{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,25]],"date-time":"2026-03-25T21:07:35Z","timestamp":1774472855784,"version":"3.50.1"},"reference-count":36,"publisher":"Oxford University Press (OUP)","issue":"2","license":[{"start":{"date-parts":[[2024,3,22]],"date-time":"2024-03-22T00:00:00Z","timestamp":1711065600000},"content-version":"vor","delay-in-days":2,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,3,25]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>This paper aims to enhance security in IoT device networks through a visual tool that utilizes three projection techniques, including Beta Hebbian Learning (BHL), t-distributed Stochastic Neighbor Embedding (t-SNE) and ISOMAP, in order to facilitate the identification of network attacks by human experts. This work research begins with the creation of a testing environment with IoT devices and web clients, simulating attacks over Message Queuing Telemetry Transport (MQTT) for recording all relevant traffic information. The unsupervised algorithms chosen provide a set of projections that enable human experts to visually identify most attacks in real-time, making it a powerful tool that can be implemented in IoT environments easily.<\/jats:p>","DOI":"10.1093\/jigpal\/jzae013","type":"journal-article","created":{"date-parts":[[2024,3,22]],"date-time":"2024-03-22T11:53:52Z","timestamp":1711108432000},"page":"352-365","source":"Crossref","is-referenced-by-count":7,"title":["Beta Hebbian Learning for intrusion detection in networks with MQTT Protocols for IoT devices"],"prefix":"10.1093","volume":"32","author":[{"given":"\u00c1lvaro","family":"Michelena","sequence":"first","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, alvaro.michelena@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mar\u00eda Teresa","family":"Garc\u00eda Ord\u00e1s","sequence":"additional","affiliation":[{"name":"Department of Electrical and Systems Engineering , University of Le\u00f3n, 24007 Le\u00f3n, Spain, mgaro@unileon.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jos\u00e9","family":"Aveleira-Mata","sequence":"additional","affiliation":[{"name":"Department of Electrical and Systems Engineering , University of Le\u00f3n, 24007 Le\u00f3n, Spain, jose.aveleira@unileon.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David Yeregui","family":"Marcos del Blanco","sequence":"additional","affiliation":[{"name":"Department of Mechanic Engineering , Computer and Aerospacial Sciences, University of Le\u00f3n, 24007 Le\u00f3n, Spain, david.yeregui.marcos@gmail.com"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"M\u00edriam","family":"Timiraos D\u00edaz","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, miriam.timiraos.diaz@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Francisco","family":"Zayas-Gato","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, f.zayas.gato@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Esteban","family":"Jove","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, esteban.jove@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jos\u00e9-Luis","family":"Casteleiro-Roca","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, jose.luis.casteleiro@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"H\u00e9ctor","family":"Quinti\u00e1n","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, hector.quintian@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"H\u00e9ctor","family":"Alaiz-Moret\u00f3n","sequence":"additional","affiliation":[{"name":"Department of Electrical and Systems Engineering , University of Le\u00f3n, 24007 Le\u00f3n, Spain, hector.moreton@unileon.es"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jos\u00e9","family":"Luis Calvo-Rolle","sequence":"additional","affiliation":[{"name":"Department of Industrial Engineering , University of A Coru\u00f1a, CTC, CITIC, 15403 Ferrol, A Coru\u00f1a, Spain, jlcalvo@udc.es"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2024,3,20]]},"reference":[{"key":"2024071718445853600_ref1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1155\/2019\/6516253","article-title":"Multiclass classification procedure for detecting attacks on mqtt-iot protocol","volume":"2019","author":"Alaiz-Moreton","year":"2019","journal-title":"Complexity"},{"key":"2024071718445853600_ref2","doi-asserted-by":"crossref","first-page":"35","DOI":"10.5121\/ijwmn.2014.6204","article-title":"Analysis of security threats in wireless sensor network","volume":"6","author":"Alam\u00e0nd","year":"2014","journal-title":"International Journal of Wireless Mobile Networks (IJWMN)"},{"key":"2024071718445853600_ref3","doi-asserted-by":"crossref","DOI":"10.3390\/app11188383","article-title":"Anomaly-based intrusion detection systems in iot using deep learning: a systematic literature review","volume":"11","author":"Alsoufi","year":"2021","journal-title":"Applied Sciences"},{"key":"2024071718445853600_ref4","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/EECSI.2017.8239179","article-title":"Attack scenarios and security analysis of mqtt communication protocol in iot system","volume-title":"2017 4th International Conference on Electrical Engineering, Computer Science and Informatics (EECSI)","author":"Andy","year":"2017"},{"key":"2024071718445853600_ref5","volume-title":"New Dark Nexus Iot Botnet Puts Others to Shame","author":"Arsene","year":"2020"},{"key":"2024071718445853600_ref6","first-page":"84","article-title":"Detection of denial of service attacks in an mqtt environment using a one-class approach","volume-title":"Computational Intelligence in Security for Information Systems Conference","author":"Aveleira-Mata","year":"2021"},{"key":"2024071718445853600_ref7","doi-asserted-by":"crossref","first-page":"270","DOI":"10.6036\/10011","article-title":"Prototipo de IDS para detecci\u00f3n de intrusiones con modelos de machine learning en sistemas IoT de la Industria 4.0 (IDS prototype for intrusion detection with machine learning models in IoT systems of the Industry 4.0)","volume":"96","author":"Aveleira-Mata","year":"2021","journal-title":"Dyna"},{"key":"2024071718445853600_ref8","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1007\/s10472-010-9211-0","article-title":"Genetic algorithms and particle swarm optimization for exploratory projection pursuit","volume":"60","author":"Berro","year":"2010","journal-title":"Annals of Mathematics and Artificial Intelligence"},{"key":"2024071718445853600_ref9","volume-title":"Cisco Annual Internet Report\u2014Cisco Annual Internet Report (2018\u20132023) White Paper","author":"Cisco","year":"2020"},{"key":"2024071718445853600_ref10","first-page":"1447","article-title":"Connectionist techniques for the identification and suppression of interfering underlying factors","volume":"17","author":"Corchado","year":"2003","journal-title":"IJPRAI"},{"key":"2024071718445853600_ref11","first-page":"32","article-title":"Security attacks in iot: a survey","volume":"2017","author":"Deogirikar","year":"2017","journal-title":"Proceedings of the International Conference on IoT in Social, Mobile, Analytics and Cloud, I-SMAC"},{"key":"2024071718445853600_ref12","doi-asserted-by":"crossref","first-page":"279","DOI":"10.1007\/978-3-030-62365-4_27","article-title":"Autoencoder latent space influence on iot mqtt attack classification","volume-title":"Intelligent Data Engineering and Automated Learning\u2014IDEAL 2020","author":"Garc\u00eda-Ord\u00e1s","year":"2020"},{"key":"2024071718445853600_ref13","volume-title":"Machine Learning Based Iot Intrusion Detection System: An Mqtt Case Study (Mqtt-Iot-ids2020 Dataset), 9","author":"Hindy","year":"2021"},{"key":"2024071718445853600_ref14","article-title":"Kullback\u2013Leibler divergence metric learning","author":"Ji","year":"2020","journal-title":"IEEE Transactions on Cybernetics"},{"key":"2024071718445853600_ref15","doi-asserted-by":"crossref","first-page":"422","DOI":"10.3390\/electronics11030422","article-title":"Intelligent one-class classifiers for the development of an intrusion detection system: the mqtt case study","volume":"11","author":"Jove","year":"2022","journal-title":"Electronics"},{"key":"2024071718445853600_ref16","first-page":"96-1","article-title":"Analysis of IoT security risks based on the exposure of the MQTT protocol","volume":"33","author":"Kant","year":"2021","journal-title":"IEEE Access"},{"key":"2024071718445853600_ref17","doi-asserted-by":"crossref","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","article-title":"Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset","volume":"100","author":"Koroniotis","year":"2019","journal-title":"Future Generation Computer Systems"},{"key":"2024071718445853600_ref18","first-page":"8","article-title":"Industry 4.0 factory in big data environment. tec. News","volume":"26","author":"Lee","year":"2014","journal-title":"HARTING\u2019s Technology Newsletter"},{"key":"2024071718445853600_ref19","first-page":"109","article-title":"Man-in-the-middle-attack: understanding in simple words","volume":"2","author":"Mallik","year":"2019","journal-title":"Cyberspace: Jurnal Pendidikan Teknologi Informasi"},{"key":"2024071718445853600_ref20","first-page":"321","article-title":"Internet of things (iot): taxonomy of security attacks","volume-title":"2016 3rd International Conference on Electronic Design, ICED 2016","author":"Nawir","year":"2017"},{"key":"2024071718445853600_ref21","first-page":"20","article-title":"A review and analysis of the bot-iot dataset","volume-title":"Proceedings\u201415th IEEE International Conference on Service-Oriented System Engineering, SOSE 2021","author":"Peterson","year":"2021"},{"key":"2024071718445853600_ref22","doi-asserted-by":"crossref","first-page":"1750024","DOI":"10.1142\/S0129065717500241","article-title":"Beta hebbian learning as a new method for exploratory projection pursuit","volume":"27","author":"Quinti\u00e1n","year":"2017","journal-title":"International Journal of Neural Systems"},{"key":"2024071718445853600_ref23","first-page":"446","article-title":"Beta-hebbian learning for visualizing intrusions in flows","volume-title":"13th International Conference on Computational Intelligence in Security for Information Systems, CISIS 2020, Burgos, Spain, September 2020","author":"Quinti\u00e1n","year":"2020"},{"key":"2024071718445853600_ref24","first-page":"3294","article-title":"An investigation on industrial internet of things for mission critical things in industry 4. 0 2. Literature review","volume":"15","author":"Ramamoorthy","year":"2020","journal-title":"Seybold Report"},{"key":"2024071718445853600_ref25","first-page":"894","article-title":"Learning manifolds in forensic data","volume-title":"International Conference on Artificial Neural Networks","author":"Ratle","year":"2006"},{"key":"2024071718445853600_ref26","doi-asserted-by":"crossref","first-page":"973","DOI":"10.1016\/j.jcss.2014.02.005","article-title":"A survey of emerging threats in cybersecurity","volume":"80","author":"Jaccard","year":"2014","journal-title":"Journal of Computer and System Sciences"},{"key":"2024071718445853600_ref27","doi-asserted-by":"crossref","first-page":"83","DOI":"10.1093\/jigpal\/jzw047","article-title":"Clustering extension of MOVICAB-IDS to distinguish intrusions in flow-based data","volume":"25","author":"S\u00e1nchez","year":"2017","journal-title":"Logic Journal of IGPL"},{"key":"2024071718445853600_ref28","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1093\/jigpal\/jzw046","article-title":"Key features for the characterization of android malware families","volume":"25","author":"Sedano","year":"2017","journal-title":"Logic Journal of IGPL"},{"key":"2024071718445853600_ref29","article-title":"Internet of things: architectures, protocols, and applications","volume":"2017","author":"Sethi","year":"2017","journal-title":"Journal of Electrical and Computer"},{"key":"2024071718445853600_ref30","doi-asserted-by":"crossref","first-page":"100264","DOI":"10.1016\/j.iot.2020.100264","article-title":"A survey of iot protocols and their security issues through the lens of a generic iot stack","volume":"16","author":"Tournier","year":"2021","journal-title":"Internet of Things"},{"key":"2024071718445853600_ref31","first-page":"6578","article-title":"Mqttset, a new dataset for machine learning techniques on mqtt","author":"Vaccari","year":"2020","journal-title":"Sensors 2020"},{"key":"2024071718445853600_ref32","article-title":"Visualizing data using t-sne","volume":"9","author":"Van der Maaten","year":"2008","journal-title":"Journal of Machine Learning Research"},{"key":"2024071718445853600_ref33","doi-asserted-by":"crossref","first-page":"160","DOI":"10.1093\/jigpal\/jzy030","article-title":"Gaining deep knowledge of android malware families through dimensionality reduction techniques","volume":"27","author":"Vega","year":"2019","journal-title":"Logic Journal of IGPL"},{"key":"2024071718445853600_ref34","doi-asserted-by":"crossref","first-page":"109116","DOI":"10.1016\/j.comnet.2022.109116","article-title":"Which open-source ids? Snort, suricata or zeek","volume":"213","author":"Waleed","year":"2022","journal-title":"Computer Networks"},{"key":"2024071718445853600_ref35","doi-asserted-by":"crossref","first-page":"7991","DOI":"10.1109\/JIOT.2020.2999327","article-title":"Characterizing dns behaviors of internet of things in edge networks","volume":"7","author":"Kuai","year":"2020","journal-title":"IEEE Internet of Things Journal"},{"key":"2024071718445853600_ref36","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1016\/j.csda.2006.11.027","article-title":"Continuum isomap for manifold learnings","volume":"52","author":"Zha","year":"2007","journal-title":"Computational Statistics & Data Analysis"}],"container-title":["Logic Journal of the IGPL"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/jigpal\/article-pdf\/32\/2\/352\/58499078\/jzae013.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/jigpal\/article-pdf\/32\/2\/352\/58499078\/jzae013.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,11]],"date-time":"2024-11-11T15:21:06Z","timestamp":1731338466000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/jigpal\/article\/32\/2\/352\/7632685"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,20]]},"references-count":36,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2024,3,20]]},"published-print":{"date-parts":[[2024,3,25]]}},"URL":"https:\/\/doi.org\/10.1093\/jigpal\/jzae013","relation":{},"ISSN":["1367-0751","1368-9894"],"issn-type":[{"value":"1367-0751","type":"print"},{"value":"1368-9894","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2024,4]]},"published":{"date-parts":[[2024,3,20]]}}}