. 8312–8338, 2019.

P. Kumar, R. Kumar, G. P. Gupta, and R. Tripathi, “A distributed framework for detecting DDoS attacks in smart contract-based Blockchain-IoT systems by leveraging Fog computing,” Trans. Emerg. Telecommun. Technol., vol. 32, no. 6, 2021, Art. no. e4112.

J. Li, M. Liu, Z. Xue, X. Fan, and X. He, “RTVD: A real-time volumetric detection scheme for DDoS in the Internet of Things,” IEEE Access, vol. 8, pp. 36191–36201, 2020.

G. Liu, W. Quan, N. Cheng, H. Zhang, and S. Yu, “Efficient DDoS attacks mitigation for stateful forwarding in Internet of Things,” J. Netw. Comput. Appl., vol. 130, pp. 1–13, Mar. 2019.

C. D. McDermott, F. Majdani, and A. V. Petrovski, “Botnet detection in the Internet of Things using deep learning approaches,” presented at the 2018 Int. Joint Conf. Neural Netw. (IJCNN), Rio de Janeiro, Brazil, 2018, pp. 1–8.

Y. Meidan et al., “N-BaIoT-network-based detection of IoT botnet attacks using deep autoencoders,” IEEE Pervasive Comput., vol. 17, no. 3, pp. 12–22, 2018.

N. Ravi and S. M. Shalinie, “Learning-driven detection and mitigation of DDoS attack in IoT via SDN-cloud architecture,” IEEE Internet Things J., vol. 7, no. 4, pp. 3559–3570, 2020.

K. Ramamurthy, R. K. Konduru and N. Amanmadov, "EvoGraphCoder: An Evolutionary Graph-Reasoning Framework for Self-Adaptive Software Engineering," in IEEE Access, vol. 14, pp. 63063-63076, 2026, doi: 10.1109/ACCESS.2026.3686019.

Geo Philip, Paulson, Integrated Intelligent Building Energy Management: A Multi-LayerFramework for Renewable Energy, HVAC Optimization, and SmartElectrical Network Coordination. Available at SSRN: https://ssrn.com/abstract=6993209 or http://dx.doi.org/10.2139/ssrn.6993209

R. Reddy, P. Udayaraju, K. K. Goyal, S. C. R. Vudem, R. Sayana and V. Gummadi, "Creating an AI-based Multi-Agent Model for Optimized Data Streaming with Improved Resiliency and Scalability for Event Streaming," 2026 6th International Conference on Image Processing and Capsule Networks (ICIPCN), Dhulikhel, Nepal, 2026, pp. 1372-1379, doi: 10.1109/ICIPCN67432.2026.11438445.

Most read articles by the same author(s)

1 2 3 4 5 6 7 8 9 10 > >>

International Journal of Advanced Artificial Intelligence Research

Global Firefly Optimization Model for IoT Attack Detection

Abstract

Keywords

References

Most read articles by the same author(s)

Similar Articles