{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T20:49:20Z","timestamp":1785703760605,"version":"3.56.0"},"reference-count":40,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Internet of Things"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.iot.2026.101959","type":"journal-article","created":{"date-parts":[[2026,5,2]],"date-time":"2026-05-02T06:03:24Z","timestamp":1777701804000},"page":"101959","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Securing the constrained edge: Cross-layer threat detection for IoT protocols using a lightweight classifier"],"prefix":"10.1016","volume":"38","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-3634-9618","authenticated-orcid":false,"given":"Hamza","family":"Allaga","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0648-3548","authenticated-orcid":false,"given":"Abderrazak","family":"Farchane","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Said","family":"Hakimi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9448-6165","authenticated-orcid":false,"given":"Mohamed","family":"Biniz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.iot.2026.101959_bib0001","unstructured":"Statista Research Department, Internet of things (IoT) connected devices installed base worldwide from 2015 to 2025, 2016, https:\/\/www.statista.com\/statistics\/471264\/iot-number-of-connected-devices-worldwide\/."},{"issue":"9","key":"10.1016\/j.iot.2026.101959_bib0002","doi-asserted-by":"crossref","first-page":"15792","DOI":"10.1109\/JIOT.2024.3349394","article-title":"Enabling lightweight device authentication in message queuing telemetry transport protocol","volume":"11","author":"Swamy","year":"2024","journal-title":"IEEE Internet Things J."},{"issue":"7","key":"10.1016\/j.iot.2026.101959_bib0003","doi-asserted-by":"crossref","first-page":"7050","DOI":"10.1109\/TVT.2021.3082308","article-title":"Efficient and secured swarm pattern multi-UAV communication","volume":"70","author":"Raja","year":"2021","journal-title":"IEEE Trans. Veh. Technol."},{"issue":"3","key":"10.1016\/j.iot.2026.101959_bib0004","doi-asserted-by":"crossref","first-page":"827","DOI":"10.1109\/TCSS.2020.2973710","article-title":"DocsChain: blockchain based IoT solution for verification of degree documents","volume":"7","author":"Rasool","year":"2020","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"issue":"2","key":"10.1016\/j.iot.2026.101959_bib0005","doi-asserted-by":"crossref","first-page":"567","DOI":"10.3390\/s22020567","article-title":"Preventing MQTT vulnerabilities using IoT-enabled intrusion detection system","volume":"22","author":"Husnain","year":"2022","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101959_bib0006","unstructured":"O. Yoachimik, J. Pacheco, Hyper-volumetric DDoS attacks skyrocket: Cloudflare\u2019s 2025 Q2 DDoS threat report, 2025, (The Cloudflare Blog). https:\/\/blog.cloudflare.com\/2025-q2-ddos-threat-report."},{"key":"10.1016\/j.iot.2026.101959_bib0007","doi-asserted-by":"crossref","DOI":"10.1016\/j.adhoc.2025.104062","article-title":"MQTTEEB-D: a high-fidelity benchmark for real-time MQTT anomaly detection using machine learning techniques","volume":"181","author":"Allaga","year":"2026","journal-title":"Ad Hoc Netw."},{"issue":"1","key":"10.1016\/j.iot.2026.101959_bib0008","doi-asserted-by":"crossref","first-page":"90","DOI":"10.1186\/s13638-019-1402-8","article-title":"Secure-MQTT: an efficient fuzzy logic-based approach to detect DoS attack in MQTT protocol for internet of things","volume":"2019","author":"Hindia","year":"2019","journal-title":"EURASIP J. Wirel. Commun. Netw."},{"key":"10.1016\/j.iot.2026.101959_bib0009","doi-asserted-by":"crossref","DOI":"10.1155\/2019\/6516253","article-title":"Multiclass classification procedure for detecting attacks on MQTT-IoT protocol","volume":"2019","author":"Alaiz-Moret\u00f3n","year":"2019","journal-title":"Complexity"},{"issue":"22","key":"10.1016\/j.iot.2026.101959_bib0010","doi-asserted-by":"crossref","first-page":"3837","DOI":"10.3390\/electronics11223837","article-title":"Artificial intelligence algorithms for detecting and classifying MQTT protocol internet of things attacks","volume":"11","author":"Alzahrani","year":"2022","journal-title":"Electronics"},{"key":"10.1016\/j.iot.2026.101959_bib0011","doi-asserted-by":"crossref","first-page":"1075","DOI":"10.1007\/s10207-023-00681-3","article-title":"Securing MQTT protocol for IoT environment using IDS based on ensemble learning","volume":"22","author":"Zeghida","year":"2023","journal-title":"Int. J. Inf. Secur."},{"key":"10.1016\/j.iot.2026.101959_bib0012","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104526","article-title":"Identifying communication sequence anomalies to detect DoS attacks against MQTT","volume":"157","author":"Swain","year":"2025","journal-title":"Comput. Secur."},{"issue":"8","key":"10.1016\/j.iot.2026.101959_bib0013","doi-asserted-by":"crossref","first-page":"4117","DOI":"10.3390\/s23084117","article-title":"A critical cybersecurity analysis and future research directions for the internet of things: a comprehensive review","volume":"23","author":"Tariq","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101959_bib0014","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2025.110265","article-title":"Machine learning-inspired intrusion detection system for IoT: security issues and future challenges","volume":"123","author":"Ahanger","year":"2025","journal-title":"Comput. Electr. Eng."},{"issue":"22","key":"10.1016\/j.iot.2026.101959_bib0015","doi-asserted-by":"crossref","first-page":"6578","DOI":"10.3390\/s20226578","article-title":"MQTTset, a new dataset for machine learning techniques on MQTT","volume":"20","author":"Vaccari","year":"2020","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101959_bib0016","series-title":"2021 International Conference on Data Science and Its Applications","first-page":"28","article-title":"Detection of DoS attack using AdaBoost algorithm on IoT system","author":"Rachmadi","year":"2021"},{"key":"10.1016\/j.iot.2026.101959_bib0017","doi-asserted-by":"crossref","first-page":"33095","DOI":"10.1109\/ACCESS.2022.3161566","article-title":"SENMQTT-SET: an intelligent intrusion detection in IoT-MQTT networks using ensemble multi cascade features","volume":"10","author":"Siddharthan","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101959_bib0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.array.2023.100316","article-title":"Capturing low-rate DDoS attack based on MQTT protocol in software defined-IoT environment","volume":"19","author":"Al-Fayoumi","year":"2023","journal-title":"Array"},{"issue":"21","key":"10.1016\/j.iot.2026.101959_bib0019","doi-asserted-by":"crossref","first-page":"7016","DOI":"10.3390\/s21217016","article-title":"A deep learning-based intrusion detection system for MQTT enabled IoT","volume":"21","author":"Khan","year":"2021","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101959_bib0020","series-title":"2023 IEEE MIT Undergraduate Research Technology Conference","first-page":"1","article-title":"Enhancing DoS attack recovery in MQTT brokers for IoT systems through efficient scheduling algorithms","author":"Sitaraman","year":"2023"},{"key":"10.1016\/j.iot.2026.101959_bib0021","doi-asserted-by":"crossref","DOI":"10.1016\/j.engappai.2022.105805","article-title":"GAN-AE: an unsupervised intrusion detection system for MQTT networks","volume":"119","author":"Boppana","year":"2023","journal-title":"Eng. Appl. Artif. Intell."},{"key":"10.1016\/j.iot.2026.101959_bib0022","series-title":"2023 11th International Conference on Information and Communication Technology","first-page":"301","article-title":"DDoS attack detection on MQTT protocol using semi-supervised DBSCAN and support vector machine model","author":"Ikhsanudin","year":"2023"},{"key":"10.1016\/j.iot.2026.101959_bib0023","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2023.109809","article-title":"DoS\/DDoS-MQTT-IoT: a dataset for evaluating intrusions in IoT networks using the MQTT protocol","volume":"231","author":"Alatram","year":"2023","journal-title":"Comput. Netw."},{"key":"10.1016\/j.iot.2026.101959_bib0024","doi-asserted-by":"crossref","first-page":"165130","DOI":"10.1109\/ACCESS.2020.3022862","article-title":"TON_IoT telemetry dataset: a new generation dataset of IoT and IIoT for data-driven intrusion detection systems","volume":"8","author":"Alsaedi","year":"2020","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101959_bib0025","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101351","article-title":"CICIoMT2024: a benchmark dataset for multi-protocol security assessment in IoMT","volume":"28","author":"Dadkhah","year":"2024","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101959_bib0026","article-title":"Device identification and anomaly detection in IoT environments","author":"Rabbani","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101959_bib0027","series-title":"2015 Military Communications and Information Systems Conference","article-title":"UNSW-NB15: a comprehensive data set for network intrusion detection systems","author":"Moustafa","year":"2015"},{"key":"10.1016\/j.iot.2026.101959_bib0028","unstructured":"C.I.f. Cybersecurity, CIC-IDS2017 dataset, 2017, (https:\/\/www.unb.ca\/cic\/datasets\/ids-2017.html)."},{"key":"10.1016\/j.iot.2026.101959_bib0029","unstructured":"M.I.o. Technology, 1999 DARPA intrusion detection evaluation dataset, 1999."},{"key":"10.1016\/j.iot.2026.101959_bib0030","doi-asserted-by":"crossref","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","article-title":"Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-IoT dataset","volume":"100","author":"Koroniotis","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.iot.2026.101959_bib0031","unstructured":"CAIDA, The CAIDA \u201cDDoS attack2007\u201d dataset, 2007."},{"key":"10.1016\/j.iot.2026.101959_bib0032","series-title":"Proceedings of the 4th International Conference on Information Systems Security and Privacy","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","author":"Sharafaldin","year":"2018"},{"key":"10.1016\/j.iot.2026.101959_bib0033","doi-asserted-by":"crossref","unstructured":"M.A. Ferrag, O. Friha, D. Hamouda, L. Maglaras, H. Janicke, Edge-IIoTset: a new comprehensive realistic cyber security dataset of IoT and IIoT applications: Centralized and federated learning, 2022. 10.21227\/mbc1-1h68.","DOI":"10.36227\/techrxiv.18857336.v1"},{"key":"10.1016\/j.iot.2026.101959_bib0034","unstructured":"I. University of California, KDD cup 1999 data, 1999."},{"key":"10.1016\/j.iot.2026.101959_bib0035","doi-asserted-by":"crossref","unstructured":"A. Aqachtoul, K. Karam, A. Elamrani, M. Najib, N. Rafalia, M. Bakhouya, MQTTEEB-D: a real-world IoT cybersecurity dataset for AI-powered threat detection in MQTT networks, 2025. 10.17632\/jfttfjn6tr.1.","DOI":"10.1016\/j.dib.2025.111897"},{"key":"10.1016\/j.iot.2026.101959_bib0036","series-title":"International Networking Conference","article-title":"Machine learning based IoT intrusion detection system: an MQTT case study","author":"Hindy","year":"2020"},{"key":"10.1016\/j.iot.2026.101959_bib0037","unstructured":"Y. Meidan, N-BaIoT, 2025. 10.21227\/y9de-qj71."},{"key":"10.1016\/j.iot.2026.101959_bib0038","unstructured":"Custom dataset: flow-based MQTT attack dataset, 2022, https:\/\/anonymous.4open.science\/r\/Flow-Based-MQTT-AttackData-Set-E768\/."},{"issue":"13","key":"10.1016\/j.iot.2026.101959_bib0039","doi-asserted-by":"crossref","first-page":"5941","DOI":"10.3390\/s23135941","article-title":"CICIoT2023: a real-time dataset and benchmark for large-scale attacks in IoT environment","volume":"23","author":"Neto","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101959_bib0040","article-title":"Device identification and anomaly detection in IoT environments","author":"Rabbani","year":"2024","journal-title":"IEEE Internet Things J."}],"container-title":["Internet of Things"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526000892?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526000892?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T19:59:43Z","timestamp":1785700783000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2542660526000892"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":40,"alternative-id":["S2542660526000892"],"URL":"https:\/\/doi.org\/10.1016\/j.iot.2026.101959","relation":{},"ISSN":["2542-6605"],"issn-type":[{"value":"2542-6605","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Securing the constrained edge: Cross-layer threat detection for IoT protocols using a lightweight classifier","name":"articletitle","label":"Article Title"},{"value":"Internet of Things","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.iot.2026.101959","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"101959"}}