Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces a deployment-oriented framework for enhancing security in IoT environments through a Linux-based edge gateway that integrates AI-assisted risk scoring and explainability with eBPF/XDP mitigation techniques. By addressing the limitations of traditional security mechanisms in dynamic and resource-constrained IoT networks, the framework aims to provide a more effective and operationally deployable solution. Key findings emphasize the importance of separating complex reasoning from packet-handling decisions, which facilitates better risk management and logging capabilities in real-time scenarios.
A novel framework leverages AI-driven risk scoring and explainability to transform IoT security from static controls to dynamic, context-aware mitigation strategies.
Internet of Things (IoT) deployments combine heterogeneous, resource-constrained devices with weak security configurations, exposed services, limited logging, patching constraints, and long lifecycles. Signature- and threshold-based controls remain useful baselines, but they are insufficient as standalone mechanisms in dynamic IoT networks. Likewise, offline artificial intelligence (AI) benchmark performance alone does not establish operational deployability. This article presents a conceptual framework and research agenda for a Linux-based IoT edge gateway that combines resource-aware flow-level AI-assisted risk scoring, event-level explainability, and bounded mitigation through eBPF/XDP. The controller applies reversible, time-limited actions subject to critical-device safeguards, updates packet-level enforcement state, and records structured logs. The architecture separates complex reasoning and policy control in user space from concise packet-handling decisions in the kernel. It also defines a future hardware-aware evaluation pathway covering detection quality, resource cost, response timing, rollback behaviour, and legitimate-traffic preservation. The paper does not report new experimental measurements or claim measured superiority or completed real-time performance.