Cyber diplomacy is critical in dealing with the digital era's evolving cybersecurity dangers and possibilities.This article investigates the impact of Artificial Intelligence (AI), the Internet of Things (IoT), Blockchains, and Quantum Computing on cyber diplomacy.AI holds the potential for proactive threat identification and response, while IoT enables international information sharing.Blockchains enable secure data sharing and document verification, but they also pose new threats, such as AI-driven cyber-attacks, IoT privacy breaches, blockchain vulnerabilities, and the potential for quantum computing to break encryption.This article conducts case study reviews in combination with secondary data analysis and emphasises the value of international cooperation in developing global norms and frameworks to control responsible technology adoption.Cyber diplomacy can promote cybersecurity, protect national interests, and foster mutual trust among nations in the digital sphere by capitalising on possibilities and reducing threats.
This research introduces innovative features tailored to capture distinctive characteristics of ransomware activity within the cryptocurrency ecosystem. The study employs a multifaceted analysis to delve into ransomware-related data encompassing transaction metadata, ransom analysis, behavioral patterns, and financial aspects. A feature selection algorithm is explored to discern ransomware transactions in Bitcoin (BTC) and the United States Dollar (USD) using the UGRansome dataset. This comprehensive dataset of ransomware-related transactions facilitates the proposal of novel features designed to capture the unique traits of ransomware activity. The correlation matrix and temporal analysis of these features contribute to a nuanced understanding of the dynamic nature of ransomware threats. The research presents the Ransomware Feature Selection Algorithm (RFSA) based on Gini Impurity and Mutual Information (MI) to effectively select crucial ransomware features. Evaluation metrics such as precision, recall, accuracy, and F1 score highlight the effectiveness of the RFSA. The analysis reveals that approximately 68% of ransomware incidents involve BTC transactions ranging from 1.46 to 2.56, with an average of 2.01 BTC transactions per attack. Moreover, ransomware causes financial damages ranging from 4.38 to 172.36 USD, with an average damage of 88.37 USD. The RFSA identifies 17 ransomware types and their associated malware to shed light on their characteristics. The study investigates the pricing of ransomware and reveals that TowerWeb is associated with the highest fee, amounting to 135.26 BTC, while CryptoLocker has the lowest fee, recorded at 10.51 BTC. Additionally, the impact of ransomware duration on financial gains and network flow is investigated, disclosing a correlation between extended duration and higher financial gains. The research achieves outstanding performance metrics, including an MI score of 95%, accuracy of 93%, recall of 92%, and precision of 89%. These results showcase the superiority of the proposed approach over existing studies, emphasizing the dynamic and adaptable nature of ransomware demands. The findings suggest that there is no fixed amount for specific cyberattacks. This underscores the importance of adapting to the evolving landscape of ransomware threats.
Ensuring robust security in the Internet of Things (IoT) landscape is of paramount importance. This research article presents a novel approach to enhance IoT security by leveraging collaborative threat intelligence and integrating blockchain technology with machine learning (ML) models. The iOS application acts as a central control centre, facilitating the reporting and sharing of detected threats. The shared threat data is securely stored on a blockchain network, enabling ML models to access and learn from a diverse range of threat scenarios. The research focuses on implementing Random Forest, Decision Tree classifier, Ensemble, LSTM, and CNN models on the IoT23 dataset within the context of a Collaborative Threat Intelligence Framework for IoT Security. Through an iterative process, the models’ accuracy is improved by reducing false negatives through the collaborative threat intelligence system. The article investigates the implementation details, privacy considerations, and the seamless integration of ML-based techniques for continuous model improvement. Experimental evaluations on the IoT23 dataset demonstrate the effectiveness of the proposed system in enhancing IoT security and mitigating potential threats. The research contributes to the advancement of collaborative threat intelligence and blockchain technology in the context of IoT security, paving the way for more secure and reliable IoT deployments.
Abstract Sybil attacks are a very serious challenge in social networks including, the Social Internet of Things (SIoT). This paper introduces the SybilPSIoT method, in which a hybrid prevention and detection decentralized approach is proposed in SIoT based on smart contracts. The owner adds his objects to the smart contract. However, hostile owners can create Sybil things. This paper formally presents a model that uses a signed SIoT network with objects and identifiers as network nodes and information about the type of nodes (acknowledgers). Assuming the relationship between the edge marks between nodes and the node type, the proposed method uses trust paths between verification and desired nodes using a Bayesian inference model and structural balance patterns to judge the target node in these paths. It also uses game theory to control access owners to prevent Sybil from creating new things based on a cost‐benefit function. Based on the analysis method, a validating effect proportional to the path length on the target object was presented. This method was compared with the most novel available methods; the results from this comparison depict the scalability and effectiveness of the proposed method for large networks.
Muyun Gao, Shenwen Lin, Xin Tian, Xi He · 6 authors
Abstract There are service communities with different functions in the Bitcoin transactions system. Identifying community categories helps to further understand the Bitcoin transactions system and facilitates targeted regulation of anonymized Bitcoin transactions. To this end, a Bitcoin service community classification method based on Random Forest and improved K‐Nearest Neighbor (KNN) algorithm is proposed. First, the transaction characteristics of different types of communities are analyzed and summarized, and the corresponding transaction features are extracted from the address and entity levels; then multiple classification algorithms are compared, the optimal model to filter the effective features is selected, and the feature vector of entity addresses is constructed. Finally, a classification model is constructed based on Random Forest and improved KNN algorithm to classify the entities. By constructing different classification models for experimental comparison, the accuracy and stability advantages of the proposed method for classification in service community classification research are verified.
Muhammad Baqer Mollah, Md Abul Kalam Azad, Yinghui Zhang
Smart devices are considered as an integral part of Internet of Things (IoT), have an aim to make a dynamic network to exchange information, collect data, analysis, and make optimal decisions in an autonomous way to achieve more efficient, automatic, and economical services. Message dissemination among these smart devices allows adding new features, sending updated instructions, alerts or safety messages, informing the pricing information or billing amount, incentives, and installing security patches. On one hand, such message disseminations are directly beneficial to the all parties involved in the IoT system. On the other hand, due to remote procedure, smart devices, vendors, and other involved authorities might have to meet a number of security, privacy, and performance related concerns while disseminating messages among targeted devices. To this end, in this paper, we design STarEdgeChain, a security and privacy aware targeted message dissemination in IoT to show how blockchain along with advanced cryptographic techniques are devoted to address such concerns. In fact, the STarEdgeChain employs a permissioned blockchain assisted edge computing in order to expedite a single signcrypted message dissemination among targeted groups of devices, at the same time avoiding the dependency of utilizing multiple unicasting approaches. Finally, we develop a software prototype of STarEdgeChain and show it's practicability for smart devices. The codes are publicly available at https://github.com/mbaqer/Blockchain-IoT
The coming 6G wireless network is poised to achieve unprecedented data rates, latency, and integration with newer technologies like AI and IoE. On the other hand, along with this kind of growth in the AI domain and the large-scale connectivity in 6G. It is also going to raise many security concerns at the level of intrusion detection and prevention. For intrusion detection, centralized approaches won’t be able to work effectively, therefore there is an utmost need to design decentralized and privacy-preserving solutions. In this work, we propose a novel secure gradients exchange algorithm for distributed intrusion detection in 6G networks. Our method is designed to take into account the use of Federated Learning with secure multi-party computation and blockchain technology. This way ensures that the collaborating parties are able to conduct the training of intrusion detection models in a secure and collaborative manner by retaining privacy in the data. Gradient compression and adaptive secure aggregation strategies are used to further optimize communication overhead and computational complexity. Therefore, our design works in a robust and efficient manner with the high data rates and huge connectivity that 6G networks will provide. To achieve our goal, experiments using the CICIoT2023 dataset were performed, and results showed that our federated learning-based hybrid model composed of CNN1D and a multi-head attention mechanism outperformed other well-known deep learning models in terms of performance. It achieved the highest average accuracy with 79.92%, the highest average detection rate with 77.41%, and a low false alarm rate with 2.55%.
Shereen Ismail, Salah Dandan, Diana W. Dawoud, Hassan Reza
The security of Industrial Supply Chain (ISC) has emerged through the integration of Industrial Internet of Things (IIoT) and Blockchain (BC) technology. This new era involves effectively protecting IIoT systems from various threats and ensuring their smooth operation and resilience against potential cyber-attacks. Within the ISC ecosystem, combining machine learning (ML)-based security models for cyber-attack detection can play a crucial role in enhancing the ISC security and proactively identifying potential threats. This paper presents a BC-enabled ISC that embed ML security model integrated within a multi-layered approach. We conducted a comparative study and performance analysis of several ML classification techniques, with a focus on supervised methods to identify the lightweight model for cyber-attack detection suitable for deployment in resource-constrained IIoT environment. We investigate the performance of Gaussian Naive Bayes (NB), K-Nearest Neighbors (KNN), Random Forest (RF), Decision Tree (DT), and three ensemble techniques, namely Bagging, Stacking, and Boosting. The study employs the WUSTL-IIOT-2021 imbalanced dataset, which contains samples representing four types of attacks, including denial of service (DoS), SQL injection, reconnaissance, and backdoor. The paper addresses the imbalance in class representation by customizing the dataset for training and testing the ML models. Both Mutual Information (MI) and Extra-trees (ET) are applied as a one-stage ensemble feature selection. The performance of the ML models are investigated using classification accuracy (Acc), precision, recall, F1 score, Matthews correlation coefficient (MCC), model size (Mem), training time (TT) and prediction time (PT).
M. Anwar, Noshina Tariq, Muhammad Ashraf, Syed Atif Moqurrab · 7 authors
Cybersecurity challenges pose a significant threat to Healthcare Cyber Physical Systems (CPS) because they heavily rely on wireless communication. Particularly, jamming attacks can severely disrupt the integrity of these CPS networks. This research introduces a decentralized system to address this issue. Therefore, this paper suggested a system that leverages trust and blockchain technology to detect jamming attacks in healthcare CPS effectively. It proposes a layered model to improve CPS networks’ lifetime and performance. In smart healthcare environments, it ensures secure and reliable communication between sensor nodes, wearable sensors, medical devices, and monitoring systems. Results show that the suggested approach outperforms the baseline model in identifying and minimizing jamming assaults, with an average percentage difference of 15.71% more detection rate, 20.21% less packet loss rates, 16.65% less node-level energy consumption, reduced network latency of 8.29%, and 9.63% more network throughput.
Ikram Ud Din, Kamran Khan, Ahmad Almogren, Mahdi Zareei · 5 authors
In order to improve cybersecurity in newly developed network infrastructures, this research investigates the integration of blockchain technology with zero-trust security concepts. The zero-trust paradigm ensures continuous authentication across entities, in contrast to standard security models that often presuppose trust based on a network environment. Blockchain is used to decentralize and impose authentication intensity of communication clarity and honesty. The study compares the performance of the zero trust model enhanced by blockchain to traditional security systems in a number of parameters, such as intrusion detection rates and security breach reaction times, using extensive simulations. The findings demonstrate that the blockchain-enhanced zero-trust architecture performs better than conventional systems in both identifying and countering threats and methodically handling a large volume of transactions when under pressure. These conclusions, which emphasize significant advancements in security applications and system resilience, are predicated on the use of blockchain in zero-trust systems. Subsequent investigations will endeavor to enhance these technologies and investigate their utilization in networks across diverse intricate scenarios.
Ananda Ravuri, M. Sadish Sendil, Moshe Rani, A. Srikanth · 7 authors
Protection of the Internet of Things (IoT) has become a significant concern due to the widespread use of IoT technologies. Conventional Intrusion Detection Systems (IDS) have challenges when used in IoT networks because of resource restrictions and complexities. Blockchain Technology (BCT) has significantly altered organizations' financial behavior and effectiveness in recent years. Data security and system stability are crucial concerns that must be tackled in blockchain systems. The study suggests a mechanism called Deep Blockchain-Enabled Collaborative Anomaly Detection (DBC-CAD) for security-focused distributed Anomaly Detection (AD) and privacy-focused BC with smart contracts in IoT networks. A Modified - Long Short-Term Memory (M-LSTM) based Deep Learning (DL) algorithm with a multi-variable optimization approach has been used for the AD approach. The multi-variable optimization technique has been used to set the hyperparameters. The Ethereum framework creates privacy-focused BC and smart contract techniques that safeguard decentralized AD engines. The proposed M-LSTM model has the highest detection rate of 99.1%. The findings show the effectiveness of the proposed systems in identifying assaults on IoT networks.
In recent years, the convenience and potential use of crypto-assets such as Bitcoin and Ethereum have attracted increasing attention. On the other hand, there have been reports of attacks on the blockchain networks that support crypto-assets in an attempt to steal other users’ assets. In the past, research on attack observation against blockchains has used techniques such as holding real crypto-assets to lure attackers into honeypots or falsifying balances to attackers. However, these methods risk losing crypto-assets to attackers or being exposed as honeypots to attackers. To solve these problems, we propose a new RPC (Remote Procedure Call) honeypot method that returns the wallet address of another partya. holding a high balance in response to an attacker’s request, thereby luring the attacker without having the real crypto-assets. Our experimental evaluation shows that this method can attract more attackers than the method with zero-balance wallets and can observe more sophisticated attacks. Furthermore, we proposed a risk reduction strategy for crypto-asset theft by applying the idea of our method. In the log analysis process, we devised a new clustering method using the number of times an attacker executes a specific method as a feature. By applying this method, we successfully classified attackers based on their objectives, demonstrating the efficient analysis of vast amounts of log data.
Wireless Sensor Networks (WSNs) are essential for data collection across various domains but face growing risks from replication attacks, which introduce new vulnerabilities and security challenges. To address this issue, we propose a novel hybrid approach that integrates Distributed Ledger Technology (DLT) with adaptive Machine Learning (ML) methods, aiming to bolster both security and trustworthiness within WSNs. Specifically, our approach utilizes DLT to secure voting records and manage rewards, while adaptive ML models detect replica nodes by analyzing network parameters, including location, signal strength, and transmission rate. We present and evaluate three ML-based models for detecting replication attacks: 1) Random Forest Model (RFM), 2) Adaptive Weighted Random Forest Model based on Predicted Replica Nodes (AWRFM-PRN), and 3) Adaptive Weighted Random Forest Model based on Predicted Good and Replica Nodes (AWRFM-PGRN). The AWRFM-PRN and AWRFM-PGRN models enhance detection accuracy through iterative weight adjustments based on previous predictions. Our simulations show that the hybrid approach significantly improves detection performance compared to traditional methods. We evaluated our models by increasing the dataset size with varying proportions of replica nodes across ten subsets. We found that the AWRFM-PGRN model achieved around 71% accuracy when replica nodes comprised 50% or more of the network. Meanwhile, the AWRFM-PRN model demonstrated high effectiveness with accuracy ranging from 80% to 99% for replica nodes constituting 15% to 40% of the network. Furthermore, all models delivered nearly 99.9% accuracy when the proportion of replica nodes was between 5% and 10%. This innovative integration of DLT with adaptive ML modeling establishes a benchmark for robust and tamper-proof security in WSNs, offering significant enhancements over traditional ML techniques such as RFM, particularly in scenarios with high replica node counts.
The rapid adoption of Internet of Things (IoT) devices in smart homes has led to growing security vulnerabilities, primarily due to the limitations of traditional, static access control mechanisms. This paper presents a novel, dynamic access control policy that leverages the immutable and transparent nature of Blockchain technology, specifically Ethereum, along with machine learning algorithms to enhance security measures. By integrating machine learning algorithms like Support Vector Machines (SVM) and Neural Networks, the proposed system can adapt and respond to changing behavioural patterns and potential threats in real time. Additionally, a caching mechanism implemented on the Ethereum Blockchain is introduced to optimize system performance and reduce latency. Experimental results demonstrate significant improvements in access control security, system efficiency, and adaptability. The findings of this paper not only contribute to the advancement of secure access control policies for IoT smart homes but pave the way for future research in integrating Blockchain and machine learning for robust and scalable IoT security solutions.
Cloud-based deployments face increasing threats from various types of attacks, necessitating robust anomaly detection frameworks to safeguard against potential security breaches. Existing solutions, such as RSSI, GTM, and APG, though effective to a certain extent, exhibit limitations in terms of precision, accuracy, and scalability. To address these shortcomings, this paper proposes a novel anomaly detection framework that integrates multimodal feature analysis, deep learning models, and QoS-aware sidechains to enhance the prediction accuracy of cloud attacks and optimize blockchain-based cloud installations. By maximizing feature variance across different sample types and leveraging advanced deep learning techniques, the proposed approach significantly outperforms conventional methods in terms of precision, accuracy, recall, and AUC performance. Furthermore, the framework demonstrates superior efficiency in block mining delay, energy consumption, and throughput, making it highly suitable for real-time cloud attack prediction scenarios. The proposed methodology represents a significant advancement in anomaly detection and cloud security, offering a comprehensive solution for addressing challenges in blockchain-based cloud deployments. Thus, the proposed anomaly detection framework employs both Deep Learning and Blockchain technologies. Using Recurrent Neural Networks (RNN) with Convolutional Neural Networks (CNN), the system examines system logs and identifies unusual behavior patterns associated with different attacks. Using Blockchain technology, the framework ensures the transparency and integrity of system logs, and Deep Learning models provide precise and timely anomaly detection. The decision to combine Deep Learning and Blockchain technology is justified by the merits of each technique. The distributed, immutable ledger provided by blockchain technology makes it impossible to tamper with system logs and ensures the accuracy of anomaly detection. While, deep learning models, have exceptional pattern recognition abilities and can adapt to changing attack methods, resulting in high precision, accuracy, recall, and AUC metrics. Analyses of experimental data demonstrate that the proposed framework is effective. The framework achieves impressive performance metrics, such as low delays, 98.5% precision, 99.4% accuracy, 98.3% recall, and 99.2% Area Under the Curve (AUC).
As the deployment of IPv6 networks continues to expand, managing security threats becomes increasingly intricate due to the protocol’s extensive address space and dynamic traffic patterns. This paper presents a novel blockchain-driven decentralized anomaly detection algorithm designed explicitly for IPv6 networks. By leveraging the inherent properties of blockchain—immutability, transparency, and decentralization—our approach enhances security monitoring capabilities. Integrating traffic analysis with a distributed ledger facilitates improved accuracy in anomaly detection and robust resilience against distributed denial-of-service (DDoS) attacks and other threats. Experimental evaluations conducted in a simulated IPv6 environment demonstrate that the proposed methodology outperforms traditional centralized detection systems, significantly improving detection accuracy, attack mitigation, and data integrity.
Remote attestation (RA) protocols have been widely used to evaluate the integrity of software on remote devices.Currently, the state-of-the-art RA protocols lack a crucial feature: transparency.This means that the details of the final attestation verification are not openly accessible or verifiable by the public.Furthermore, the interactivity of these protocols often limits attestation to trusted parties who possess privileged access to confidential device data, such as pre-shared keys and initial measurements.These constraints impede the widespread adoption of these protocols in various applications.In this paper, we introduce zRA, a non-interactive, transparent, and publicly provable RA protocol based on zkSNARKs.zRA enables verification of device attestations without the need for pre-shared keys or access to confidential data, ensuring a trustless and open attestation process.This eliminates the reliance on online services or secure storage on the verifier side.Moreover, zRA does not impose any additional security assumptions beyond the fundamental cryptographic schemes and the essential trust anchor components on the prover side (i.e., ROM and MPU).The zero-knowledge attestation proofs generated by devices have constant size regardless of the network complexity and number of attestations.Moreover, these proofs do not reveal sensitive information regarding internal states of the device, allowing verification by anyone in a public and auditable manner.We conduct an extensive security analysis and demonstrate scalability of zRA compared to prior work.Our analysis suggests that zRA excels especially in peer-to-peer and Pub/Sub network structures.To validate the practicality, we implement an open-source prototype of zRA using the Circom language.We show that zRA can be securely deployed on public permissionless blockchains, serving as an archival platform for attestation data to achieve resilience against DoS attacks.
Cryptocurrencies are crucial in modern commerce and finance, whether at the national, corporate, or individual level. They serve as fundamental currencies for buying and selling, enabling various business transactions. However, the rise of cybercrime has brought about concerns regarding their operations, potential breaches in encrypted currencies, and the security systems managing them. The frequency of attack tactics and the motivation of attackers seeking financial gain are well-known. Many cryptocurrencies lack the necessary algorithms, techniques, and knowledge to effectively detect and mitigate malware, making them vulnerable targets for hackers. In this study, machine learning techniques are employed to detect malicious code in digital currencies. Additionally, a comparison of these techniques is conducted to determine the most suitable algorithm and technology, Furthermore, this study highlights the importance of effective malware detection in securing cryptocurrencies. Three datasets of different sizes were used, each yielding distinct results based on dataset size. The AdaBoost model demonstrated superior performance when applied to the short dataset, while the decision tree model performed best with the medium-sized dataset. Conversely, the Naive Bayes model consistently produced the worst results, while the large-size KNN model achieved the highest performance.
D. Saveetha, G. Maragatham, Vijayakumar Ponnusamy, Nemanja Zdravković
Blockchain networks serve as a transparent and secure ledger storage solution, yet they remain vulnerable to attacks. There must be some mechanism to protect the blockchain network from attacks. Among various attacks, the Distributed Denial of Service (DDoS) attack is considered severe, which is challenging to detect accurately and reliably. Machine learning techniques are used to detect the attack, which requires exploring all global attack data in a single system, which is difficult in practice. This article proposes a distributed machine learning mechanism called Federated Machine Learning for detecting the presence of DDoS attacks. But in federated machine learning the model itself can be poisoned by the malicious collaborating node which is another problem that this article solves by storing the model in blockchain and by introducing a new reputation-based miner selection procedure. The proposed framework integrates the federation of machine learning within the blockchain network framework for detecting DDoS attacks. Under the integrated framework, miners are used to train the blocks and they also participate in the machine learning training. A dynamic reputation-based miner selection mechanism that can balance exploration and exploitation is proposed for optimal miner selection, which can ensure the high accuracy of the machine learning model and improve the security of blockchain from attacks like DDoS attacks and 51% attacks. The proposed framework is tested with Random Forest, Multilayer Perceptron, and Logistic Regression machine learning algorithms. The proposed mechanism achieved maximum accuracy of 99.1% using random forest model which is superior to the existing mechanism of detection of DDoS attacks.
This study aims to find the best performing model in predicting cryptocurrencies using different machine learning models. In our study, an analysis was performed on various cryptocurrencies such as Aave, BinanceCoin, Bitcoin, Cardano, Cosmos, Dogecoin, Ethereum, Solana, Tether, Tron, USDCoin and XRP. Decision Trees, Random Forests, KNearest Neighbours (KNN), Gradient Boost Machine (GBM), LightGBM, XGBoost, CatBoost, Artificial Neural Networks (ANN), Convolutional Neural Networks (CNNs), Recurrent Neural Networks (RNNs) and Short Term Memory networks in Long Comparisons (LSTM) models were used. The performance of the models is compared with Mean Squared Error (MSE), Root Mean Square Error (RMSE) and Mean Absolute Error (MAE). The study results show that there is no single model that consistently outperforms others for all cryptocurrencies. Models such as XGBoost and Random Forests show consistent and strong performance across different cryptocurrencies, proving their robustness in this particular use case. Deep learning algorithms, including Convolutional Neural Networks (CNNs), Recurrent Neural Networks (RNNs) and Long Short Term Memory Networks (LSTMs), show significant accuracy in predicting some cryptocurrencies.
Duc‐Minh Ngo, Dominic Lightbody, Andriy Temko, Colin C. Murphy · 5 authors
With the widespread integration of new technologies, IoT devices are becoming increasingly diverse and capable of handling highly complex tasks, compared to previous generations. This evolution has led to demands for a comprehensive security approach across multiple layers of an IoT architecture. This work proposes a scalable security solution from the edge to the cloud, combining Blockchain technology and anomaly-based Intrusion Detection Systems (IDSs). Smart contracts provide a transparent environment for registering and managing IoT devices on the cloud. Specifically, the smart contract includes two authorization levels for managing administrators and IoT devices. Besides, anomaly-based IDSs are deployed at Gateways to detect network attacks. We propose using lightweight machine learning models on FPGA hardware acceleration for Gateways. We have simulated the Blockchain network on the Ganache software, demonstrating that the smart contract effectively manages administrators and devices such that only authorized entities can access the system. The FPGA-based Gateway, which contains pre-trained Artificial Neural Network (ANN) and Convolutional Neural Network (CNN) detection models from the IoT-23 dataset, has been deployed on the Alveo U280 card. The ANN model has achieved the highest processing speed at 20Gbps. The results indicate that integrating Blockchain and anomaly-based IDS significantly enhances scalable security in IoT networks.