{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T11:52:42Z","timestamp":1791201162960,"version":"4.2.0"},"reference-count":42,"publisher":"MDPI AG","issue":"19","license":[{"start":{"date-parts":[[2026,10,3]],"date-time":"2026-10-03T00:00:00Z","timestamp":1790985600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Deanship of Graduate Studies and Scientific Research at Jouf University","award":["DGSSR-2025-02-01654"],"award-info":[{"award-number":["DGSSR-2025-02-01654"]}],"id":[{"id":"https:\/\/ror.org\/02zsyt821","id-type":"ROR","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Machine-learning models for environmental monitoring are only as trustworthy as the field measurements that train them, yet raw or custom LoRa telemetry links\u2014unlike a correctly configured LoRaWAN network\u2014carry no application-layer authentication, letting any in-range transmitter inject fabricated readings and poison the training pipeline. We propose a lightweight, unidirectional, encryption-free scheme in which each message carries an HMAC-SHA-256 tag over the device identifier, a timestamp, a monotonic counter, and the sensor payload; the server accepts a message only if its tag verifies and its counter exceeds a durable, transactionally updated high-water mark, giving origin authentication, tamper evidence, and duplicate or stale rejection without encryption. For an ESP32-S3\/Heltec reference implementation, device\u2013server\u2013reference HMAC agreement was confirmed on a published test vector, with zero false accepts or rejects across a 25,000-message four-class adversarial test; both checks ran in a host-side reference implementation of the device\u2019s algorithm, not on physical ESP32-S3 hardware. A ten-seed illustrative poisoning study on two public environmental datasets shows a value-based defence can increase PM2.5 forecast RMSE by up to about 104% by discarding genuine extremes, whereas our scheme holds the clean baseline exactly, since forged rows are rejected before training. The tag grows an example message from 34 to 99 bytes (about 2.9\u00d7) and roughly doubles airtime (about 2.2\u00d7); per-message CPU time and energy are not quantified here. Under independent per-device keys and rate limits, partial key compromise bounds admitted forged traffic to the compromised devices\u2019 share of total traffic.<\/jats:p>","DOI":"10.3390\/s26196276","type":"journal-article","created":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T10:57:46Z","timestamp":1791197866000},"page":"6276","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Securing AI-Driven Systems for Environmental Sustainability in IoT Applications: A Lightweight Message-Authentication Scheme Against Telemetry Poisoning"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1560-0116","authenticated-orcid":false,"given":"Aala Oqab","family":"Alsalem","sequence":"first","affiliation":[{"name":"Department of Computer Science, College of Computer and Information Sciences, Jouf University, Sakaka 72388, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,10,3]]},"reference":[{"key":"ref_1","unstructured":"Espressif Systems (2026, August 28). ESP32-S3 Series Datasheet, Available online: https:\/\/cdn-shop.adafruit.com\/product-files\/5477\/esp32-s3_datasheet_en.pdf."},{"key":"ref_2","unstructured":"Semtech Corporation (2019). LoRa and LoRaWAN: A Technical Overview, Semtech. Available online: https:\/\/www.semtech.com\/uploads\/technology\/LoRa\/lora-and-lorawan.pdf."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1016\/j.comnet.2014.11.008","article-title":"Security, Privacy and Trust in Internet of Things: The Road Ahead","volume":"76","author":"Sicari","year":"2015","journal-title":"Comput. Netw."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"2266","DOI":"10.1016\/j.comnet.2012.12.018","article-title":"On the Features and Challenges of Security and Privacy in Distributed Internet of Things","volume":"57","author":"Roman","year":"2013","journal-title":"Comput. Netw."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1250","DOI":"10.1109\/JIOT.2017.2694844","article-title":"A Survey on Security and Privacy Issues in Internet-of-Things","volume":"4","author":"Yang","year":"2017","journal-title":"IEEE Internet Things J."},{"key":"ref_6","unstructured":"Biggio, B., Nelson, B., and Laskov, P. (2012). Poisoning Attacks against Support Vector Machines. Proceedings of the 29th International Conference on Machine Learning (ICML), Omnipress. Available online: https:\/\/icml.cc\/2012\/papers\/880.pdf."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Jagielski, M., Oprea, A., Biggio, B., Liu, C., Nita-Rotaru, C., and Li, B. (2018). Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. Proceedings of the IEEE Symposium on Security and Privacy (S&P), IEEE.","DOI":"10.1109\/SP.2018.00057"},{"key":"ref_8","unstructured":"Steinhardt, J., Koh, P.W., and Liang, P. (2017). Certified Defenses for Data Poisoning Attacks. Advances in Neural Information Processing Systems 30 (NeurIPS), Curran Associates."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"522","DOI":"10.1109\/MDT.2007.178","article-title":"A Survey of Lightweight-Cryptography Implementations","volume":"24","author":"Eisenbarth","year":"2007","journal-title":"IEEE Des. Test Comput."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"McKay, K., Bassham, L., Turan, M.S., and Mouha, N. (2017). Report on Lightweight Cryptography, NIST Internal Report (NISTIR) 8114.","DOI":"10.6028\/NIST.IR.8114"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"616","DOI":"10.1109\/COMST.2019.2953364","article-title":"Security of the Internet of Things: Vulnerabilities, Attacks, and Countermeasures","volume":"22","author":"Butun","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"e70016","DOI":"10.1002\/spy2.70016","article-title":"IoT and Man-in-the-Middle Attacks","volume":"8","author":"Fereidouni","year":"2025","journal-title":"Secur. Priv."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Butun, I., Pereira, N., and Gidlund, M. (2019). Security Risk Analysis of LoRaWAN and Future Directions. Future Internet, 11.","DOI":"10.3390\/fi11010003"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Aras, E., Ramachandran, G.S., Lawrence, P., and Hughes, D. (2017). Exploring the Security Vulnerabilities of LoRa. Proceedings of the 3rd IEEE International Conference on Cybernetics (CYBCONF), IEEE.","DOI":"10.1109\/CYBConf.2017.7985777"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Wara, M.S., and Yu, Q. (2020). New Replay Attacks on ZigBee Devices for Internet-of-Things (IoT) Applications. Proceedings of the IEEE International Conference on Embedded Software and Systems (ICESS), IEEE.","DOI":"10.1109\/ICESS49830.2020.9301593"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Niranjan, D.K., Supriya, M., and Tiberti, W. (2026). Secure TPMS Data Transmission in Real-Time IoV Environments: A Study on 5G and LoRa Networks. Sensors, 26.","DOI":"10.3390\/s26020358"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"4118","DOI":"10.3390\/s110404118","article-title":"A Lightweight Data Integrity Scheme for Sensor Networks","volume":"11","author":"Kamel","year":"2011","journal-title":"Sensors"},{"key":"ref_18","unstructured":"LoRa Alliance (2020). LoRaWAN\u00ae L2 1.0.4 Specification (TS001-1.0.4), LoRa Alliance. Available online: https:\/\/lora-alliance.org\/wp-content\/uploads\/2021\/11\/LoRaWAN-Link-Layer-Specification-v1.0.4.pdf."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1515","DOI":"10.1007\/s11276-020-02535-5","article-title":"Security of Internet of Things Based on Cryptographic Algorithms: A Survey","volume":"27","author":"Mousavi","year":"2021","journal-title":"Wirel. Netw."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Tanksale, V. (2024). Efficient Elliptic Curve Diffie\u2013Hellman Key Exchange for Resource-Constrained IoT Devices. Electronics, 13.","DOI":"10.3390\/electronics13183631"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"El Ghor, H., El Fawal, A.H., Mansour, A., Ahmad-Kassem, A., and Nasser, A. (2026). Lightweight One-to-Many User-to-Sensors Authentication and Key Agreement. Information, 17.","DOI":"10.3390\/info17010047"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Krawczyk, H., Bellare, M., and Canetti, R. (1997). HMAC: Keyed-Hashing for Message Authentication, Internet Engineering Task Force. IETF RFC 2104.","DOI":"10.17487\/rfc2104"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Bellare, M., Canetti, R., and Krawczyk, H. (1996). Keying Hash Functions for Message Authentication. Advances in Cryptology \u2014 CRYPTO \u201996, Springer. Lecture Notes in Computer Science 1109.","DOI":"10.1007\/3-540-68697-5_1"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"M\u2019Raihi, D., Bellare, M., Hoornaert, F., Naccache, D., and Ranen, O. (2005). HOTP: An HMAC-Based One-Time Password Algorithm, Internet Engineering Task Force. IETF RFC 4226.","DOI":"10.17487\/rfc4226"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"M\u2019Raihi, D., Machani, S., Pei, M., and Rydell, J. (2011). TOTP: Time-Based One-Time Password Algorithm, Internet Engineering Task Force. IETF RFC 6238.","DOI":"10.17487\/rfc6238"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Malhotra, A., Cohen, I.E., Brakke, E., and Goldberg, S. (2016). Attacking the Network Time Protocol. Proceedings of the Network and Distributed System Security Symposium (NDSS), Internet Society.","DOI":"10.14722\/ndss.2016.23090"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Chen, G., Watanabe, H., Matsumura, K., and Takegawa, Y. (2026). Lightweight Authentication and Dynamic Key Generation for IMU-Based Canine Motion Recognition IoT Systems. Future Internet, 18.","DOI":"10.3390\/fi18020111"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"317","DOI":"10.1016\/j.patcog.2018.07.023","article-title":"Wild Patterns: Ten Years after the Rise of Adversarial Machine Learning","volume":"84","author":"Biggio","year":"2018","journal-title":"Pattern Recognit."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Baracaldo, N., Chen, B., Ludwig, H., and Safavi, J.A. (2017). Mitigating Poisoning Attacks on Machine Learning Models: A Data Provenance Based Approach. Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security (AISec), ACM.","DOI":"10.1145\/3128572.3140450"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1646","DOI":"10.1109\/COMST.2020.2988293","article-title":"A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security","volume":"22","author":"Mohamed","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"1686","DOI":"10.1109\/COMST.2020.2986444","article-title":"Machine Learning in IoT Security: Current Solutions and Future Challenges","volume":"22","author":"Hussain","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1109\/TIT.1983.1056650","article-title":"On the Security of Public Key Protocols","volume":"29","author":"Dolev","year":"1983","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Nystr\u00f6m, M. (2005). Identifiers and Test Vectors for HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512, Internet Engineering Task Force. IETF RFC 4231.","DOI":"10.17487\/rfc4231"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Krawczyk, H., and Eronen, P. (2010). HMAC-Based Extract-and-Expand Key Derivation Function (HKDF), Internet Engineering Task Force. IETF RFC 5869.","DOI":"10.17487\/rfc5869"},{"key":"ref_35","unstructured":"Heltec Automation (2026). WiFi LoRa 32 (V4): ESP32-S3R2 + SX1262 LoRa Node (Xtensa LX7 Dual-Core Up to 240 MHz, 512 KB SRAM, 2 MB PSRAM, 16 MB Flash), Heltec Automation. Available online: https:\/\/heltec.org\/project\/wifi-lora-32-v4\/."},{"key":"ref_36","unstructured":"Adafruit Industries (2026). DS3231 Precision RTC Breakout, Adafruit Industries. Available online: https:\/\/www.adafruit.com\/product\/3013."},{"key":"ref_37","unstructured":"Semtech Corporation (SX1261\/2 Long Range, Low Power, Sub-GHz RF Transceiver Data Sheet, 2021). SX1261\/2 Long Range, Low Power, Sub-GHz RF Transceiver Data Sheet, Rev. 2.1."},{"key":"ref_38","unstructured":"Australian Bureau of Meteorology (2026, July 19). Climate Data Online: Daily Minimum Temperature, Melbourne, Available online: http:\/\/www.bom.gov.au\/climate\/data\/."},{"key":"ref_39","unstructured":"(2026, July 19). The 1981\u20131990 Daily-Minimum Series Used Here Is the Widely Redistributed Benchmark Subset. Available online: https:\/\/raw.githubusercontent.com\/jbrownlee\/Datasets\/master\/daily-min-temperatures.csv."},{"key":"ref_40","unstructured":"Chen, S. (2026, September 19). Beijing PM2.5 Data [Dataset]. UCI Machine Learning Repository. Available online: https:\/\/archive.ics.uci.edu\/dataset\/381\/beijing+pm2+5+data."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"20150257","DOI":"10.1098\/rspa.2015.0257","article-title":"Assessing Beijing\u2019s PM2.5 Pollution: Severity, Weather Impact, APEC and Winter Heating","volume":"471","author":"Liang","year":"2015","journal-title":"Proc. R. Soc. A"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"1189","DOI":"10.1214\/aos\/1013203451","article-title":"Greedy Function Approximation: A Gradient Boosting Machine","volume":"29","author":"Friedman","year":"2001","journal-title":"Ann. Stat."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/19\/6276\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,5]],"date-time":"2026-10-05T10:59:09Z","timestamp":1791197949000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/19\/6276"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10,3]]},"references-count":42,"journal-issue":{"issue":"19","published-online":{"date-parts":[[2026,10]]}},"alternative-id":["s26196276"],"URL":"https:\/\/doi.org\/10.3390\/s26196276","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,10,3]]}}}