arXiv:2606.30701cs.CRcs.AI2026-06

用AI动态选安全的物联网服务提供者,兼顾可靠性和效率。

An AI-Based Solution for Secure Service Provisioning in IoT

论文配图:An AI-Based Solution for Secure Service Provisioning in IoT
图 1 · 摘自论文原文
  • 用深度强化学习自动选择最优服务提供者并适应环境变化。
  • 通过联邦学习构建分布式行为指纹模型,实时监测设备合规性。
  • 为服务提供者生成可靠性评分,提升安全决策能力,适合资源受限设备。

随着物联网(IoT)快速扩展,攻击面持续扩大,针对智能设备及其交互的新威胁不断涌现。确保服务提供过程的安全对保障IoT生态的正常运行、安全与可靠性至关重要。服务提供涵盖设备注册、配置、认证、授权和软件部署等关键任务。本文提出一个综合框架,旨在在给定IoT环境中选择最合适的智能对象提供目标服务,并在服务提供阶段监控相关实体的行为。为此,采用深度强化学习(DRL)方法,使智能代理通过与复杂动态环境的交互,学习如何在遵守预设安全约束的前提下适应变化。对于行为监控,利用联邦学习(FL)构建全分布式的行为指纹(BF)模型,可分析设备在网络中的交互模式。同时,基于BF计算每个服务提供者的可靠性评分,反映其对安全约束的符合程度,并将其融入服务选择过程,使智能对象不仅能根据功能适配性,还能依据可靠性水平进行选择。我们进行了广泛的实验评估,结果表明该方案可在资源受限的IoT设备上有效部署,是现代IoT生态系统中一种可行且可扩展的安全增强机制。

原文摘要 · Abstract (English)

As the Internet of Things (IoT) continues its rapid expansion, the attack surface grows accordingly, with emerging threats targeting smart objects and their interactions. In this evolving landscape, securing service provisioning is crucial to ensure the proper functioning, security, and reliability of the IoT ecosystem. Service provisioning encompasses key tasks such as device registration, configuration, authentication, authorization, and software deployment, all of which are essential for seamless and secure IoT operations. In this paper, we present a comprehensive framework designed to select the most suitable smart objects to deliver a target service within a given IoT environment while also monitoring the behavior of the entities involved during the service provisioning phase. To achieve this, we employ a Deep Reinforcement Learning (DRL) approach in which an intelligent agent learns, through interaction with a complex, dynamic environment, how to adapt to changes while adhering to predefined security constraints. For behavioral monitoring, we leverage Federated Learning (FL) to develop a global Behavioral Fingerprinting (BF) model that is fully distributed and can analyze how IoT devices interact within the network. In addition, the BF is used to compute a reliability score for each service provider, reflecting its degree of compliance with the defined security constraints. This score is then incorporated into the service provisioning process, allowing smart objects to select providers not only according to functional suitability but also to their reliability level. Finally, we conduct an extensive experimental evaluation to assess the robustness and scalability of our approach. The results demonstrate that our solution can be effectively deployed even on resource-constrained IoT devices, making it a viable and scalable security-enhancing mechanism for modern IoT ecosystems.

物联网安全深度强化学习联邦学习服务选择

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。