INTELLIGENT METHOD OF CONTINUOUS SECURITY MONITORING IN IEEE 802.15.4 NETWORKS BASED ON ADAPTIVE ANOMALY ANALYSIS

Bulletin of Shakarim University Technical Sciences, 2025

Full text Open access: Gold Metadata (CSL-JSON)
DOI 10.53360/2788-7995-2025-3(19)-14
Data confidence 70 medium
How this score is calculated

It is built from checkable properties of the record itself: whether the article has a DOI, how many independent sources confirmed its data, whether the required fields are filled in, and how recent the latest confirmation is. Disagreement between sources and a missing identifier lower it. A value of 80 or above means the record was published without further checking; 60 to 79 means it is published at reduced confidence, with a manual check advisable. A record verified by an editor by hand is never pushed below 90 by a recalculation. This scores our data about the article, not the article itself.

Abstract

Securing IEEE 802.15.4 wireless networks is one of the key challenges in the development of the Internet of Things (IoT). Given the limited computational resources of IoT devices, traditional attack detection methods based on cryptographic mechanisms and deterministic thresholds do not always provide a sufficient level of protection. In this paper, we propose a novel method for adaptive network traffic monitoring that combines a modified Z-score with sample size consideration and an adaptive Bayesian classifier with dynamic attack probability adjustment. Experimental testing on data generated in an NS-3 environment shows that the proposed method outperforms traditional approaches in terms of attack detection accuracy, reducing the false positive rate from 10.9% to 3.8%. The hybrid model provides 94.7% classification accuracy and 91.8% attack detection completeness, which is 6.3% higher than the standard Bayesian classifier. The obtained results demonstrate the promising use of the proposed method in real-time systems for monitoring the security of IoT networks. The developed approach allows adapting to the changing network environment, reducing the influence of random fluctuations, which makes it an effective solution for protecting low-power networks.