{"title":"通过物联网、云计算和边缘计算的融合,增强数据管理中基于ml的异常检测,提高安全性","authors":"Sultan Baimukhanov, Hashim Ali, Adnan Yazici","doi":"10.1016/j.eswa.2025.128700","DOIUrl":null,"url":null,"abstract":"<div><div>The widespread adoption of cloud computing, edge computing, and the Internet of Things across various domains has enhanced data management and automation capabilities. However, large-scale IoT implementations face considerable challenges, including concerns about data quality, security risks, and the need to identify anomalies. This study introduces a multi-tiered machine learning-based approach to detect anomalies, specifically targeting security threats, performance irregularities, and sensor malfunctions within IoT-Edge-Cloud ecosystems. The proposed system improves detection precision, response times, and overall security resilience by incorporating XAI for transparent decision-making and a layered security approach to mitigate threats. The framework operates on several levels: (i) the IoT Layer, where secure microcontrollers collect and transmit sensor data; (ii) the Edge/Fog Layer, which conducts pre-processing and real-time filtering to minimize cloud reliance; (iii) the Cloud Layer, where ML-based anomaly detection algorithms, such as the Isolation Forest and Local Outlier Factor, examine data; and (iv) the Smart Single-Page Application architecture that integrates IoT-Edge-Cloud ecosystem, which offers low-latency visualization, secure data transmission, and interactive anomaly monitoring. Furthermore, XAI techniques improve interpretability by identifying key factors that influence anomaly classification and increase transparency for security analysts. A case study in IoT-Healthcare settings validated the efficacy of the proposed system in identifying network intrusions, sensor failures, and operational anomalies, achieving an AUROC score of 1.00 using an isolated forest. Comparative assessments demonstrate that this approach surpasses existing anomaly detection solutions by enhancing detection accuracy, decreasing latency through edge processing, and improving explainability with AI integration. The study concludes by exploring the challenges and advantages of combining IoT, cloud and edge computing for secure and scalable anomaly detection, thus providing insight into optimal database management and security strategies for IoT–cloud interactions.</div></div>","PeriodicalId":50461,"journal":{"name":"Expert Systems with Applications","volume":"293 ","pages":"Article 128700"},"PeriodicalIF":7.5000,"publicationDate":"2025-06-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Enhancing ML-based anomaly detection in data management for security through integration of IoT, cloud, and edge computing\",\"authors\":\"Sultan Baimukhanov, Hashim Ali, Adnan Yazici\",\"doi\":\"10.1016/j.eswa.2025.128700\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><div>The widespread adoption of cloud computing, edge computing, and the Internet of Things across various domains has enhanced data management and automation capabilities. However, large-scale IoT implementations face considerable challenges, including concerns about data quality, security risks, and the need to identify anomalies. This study introduces a multi-tiered machine learning-based approach to detect anomalies, specifically targeting security threats, performance irregularities, and sensor malfunctions within IoT-Edge-Cloud ecosystems. The proposed system improves detection precision, response times, and overall security resilience by incorporating XAI for transparent decision-making and a layered security approach to mitigate threats. The framework operates on several levels: (i) the IoT Layer, where secure microcontrollers collect and transmit sensor data; (ii) the Edge/Fog Layer, which conducts pre-processing and real-time filtering to minimize cloud reliance; (iii) the Cloud Layer, where ML-based anomaly detection algorithms, such as the Isolation Forest and Local Outlier Factor, examine data; and (iv) the Smart Single-Page Application architecture that integrates IoT-Edge-Cloud ecosystem, which offers low-latency visualization, secure data transmission, and interactive anomaly monitoring. Furthermore, XAI techniques improve interpretability by identifying key factors that influence anomaly classification and increase transparency for security analysts. A case study in IoT-Healthcare settings validated the efficacy of the proposed system in identifying network intrusions, sensor failures, and operational anomalies, achieving an AUROC score of 1.00 using an isolated forest. Comparative assessments demonstrate that this approach surpasses existing anomaly detection solutions by enhancing detection accuracy, decreasing latency through edge processing, and improving explainability with AI integration. The study concludes by exploring the challenges and advantages of combining IoT, cloud and edge computing for secure and scalable anomaly detection, thus providing insight into optimal database management and security strategies for IoT–cloud interactions.</div></div>\",\"PeriodicalId\":50461,\"journal\":{\"name\":\"Expert Systems with Applications\",\"volume\":\"293 \",\"pages\":\"Article 128700\"},\"PeriodicalIF\":7.5000,\"publicationDate\":\"2025-06-21\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Expert Systems with Applications\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S0957417425023188\",\"RegionNum\":1,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, ARTIFICIAL INTELLIGENCE\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Expert Systems with Applications","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0957417425023188","RegionNum":1,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, ARTIFICIAL INTELLIGENCE","Score":null,"Total":0}
Enhancing ML-based anomaly detection in data management for security through integration of IoT, cloud, and edge computing
The widespread adoption of cloud computing, edge computing, and the Internet of Things across various domains has enhanced data management and automation capabilities. However, large-scale IoT implementations face considerable challenges, including concerns about data quality, security risks, and the need to identify anomalies. This study introduces a multi-tiered machine learning-based approach to detect anomalies, specifically targeting security threats, performance irregularities, and sensor malfunctions within IoT-Edge-Cloud ecosystems. The proposed system improves detection precision, response times, and overall security resilience by incorporating XAI for transparent decision-making and a layered security approach to mitigate threats. The framework operates on several levels: (i) the IoT Layer, where secure microcontrollers collect and transmit sensor data; (ii) the Edge/Fog Layer, which conducts pre-processing and real-time filtering to minimize cloud reliance; (iii) the Cloud Layer, where ML-based anomaly detection algorithms, such as the Isolation Forest and Local Outlier Factor, examine data; and (iv) the Smart Single-Page Application architecture that integrates IoT-Edge-Cloud ecosystem, which offers low-latency visualization, secure data transmission, and interactive anomaly monitoring. Furthermore, XAI techniques improve interpretability by identifying key factors that influence anomaly classification and increase transparency for security analysts. A case study in IoT-Healthcare settings validated the efficacy of the proposed system in identifying network intrusions, sensor failures, and operational anomalies, achieving an AUROC score of 1.00 using an isolated forest. Comparative assessments demonstrate that this approach surpasses existing anomaly detection solutions by enhancing detection accuracy, decreasing latency through edge processing, and improving explainability with AI integration. The study concludes by exploring the challenges and advantages of combining IoT, cloud and edge computing for secure and scalable anomaly detection, thus providing insight into optimal database management and security strategies for IoT–cloud interactions.
期刊介绍:
Expert Systems With Applications is an international journal dedicated to the exchange of information on expert and intelligent systems used globally in industry, government, and universities. The journal emphasizes original papers covering the design, development, testing, implementation, and management of these systems, offering practical guidelines. It spans various sectors such as finance, engineering, marketing, law, project management, information management, medicine, and more. The journal also welcomes papers on multi-agent systems, knowledge management, neural networks, knowledge discovery, data mining, and other related areas, excluding applications to military/defense systems.