{"id":"https://openalex.org/W4322628400","doi":"https://doi.org/10.3390/jsan12020019","title":"A Novel Multi Algorithm Approach to Identify Network Anomalies in the IoT Using Fog Computing and a Model to Distinguish between IoT and Non-IoT Devices","display_name":"A Novel Multi Algorithm Approach to Identify Network Anomalies in the IoT Using Fog Computing and a Model to Distinguish between IoT and Non-IoT Devices","publication_year":2023,"publication_date":"2023-02-28","ids":{"openalex":"https://openalex.org/W4322628400","doi":"https://doi.org/10.3390/jsan12020019"},"language":"en","primary_location":{"id":"doi:10.3390/jsan12020019","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jsan12020019","pdf_url":"https://www.mdpi.com/2224-2708/12/2/19/pdf?version=1677575479","source":{"id":"https://openalex.org/S2736633529","display_name":"Journal of Sensor and Actuator Networks","issn_l":"2224-2708","issn":["2224-2708"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Sensor and Actuator Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2224-2708/12/2/19/pdf?version=1677575479","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002480901","display_name":"Rami J. Alzahrani","orcid":"https://orcid.org/0000-0002-0116-0183"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]},{"id":"https://openalex.org/I52207611","display_name":"Al Baha University","ror":"https://ror.org/0403jak37","country_code":"SA","type":"education","lineage":["https://openalex.org/I52207611"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Rami J. Alzahrani","raw_affiliation_strings":["Department of Computer Science, Faculty of Computer Science and Information Technology, Al-Baha University, Al-Baha 65799, Saudi Arabia","Department of Computer Science, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-0116-0183","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computer Science and Information Technology, Al-Baha University, Al-Baha 65799, Saudi Arabia","institution_ids":["https://openalex.org/I52207611"]},{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088974635","display_name":"Ahmed Alzahrani","orcid":"https://orcid.org/0000-0003-3261-4413"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Ahmed Alzahrani","raw_affiliation_strings":["Department of Computer Science, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0003-3261-4413","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5002480901"],"corresponding_institution_ids":["https://openalex.org/I185163786","https://openalex.org/I52207611"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1732},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1732},"fwci":6.0487,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.96685447,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"12","issue":"2","first_page":"19","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8720996379852295},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8519996404647827},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7921642065048218},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7825436592102051},{"id":"https://openalex.org/keywords/cusum","display_name":"CUSUM","score":0.7352250814437866},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.64584881067276},{"id":"https://openalex.org/keywords/ewma-chart","display_name":"EWMA chart","score":0.6358954906463623},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5616261959075928},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5413764119148254},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4672268331050873},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.439494788646698},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3754982352256775},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.34294021129608154},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3302467465400696}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8720996379852295},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8519996404647827},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7921642065048218},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7825436592102051},{"id":"https://openalex.org/C178518018","wikidata":"https://www.wikidata.org/wiki/Q1024555","display_name":"CUSUM","level":2,"score":0.7352250814437866},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.64584881067276},{"id":"https://openalex.org/C74746147","wikidata":"https://www.wikidata.org/wiki/Q5324652","display_name":"EWMA chart","level":4,"score":0.6358954906463623},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5616261959075928},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5413764119148254},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4672268331050873},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.439494788646698},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3754982352256775},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.34294021129608154},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3302467465400696},{"id":"https://openalex.org/C196985124","wikidata":"https://www.wikidata.org/wiki/Q1369242","display_name":"Control chart","level":3,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/jsan12020019","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jsan12020019","pdf_url":"https://www.mdpi.com/2224-2708/12/2/19/pdf?version=1677575479","source":{"id":"https://openalex.org/S2736633529","display_name":"Journal of Sensor and Actuator Networks","issn_l":"2224-2708","issn":["2224-2708"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Sensor and Actuator Networks","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:6330a62aa31e4f7589841a5b9e89eda8","is_oa":true,"landing_page_url":"https://doaj.org/article/6330a62aa31e4f7589841a5b9e89eda8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Sensor and Actuator Networks, Vol 12, Iss 2, p 19 (2023)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/2224-2708/12/2/19/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/jsan12020019","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Sensor and Actuator Networks","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/jsan12020019","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jsan12020019","pdf_url":"https://www.mdpi.com/2224-2708/12/2/19/pdf?version=1677575479","source":{"id":"https://openalex.org/S2736633529","display_name":"Journal of Sensor and Actuator Networks","issn_l":"2224-2708","issn":["2224-2708"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Sensor and Actuator Networks","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322322","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4322628400.pdf"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1587184606","https://openalex.org/W1966809779","https://openalex.org/W2138617772","https://openalex.org/W2312203001","https://openalex.org/W2345961355","https://openalex.org/W2428710022","https://openalex.org/W2621148797","https://openalex.org/W2783809518","https://openalex.org/W2885657717","https://openalex.org/W2888505697","https://openalex.org/W2899346060","https://openalex.org/W2905724129","https://openalex.org/W2910612999","https://openalex.org/W2911505293","https://openalex.org/W2928689123","https://openalex.org/W2942653132","https://openalex.org/W2945719300","https://openalex.org/W3029494242","https://openalex.org/W3082110788","https://openalex.org/W3102441862","https://openalex.org/W3137868587","https://openalex.org/W3164721774","https://openalex.org/W3177063771","https://openalex.org/W3178149874","https://openalex.org/W3194002396","https://openalex.org/W3207891930","https://openalex.org/W3216313743","https://openalex.org/W4205608240","https://openalex.org/W4225002643","https://openalex.org/W4248201568"],"related_works":["https://openalex.org/W2787075961","https://openalex.org/W4313549217","https://openalex.org/W3026018975","https://openalex.org/W3012965779","https://openalex.org/W1989286518","https://openalex.org/W2419539551","https://openalex.org/W1975315982","https://openalex.org/W4285609096","https://openalex.org/W4322628400","https://openalex.org/W2377356555"],"abstract_inverted_index":{"Botnet":[0],"attacks,":[1],"such":[2,47,115,223],"as":[3,48,116,224,278],"DDoS,":[4],"are":[5],"one":[6],"of":[7,12,22,28,54,93,103,129,169,200,206],"the":[8,52,55,61,75,86,91,104,127,135,161,165,193,204,233,237,276],"most":[9],"common":[10],"types":[11],"attacks":[13,95],"in":[14,44,74,96,138,263],"IoT":[15,45,97,139,162,266],"networks.":[16],"A":[17],"botnet":[18,225],"is":[19],"a":[20,100,117,123,170,177,246,251],"collection":[21],"cooperated":[23],"computing":[24,202],"machines":[25],"or":[26,70],"Internet":[27,205],"Things":[29,207],"gadgets":[30],"that":[31,175,180,241],"criminal":[32],"users":[33],"manage":[34],"remotely.":[35],"Several":[36],"strategies":[37],"have":[38,258],"been":[39,158],"developed":[40,159],"to":[41,81,113,144,219],"reduce":[42],"anomalies":[43],"networks,":[46],"DDoS.":[49],"To":[50],"increase":[51],"accuracy":[53,248],"anomaly":[56,88,130,146,154,216],"mitigation":[57,89,92,131,147,155,217],"system":[58,79,156,174],"and":[59,108,122,167,192,267],"lower":[60],"false":[62,253],"positive":[63,254],"rate":[64,255],"(FPR),":[65],"some":[66],"schemes":[67],"use":[68],"statistical":[69,178],"machine":[71],"learning":[72],"methodologies":[73],"anomaly-based":[76],"intrusion":[77],"detection":[78,125,173],"(IDS)":[80],"mitigate":[82],"an":[83,152,210,215],"attack.":[84],"Despite":[85],"proposed":[87,228],"techniques,":[90],"DDoS":[94,107,171],"networks":[98],"remains":[99],"concern.":[101],"Because":[102],"similarity":[105],"between":[106,265],"normal":[109],"network":[110,163],"flows,":[111],"leading":[112],"problems":[114],"high":[118,247],"FPR,":[119],"low":[120,124,252],"accuracy,":[121],"rate,":[126],"majority":[128],"methods":[132],"fail.":[133],"Furthermore,":[134],"limited":[136],"resources":[137],"devices":[140],"make":[141,275],"it":[142],"difficult":[143],"implement":[145],"techniques.":[148],"In":[149],"this":[150],"paper,":[151],"efficient":[153],"has":[157,208,244],"for":[160,213],"through":[164],"design":[166],"implementation":[168],"attack":[172],"uses":[176],"method":[179],"combines":[181],"three":[182],"algorithms:":[183],"exponentially":[184],"weighted":[185],"moving":[186],"average":[187],"(EWMA),":[188],"K-nearest":[189],"neighbors":[190],"(KNN),":[191],"cumulative":[194],"sum":[195],"algorithm":[196],"(CUSUM).":[197],"The":[198,227],"integration":[199],"fog":[201],"with":[203,250],"created":[209],"effective":[211],"framework":[212],"implementing":[214],"strategy":[218],"address":[220],"security":[221],"issues":[222],"threats.":[226],"module":[229],"was":[230],"evaluated":[231],"using":[232],"Bot-IoT":[234],"dataset.":[235],"From":[236],"results,":[238],"we":[239],"conclude":[240],"our":[242],"model":[243],"achieved":[245,260],"(99.00%)":[249],"(FPR).":[256],"We":[257],"also":[259],"good":[261],"results":[262],"distinguishing":[264],"non-IoT":[268],"devices,":[269],"which":[270],"will":[271],"help":[272],"networking":[273],"teams":[274],"distinction":[277],"well.":[279]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":8}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}