The University of Southampton
University of Southampton Institutional Repository

Adaptive learning-based hybrid recommender system for deception in Internet of Thing

Adaptive learning-based hybrid recommender system for deception in Internet of Thing
Adaptive learning-based hybrid recommender system for deception in Internet of Thing
In the rapidly evolving Internet of Things (IoT) security domain, device vulnerabilities pose significant risks, frequently exploited by cyberattackers. Traditional reactive security measures like patching often fall short against advanced threats. This paper introduces a proactive deception system enhanced by an innovative Adaptive Learning-based Hybrid Recommender System (AL-HRS), utilizing the vulnerability and attack repository for IoT (VARIoT) database. This advanced system identifies existing vulnerabilities and dynamically recommends additional deceptive vulnerabilities based on real-time analysis of attacker behavior and historical exploit data. These recommended vulnerabilities mislead attackers into engaging with controlled environments such as honeypots, effectively neutralizing potential threats. The AL-HRS combines the predictive strengths of content-based filtering (CBF) and collaborative filtering (CF) with an adaptive learning mechanism that adjusts recommendations based on ongoing attacker interactions, ensuring the system’s efficacy amidst changing attack patterns. Our approach innovatively combines these methodologies to provide a continuously evolving security strategy, significantly enhancing the deception capability of IoT systems. Initial evaluations demonstrate a potential reduction in device compromise, highlighting the effectiveness and strategic relevance of this adaptive deception framework in IoT cybersecurity.
1389-1286
110853
Mfogo, Volviane Saphir
4d961a33-19af-4e4d-a2a8-5b7be36bec2b
Zemkoho, Alain
30c79e30-9879-48bd-8d0b-e2fbbc01269e
Njilla, Laurent
e3080135-a677-4208-ada9-f1bc90a36118
Nkenlifack, Marcellin
4b90915c-3f06-4a5b-b4d1-818bb26a3eef
Kamhoua, Charles
3da843b0-d1c9-48a7-94bc-fe65bb09307d
Mfogo, Volviane Saphir
4d961a33-19af-4e4d-a2a8-5b7be36bec2b
Zemkoho, Alain
30c79e30-9879-48bd-8d0b-e2fbbc01269e
Njilla, Laurent
e3080135-a677-4208-ada9-f1bc90a36118
Nkenlifack, Marcellin
4b90915c-3f06-4a5b-b4d1-818bb26a3eef
Kamhoua, Charles
3da843b0-d1c9-48a7-94bc-fe65bb09307d

Mfogo, Volviane Saphir, Zemkoho, Alain, Njilla, Laurent, Nkenlifack, Marcellin and Kamhoua, Charles (2024) Adaptive learning-based hybrid recommender system for deception in Internet of Thing. Computer Networks, 255, 110853. (doi:10.1016/j.comnet.2024.110853).

Record type: Article

Abstract

In the rapidly evolving Internet of Things (IoT) security domain, device vulnerabilities pose significant risks, frequently exploited by cyberattackers. Traditional reactive security measures like patching often fall short against advanced threats. This paper introduces a proactive deception system enhanced by an innovative Adaptive Learning-based Hybrid Recommender System (AL-HRS), utilizing the vulnerability and attack repository for IoT (VARIoT) database. This advanced system identifies existing vulnerabilities and dynamically recommends additional deceptive vulnerabilities based on real-time analysis of attacker behavior and historical exploit data. These recommended vulnerabilities mislead attackers into engaging with controlled environments such as honeypots, effectively neutralizing potential threats. The AL-HRS combines the predictive strengths of content-based filtering (CBF) and collaborative filtering (CF) with an adaptive learning mechanism that adjusts recommendations based on ongoing attacker interactions, ensuring the system’s efficacy amidst changing attack patterns. Our approach innovatively combines these methodologies to provide a continuously evolving security strategy, significantly enhancing the deception capability of IoT systems. Initial evaluations demonstrate a potential reduction in device compromise, highlighting the effectiveness and strategic relevance of this adaptive deception framework in IoT cybersecurity.

This record has no associated files available for download.

More information

Accepted/In Press date: 7 October 2024
Published date: 1 December 2024

Identifiers

Local EPrints ID: 508599
URI: http://eprints.soton.ac.uk/id/eprint/508599
ISSN: 1389-1286
PURE UUID: 3084bdc9-a157-463f-9b5c-0942623ea4f3
ORCID for Alain Zemkoho: ORCID iD orcid.org/0000-0003-1265-4178

Catalogue record

Date deposited: 27 Jan 2026 18:12
Last modified: 28 Jan 2026 03:37

Export record

Altmetrics

Contributors

Author: Volviane Saphir Mfogo
Author: Alain Zemkoho ORCID iD
Author: Laurent Njilla
Author: Marcellin Nkenlifack
Author: Charles Kamhoua

Download statistics

Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.

View more statistics

Atom RSS 1.0 RSS 2.0

Contact ePrints Soton: eprints@soton.ac.uk

ePrints Soton supports OAI 2.0 with a base URL of http://eprints.soton.ac.uk/cgi/oai2

This repository has been built using EPrints software, developed at the University of Southampton, but available to everyone to use.

We use cookies to ensure that we give you the best experience on our website. If you continue without changing your settings, we will assume that you are happy to receive cookies on the University of Southampton website.

×