The DOI matches its Crossref record; 297 of the 297 references it cites were found in a registry or an index.
A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security
Open accessAbstract
The Internet of Things (IoT) integrates billions of smart devices that can communicate with one another with minimal human intervention. IoT is one of the fastest developing fields in the history of computing, with an estimated 50 billion devices by the end of 2020. However, the crosscutting nature of IoT systems and the multidisciplinary components involved in the deployment of such systems have introduced new security challenges. Implementing security measures, such as encryption, authentication, access control, network and application security for IoT devices and their inherent vulnerabilities is ineffective. Therefore, existing security methods should be enhanced to effectively secure the IoT ecosystem. Machine learning and deep learning (ML/DL) have advanced considerably over the last few years, and machine intelligence has transitioned from laboratory novelty to practical machinery in several important applications. Consequently, ML/DL methods are important in transforming the security of IoT systems from merely facilitating secure communication between devices to security-based intelligence systems. The goal of this work is to provide a comprehensive survey of ML methods and recent advances in DL methods that can be used to develop enhanced security methods for IoT systems. IoT security threats that are related to inherent or newly introduced threats are presented, and various potential IoT system attack surfaces and the possible threats related to each surface are discussed. We then thoroughly review ML/DL methods for IoT security and present the opportunities, advantages and shortcomings of each method. We discuss the opportunities and challenges involved in applying ML/DL to IoT security. These opportunities and challenges can serve as potential future research directions.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Al-Garadi et al. [32] and Pakalapati et al. [33] provide strategic assessments of using AI/ML for threat detection and automated decision-making within DevSecOps pipelines, signalling the start of a broader movement toward intelligent, data-driven security automation.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [32]
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Among the potential surveyed applications, ML has been used mainly for intrusion detection, while DL for malware and anomalies detection.”
From Deepfakes: current and future trends (2024) · cites this paper as Al-Garadi et al. 2020
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“The review is primarily focused on IoT environments and does not directly address the integration of ML/DL into DevSecOps pipelines, which may limit its relevance for general DevSecOps practices.”
From Evolution of DevSecOps and Its Influence on Application Security: A Systematic Literature Review (2025) · cites this paper as [32]
The cited source says what the claim attributes to it.
In the citing paper
“As main conclusions, the authors claim the need for diverse datasets within IoT security.”
From Deepfakes: current and future trends (2024) · cites this paper as Al-Garadi et al. 2020
The cited source says what the claim attributes to it.
In the citing paper
“Several security aspects shall be considered in every IoT system (Al-Garadi et al. 2020):”
From Deepfakes: current and future trends (2024) · cites this paper as Al-Garadi et al. 2020
The cited source says what the claim attributes to it.
In the citing paper
“For all of these explanations, IoT systems need to go from simply enabling secure communication between devices to intelligence provided by DL approaches to create robust, all-encompassing security solutions, as noted by the al2020survey.”
From Deepfakes: current and future trends (2024) · cites this paper as Al-Garadi et al. 2020
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
1 retracted
Deng, L., Li, D., Yao, X., & Wang, H. (2018) · Cluster Computing · doi:10.1007/s10586-018-1847-2 · Cited by 124
RetractedBreiman, L. (2001) · Machine Learning · doi:10.1023/a:1010933404324 · Cited by 133,538
ImageNet classification with deep convolutional neural networks
Krizhevsky, A., Sutskever, I., & Hinton, G. E. (2017) · Communications of the ACM · doi:10.1145/3065386 · Cited by 112,155
LeCun, Y., Bengio, Y., & Hinton, G. (2015) · Nature · doi:10.1038/nature14539 · Cited by 84,126
The Nature of Statistical Learning Theory
Vapnik, V. N. (1995) · doi:10.1007/978-1-4757-2440-0 · Cited by 39,138
Human-level control through deep reinforcement learning
Mnih, V., Kavukcuoglu, K., Silver, D., Rusu, A. A., Veness, J., Bellemare, M. G., Graves, A., Riedmiller, M., Fidjeland, A. K., Ostrovski, G., et al. (2015) · Nature · doi:10.1038/nature14236 · Cited by 30,357
The Elements of Statistical Learning
Hastie, T., Tibshirani, R., & Friedman, J. (2009) · Springer Series in Statistics · doi:10.1007/978-0-387-84858-7 · Cited by 25,970
Learning Phrase Representations using RNN Encoder–Decoder for Statistical Machine Translation
Cho, K., van Merrienboer, B., Gulcehre, C., Bahdanau, D., Bougares, F., Schwenk, H., & Bengio, Y. (2014) · Proceedings of the 2014 Conference on Empirical Methods in Natural Language Processing (EMNLP) · doi:10.3115/v1/d14-1179 · Cited by 25,545
Reinforcement Learning: An Introduction
Sutton, R. S., & Barto, A. (2005) · IEEE Transactions on Neural Networks · doi:10.1109/tnn.2004.842673 · Cited by 25,268
Pan, S. J., & Yang, Q. (2010) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2009.191 · Cited by 23,387
Flagged first, then by citations
Research works printed but not linked: 17
- lakhotia, 2004, Are metamorphic viruses really invincible, Virus Bull, 12, 57
- zheng, 2018, IoT Malware Evolves to Harvest Bots by Exploiting a Zero-Day Home Router Vulnerability
- baba, 2015, Current issues in ensemble methods and its applications, J Theor Appl Inf Technol, 81, 266
- münz, 2007, Traffic anomaly detection using k-means clustering, Proc GI/ITG Workshop MMBnet, 1
- adetunmbi, 2008, Network intrusion detection based on rough set and k-nearest neighbor, Int J Comput ICT Res, 2, 60
- 2017, Internet of medical things forecast to 2021
- 10.1007/BF03219883 · DOI
- goodfellow, 2016, Deep Learning
- zhu, 2005, Semi-supervised learning literature survey
- clevert, 2015, Fast and accurate deep network learning by exponential linear units (ELUs)
- mohammadi, 2017, Deep Learning for IoT Big Data and Streaming Analytics A Survey
- goodfellow, 2014, Generative adversarial nets, Proc Adv Neural Inf Process Syst, 2672
- tong, 2001, Support vector machine active learning with applications to text classification, J Mach Learn Res, 2, 45
- nguyen, 2019, Secure computation offloading in blockchain based IoT networks with deep reinforcement learning
- dulac-arnold, 2019, Challenges of Real-World Reinforcement Learning
- nguyen, 2019, Deep reinforcement learning for cyber security
- 2018, Mobile Apps Leveraging the Internet of Things (IoT)
Cited by
Sorted by citations
Items 1,001–1,001 of 1,001
Shen, M., Pillai, A. A., Yuan, B. A., Davis, J. C., & Machiry, A. (2023) · arXiv · doi:10.48550/arxiv.2310.00205 · Cited by 1
Metadata
- Authors
- Al-Garadi, M. A., Mohamed, A., Al-Ali, A. K., Du, X., Ali, I., & Guizani, M.
- Affiliations
- Qatar University (QA)
- Temple University (US)
- University of Malaya (MY)
- ORCID
- Venue
- IEEE Communications Surveys & Tutorials
- Published
- 2020
- Volume
- 22
- Issue
- 3
- Pages
- 1646-1685
- ISSN
- 1553-877X (ISSN-L)
- 2373-745X
- OpenAlex
- W2885012953
- Semantic Scholar
- da8a949f9c9f1df3a38f12c2cac97b789c705465
- Cited by
- 1,392
- References
- 294
- Citations by year
- 2026: 170 · 2025: 234 · 2024: 232 · 2023: 237 · 2022: 213 · 2021: 217 · 2020: 75
- FWCI
- 87.17
- Type
- journal article
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- IEEE Communications Surveys & Tutorials (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- Qatar University QSpace (Qatar University) (submittedVersion)
- arXiv (Cornell University)
- Funders
- NPRP from the Qatar National Research Fund (8-408-2-172, 12S-0305-190231)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Keywords
- Internet of Things security, machine learning for security, deep learning for security, IoT security threats, attack surface, IoT vulnerabilities, intrusion detection, anomaly detection, authentication, access control, network security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
