A Two-layer Intrusion Detection System based on Fog and Cloud using Improved KNN and MPNN

preprint OA: closed CC-BY-4.0
📄 Open PDF Full text JSON View at publisher
AI-generated summary by claude@2026-07, 2026-07-16

This study proposes a two-layer intrusion detection system using improved KNN and MPNN in fog and cloud environments to address IoT security limitations and improve accuracy.

One-sentence paraphrase of the abstract; not a substitute for reading it. No clinical advice. How this works

AI-generated deep summary by claude@2026-07, 2026-07-16 · read from full text

The paper proposes a two-layer intrusion detection system for IoT networks, using fog computing at one layer and cloud computing at another, with the goal of identifying malicious traffic while accounting for IoT resource limitations. The methods combine improved K-nearest neighbor variants in the fog layer and a multi-layer perceptron neural network in the cloud layer, and the system is evaluated on the IoT23 dataset. The authors report that the approach improves detection accuracy compared with previous methods, while noting its preprint status and lack of peer review. This paper does not explicitly discuss endometriosis or adenomyosis; it was included in the corpus via a keyword match in the upstream search index.

Read from the paper's body, not the abstract. Not a substitute for reading the paper. No clinical advice. How this works

Abstract

Abstract The concept of Internet of Things (IoT) and its countless applications are considered as an inseparable part of modern technology era. The placement of IoT- based devices and their limitations make the environment more vulnerable due to its openness. Security plays a critical role in IoT applications due to pervasiveness of the IoT in all of the aspects in daily life. from the other hand final devices such as their limited computing power, large number of devices connected to each other, and communication between devices and users do not allow for using traditional methods to solve security issues. Intrusion detection systems (IDSs) which can separate malicious traffic from normal mode are among the effective solutions in this field. the installed IDS should be highly accurate and light weight to affect accuracy. In order to bring services closer to electronic devices, a concept called "fog" has emerged. A large number of studies have been conducted to make the light IDS for IoT network utilizing various methods. The present study aims to propose two-layer hierarchical IDS based on machine learning, which detects attacks by considering the limitations of IoT resources. In order to create an efficient and accurate IDS, the combination of two improved K-nearest neighbor (KNN) algorithms and multi-layer perceptron (MLP) neural network applied in the fog and cloud to separate the attacks from normal traffic, respectively. we evaluated our proposed method using IOT23 dataset. The results prove the improvement in accuracy, compared to the previous methods.
Full text 10,799 characters · extracted from preprint-html · click to expand
A Two-layer Intrusion Detection System based on Fog and Cloud using Improved KNN and MPNN | Research Square window.SnipcartSettings = { analytics: { enabled: false } }; (function() { var accessVector = localStorage.getItem('access_vector') || ''; window.dataLayer = window.dataLayer || []; if (accessVector) { window.dataLayer.push({ user: { profile: { profileInfo: { snid: accessVector } } } }); } })(); (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-K279D39R'); Browse Preprints In Review Journals COVID-19 Preprints AJE Video Bytes Research Tools Research Promotion AJE Professional Editing AJE Rubriq About Preprint Platform In Review Editorial Policies Our Team Advisory Board Help Center Sign In Submit a Preprint Cite Share Download PDF Research Article A Two-layer Intrusion Detection System based on Fog and Cloud using Improved KNN and MPNN Ali Kaffash, Seyed Reza Kamel, Maryam Kheirabadi This is a preprint; it has not been peer reviewed by a journal. https://doi.org/ 10.21203/rs.3.rs-3127041/v1 This work is licensed under a CC BY 4.0 License Status: Posted Version 1 posted You are reading this latest preprint version Abstract The concept of Internet of Things (IoT) and its countless applications are considered as an inseparable part of modern technology era. The placement of IoT- based devices and their limitations make the environment more vulnerable due to its openness. Security plays a critical role in IoT applications due to pervasiveness of the IoT in all of the aspects in daily life. from the other hand final devices such as their limited computing power, large number of devices connected to each other, and communication between devices and users do not allow for using traditional methods to solve security issues. Intrusion detection systems (IDSs) which can separate malicious traffic from normal mode are among the effective solutions in this field. the installed IDS should be highly accurate and light weight to affect accuracy. In order to bring services closer to electronic devices, a concept called "fog" has emerged. A large number of studies have been conducted to make the light IDS for IoT network utilizing various methods. The present study aims to propose two-layer hierarchical IDS based on machine learning, which detects attacks by considering the limitations of IoT resources. In order to create an efficient and accurate IDS, the combination of two improved K-nearest neighbor (KNN) algorithms and multi-layer perceptron (MLP) neural network applied in the fog and cloud to separate the attacks from normal traffic, respectively. we evaluated our proposed method using IOT23 dataset. The results prove the improvement in accuracy, compared to the previous methods. IoT security intrusion detection system fog cloud KNN MLP Full Text Additional Declarations No competing interests reported. Cite Share Download PDF Status: Posted Version 1 posted You are reading this latest preprint version Research Square lets you share your work early, gain feedback from the community, and start making changes to your manuscript prior to peer review in a journal. As a division of Research Square Company, we’re committed to making research communication faster, fairer, and more useful. We do this by developing innovative software and high quality services for the global research community. Our growing team is made up of researchers and industry professionals working together to solve the most critical problems facing scientific publishing. Also discoverable on Platform About Our Team In Review Editorial Policies Advisory Board Help Center Resources Author Services Accessibility API Access RSS feed Manage Cookie Preferences © Research Square 2026 | ISSN 2693-5015 (online) Privacy Policy Terms of Service Do Not Sell My Personal Information {"props":{"pageProps":{"initialData":{"identity":"rs-3127041","acceptedTermsAndConditions":true,"allowDirectSubmit":true,"archivedVersions":[],"articleType":"Research Article","associatedPublications":[],"authors":[{"id":215167612,"identity":"03c5cff0-d2bd-48b6-acf0-f1025d1defd8","order_by":0,"name":"Ali Kaffash","email":"","orcid":"","institution":"Islamic Azad University","correspondingAuthor":false,"submittingAuthor":false,"prefix":"","firstName":"Ali","middleName":"","lastName":"Kaffash","suffix":""},{"id":215167613,"identity":"4dbb7707-ad23-4a17-be40-a6f840a52f1e","order_by":1,"name":"Seyed Reza Kamel","email":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAAAyAQMAAABI0h/eAAAABlBMVEX///8AAABVwtN+AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAA3ElEQVRIiWNgGAWjYDCCA2wg0kKOgYGH4QBEiLGBGC0SxqRrSWwAaiEO8N0+lvjpRoVE+tr+swcP/GxjkOdvYG77gE+L5Lm0w9I5ZyRyt93ISzjY28ZgOOMAY/MMfFoMzrA3SOe2gbTwGBzgbWNg3MDA2IzXYUAtzb9z/0mkm50/Y3DwbxuDPRFa2I5J5zZIJJgdyDE4DLQlkaAWyTNsadY5xyQMt90AapE5J5E84zABLXxn2Ixv59TYyAMdZvzxTZmNbX97+2O8WtCBBAMDM0kaRsEoGAWjYBRgAwBgdkp1YZLTHwAAAABJRU5ErkJggg==","orcid":"","institution":"Islamic Azad University","correspondingAuthor":true,"submittingAuthor":false,"prefix":"","firstName":"Seyed","middleName":"Reza","lastName":"Kamel","suffix":""},{"id":215167614,"identity":"31a103ff-17b4-4833-8562-14a6e2b33d03","order_by":2,"name":"Maryam Kheirabadi","email":"","orcid":"","institution":"Islamic Azad University","correspondingAuthor":false,"submittingAuthor":false,"prefix":"","firstName":"Maryam","middleName":"","lastName":"Kheirabadi","suffix":""}],"badges":[],"createdAt":"2023-06-30 06:44:26","currentVersionCode":1,"declarations":"","doi":"10.21203/rs.3.rs-3127041/v1","doiUrl":"https://doi.org/10.21203/rs.3.rs-3127041/v1","draftVersion":[],"editorialEvents":[],"editorialNote":"","failedWorkflow":false,"files":[{"id":39774513,"identity":"db302a87-e0c9-42d1-978c-79e50ca92a0f","added_by":"auto","created_at":"2023-07-10 08:14:36","extension":"pdf","order_by":1,"title":"","display":"","copyAsset":false,"role":"manuscript-pdf","size":431661,"visible":true,"origin":"","legend":"","description":"","filename":"FinalVersionAlikaffash.pdf","url":"https://assets-eu.researchsquare.com/files/rs-3127041/v1_covered_8d859a6c-2e0c-4afe-a2b6-72021886918e.pdf"}],"financialInterests":"No competing interests reported.","formattedTitle":"A Two-layer Intrusion Detection System based on Fog and Cloud using Improved KNN and MPNN","fulltext":[],"fulltextSource":"","fullText":"","funders":[],"hasAdminPriorityOnWorkflow":false,"hasManuscriptDocX":false,"hasOptedInToPreprint":true,"hasPassedJournalQc":"","hasAnyPriority":false,"hideJournal":true,"highlight":"","institution":"","isAcceptedByJournal":false,"isAuthorSuppliedPdf":true,"isDeskRejected":"","isHiddenFromSearch":false,"isInQc":false,"isInWorkflow":false,"isPdf":true,"isPdfUpToDate":true,"isWithdrawnOrRetracted":false,"journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true},"keywords":"IoT security, intrusion detection system, fog, cloud, KNN, MLP","lastPublishedDoi":"10.21203/rs.3.rs-3127041/v1","lastPublishedDoiUrl":"https://doi.org/10.21203/rs.3.rs-3127041/v1","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/"},"manuscriptAbstract":"\u003cp\u003eThe concept of Internet of Things (IoT) and its countless applications are considered as an inseparable part of modern technology era. The placement of IoT- based devices and their limitations make the environment more vulnerable due to its openness. Security plays a critical role in IoT applications due to pervasiveness of the IoT in all of the aspects in daily life. from the other hand final devices such as their limited computing power, large number of devices connected to each other, and communication between devices and users do not allow for using traditional methods to solve security issues. Intrusion detection systems (IDSs) which can separate malicious traffic from normal mode are among the effective solutions in this field. the installed IDS should be highly accurate and light weight to affect accuracy. In order to bring services closer to electronic devices, a concept called \"fog\" has emerged. A large number of studies have been conducted to make the light IDS for IoT network utilizing various methods. The present study aims to propose two-layer hierarchical IDS based on machine learning, which detects attacks by considering the limitations of IoT resources. In order to create an efficient and accurate IDS, the combination of two improved K-nearest neighbor (KNN) algorithms and multi-layer perceptron (MLP) neural network applied in the fog and cloud to separate the attacks from normal traffic, respectively. we evaluated our proposed method using IOT23 dataset. The results prove the improvement in accuracy, compared to the previous methods.\u003c/p\u003e","manuscriptTitle":"A Two-layer Intrusion Detection System based on Fog and Cloud using Improved KNN and MPNN","msid":"","msnumber":"","nonDraftVersions":[{"code":1,"date":"2023-07-04 18:08:38","doi":"10.21203/rs.3.rs-3127041/v1","editorialEvents":[{"type":"communityComments","content":0}],"status":"published","journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true}}],"origin":"","ownerIdentity":"b2d50a38-9ada-446a-8a9e-087383b58b42","owner":[],"postedDate":"July 4th, 2023","published":true,"recentEditorialEvents":[],"rejectedJournal":[],"revision":"","amendment":"","status":"posted","subjectAreas":[],"tags":[],"updatedAt":"2023-08-17T11:14:10+00:00","versionOfRecord":[],"versionCreatedAt":"2023-07-04 18:08:38","video":"","vorDoi":"","vorDoiUrl":"","workflowStages":[]},"version":"v1","identity":"rs-3127041","journalConfig":"researchsquare"},"__N_SSP":true},"page":"/article/[identity]/[[...version]]","query":{"redirect":"/article/rs-3127041","identity":"rs-3127041","version":["v1"]},"buildId":"cBFmMYwuxLRRLfASyISRj","isFallback":false,"isExperimentalCompile":false,"dynamicIds":[84888],"gssp":true,"scriptLoader":[]}

Text is read by the "Ask this paper" AI Q&A widget below. Extraction quality varies by source — PMC NXML preserves structure cleanly, OA-HTML may include some navigation residue, and OA-PDF can have broken hyphenation. The publisher copy (via DOI) is the canonical version.

My notes (saved in your browser only)

Ask this paper AI returns verbatim quotes from the full text · source: preprint-html

Answers must be backed by verbatim quotes from this paper's full text. Hallucinated quotes are dropped automatically; if no verbatim passage answers the question, we say so. How this works

Citation neighborhood (no data yet)

We don't have any in-corpus citations linked to this paper yet. The paper's references may be in our DB but unresolved to ``paper_id`` (resolution happens at ingest when the cited DOI matches a row we already have). Run the cross-source citation reconcile pass to retry.

Source provenance

europepmc
last seen: 2026-05-19T01:45:01.086888+00:00
unpaywall
last seen: 2026-05-20T11:00:21.680559+00:00
License: CC-BY-4.0