AI-Driven ML and DL Approaches for Internet of Things Security in Developing Countries: A Systematic Review
DOI:
https://doi.org/10.71330/thenucleus.2026.1517Abstract
The Internet of Things (IoT) has significantly expanded the attack surface of modern digital infrastructure. In developing regions, low-cost devices are deployed across fragile networks for precision agriculture, public utilities, clinical settings, and city governance, often with minimal cybersecurity oversight. These conditions substantially elevate the risk of cyberattacks. Traditional intrusion detection systems impose computational and memory requirements that microcontroller-grade IoT hardware cannot satisfy. In this study, we systematically surveyed the use of lightweight AI, ML, and DL methods to protect resource-constrained IoT (RC-IoT) devices. Benchmarked solution classes range from shallow classifiers and compressed neural networks to edge-gateway models and federated learning frameworks, which are evaluated based on their accuracy, memory footprint, inference latency and energy consumption. Well-tuned models can maintain high detection rates without exceeding the hardware limitations. A fundamental trade-off exists between detection accuracy and energy consumption: deeper models that improve detection fidelity also increase power demand, a critical concern for battery-operated nodes in settings where reliable grid power cannot be assumed. Techniques such as federated learning and compact cryptographic primitives enable privacy-preserving coordination of distributed nodes. Grounded in a layered defense architecture, this review concludes with actionable guidance for engineers, institutions, and policymakers in resource-constrained environments.
References
R. Ahmad and I. Alsmadi, "Machine learning approaches to IoT security: A systematic literature review," IoT, vol. 14, p. 100365, Jun. 2021.
E. C. P. Neto, S. Dadkhah, R. Ferreira, A. Zohourian, R. Lu, and A. A. Ghorbani, "CICIoT2023: A real-time dataset and benchmark for large-scale attacks in IoT environment," Sensors, vol. 23, no. 13, p. 5941, 2023.
L. H. Mahdi and A. A. Abdullah, "Fortifying future IoT security: A comprehensive review on lightweight post-quantum cryptography," Engineering, Technology & Applied Science Research, vol. 15, no. 2, pp. 21812–21821, Apr. 2025.
A. Alsaedi, N. Moustafa, Z. Tari, A. Mahmood, and A. Anwar, "TON_IoT telemetry dataset: A new generation dataset of IoT and IIoT for data-driven intrusion detection systems," IEEE Access, vol. 8, pp. 165130–165150, 2020.
A. Pasam, A. Sinha, and A. Mailewa, "Lightweight AI-based intrusion detection models for IoT devices: A comparative review," in Proc. IEEE Int. Carnahan Conf. Security Technology (ICCST), Oct. 2025, pp. 1–7.
N. Moustafa and J. Slay, "UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)," in Proc. Military Communications and Information Systems Conf. (MilCIS), Nov. 2015, pp. 1–6.
N. Moustafa and J. Slay, "The evaluation of network anomaly detection systems: Statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set," Information Security Journal: A Global Perspective, vol. 25, nos. 1–3, pp. 18–31, Apr. 2016.
Y. Yigit, C. Chrysoulas, G. Yurdakul, L. Maglaras, and B. Canberk, "Digital twin-empowered smart attack detection system for 6G edge of things networks," in Proc. IEEE Globecom Workshops (GC Wkshps), Dec. 2023, pp. 178–183.
M. A. Ferrag, O. Friha, D. Hamouda, L. Maglaras, and H. Janicke, "Edge-IIoTset: A new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning," IEEE Access, vol. 10, pp. 40281–40306, 2022.
L. Takhellambam, U. Boby, N. Hoque, K. R. Singh, and M. Bhuyan, "FL-MU: A benchmark dataset for federated intrusion detection in IoT networks," IEEE Access, vol. 13, pp. 191037–191064, 2025.
A. Imteaj, U. Thakker, S. Wang, J. Li, and M. H. Amini, "A survey on federated learning for resource-constrained IoT devices," IEEE Internet Things J., vol. 9, no. 1, pp. 1–24, Jan. 2022.
P. Fusco, A. Montefusco, G. P. Rimoli, F. Palmieri, and M. Ficco, "TinyML-based intrusion detection system for handling class imbalance in IoT-edge domain using Siamese neural network on MCU," in Advanced Information Networking and Applications, L. Barolli, Ed. Cham, Switzerland: Springer, 2025, pp. 389–402.
A. Chatterjee and B. S. Ahmed, "IoT anomaly detection methods and applications: A survey," IoT, vol. 19, p. 100568, Aug. 2022.
R. Srikanth, G. Vadlakonda, G. Simuni, and M. Sinha, "Federated learning for IoT: A decentralized approach to enhance privacy and efficiency in cyber-physical systems," SSRN, May 2025.
P. K. Yemmanuru, J. Yeboah, and K. E. N. G, "Systematic literature review of machine learning for IoT security," in Proc. Int. Conf. Computational Science and Computational Intelligence (CSCI), Dec. 2023, pp. 227–233.
P. Agustin, G. Sebastian, and M. J. Erquiaga, "IoT-23: A labeled dataset with malicious and benign IoT network traffic," Zenodo, Jan. 2020.
N. A. Hamad, K. A. A. Bakar, F. Qamar, A. M. Jubair, R. R. Mohamed, and M. A. Mohamed, "Systematic analysis of federated learning approaches for intrusion detection in the IoT environment," IEEE Access, vol. 13, pp. 95410–95444, 2025.
M. Baqer, "Lightweight federated learning approach for resource-constrained IoT," Sensors, vol. 25, no. 18, p. 5633, 2025.
A. I. Jony and A. K. B. Arnob, "A long short-term memory-based approach for detecting cyber-attacks in IoT using CIC-IoT2023 dataset," Journal of Edge Computing, vol. 3, no. 1, pp. 28–42, May 2024.
A. B. Varlık, "Global cybersecurity disparities and the strategic vulnerability of high-income nations," Güvenlik Bilimleri Dergisi, vol. 15, no. 1, pp. 91–112, May 2026.
A. Villafranca, I. Tasic, and M.-D. Cano, "TRUSTLab dataset: A real-world CICFlowMeter dataset for IoT/edge intrusion detection," Frontiers in Computer Science, vol. 8, Art. no. 1803271, 2026.
N. Koroniotis, N. Moustafa, E. Sitnikova, and B. Turnbull, "Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset," Future Generation Computer Systems, vol. 100, pp. 779–796, Nov. 2019.
P. Fusco, G. P. Rimoli, and M. Ficco, "TinyML and Federated Learning for Resource-Constrained Medical Devices," in Artificial Intelligence Techniques for Analysing Sensitive Data in Medical Cyber-Physical Systems, M. Ficco and G. D'Angelo, Eds. Cham, Switzerland: Springer Nature, 2025, pp. 113–126.
I. Brass, L. Tanczer, M. Carr, M. Elsden, and J. J. Blackstock, "Standardising a Moving Target: The Development and Evolution of IoT Security Standards," in Living in the IoT: Cybersecurity of the IoT, 2018, IET, London, U.K., doi: 10.1049/cp.2018.0024.
R. Pietrantuono, M. Ficco, and F. Palmieri, "Survivability analysis of IoT systems under resource exhausting attacks," IEEE Trans. Inf. Forensics Security, vol. 18, pp. 3277–3288, 2023.
A. Gerodimos, L. Maglaras, M. A. Ferrag, N. Ayres, and I. Kantzavelou, "IoT: Communication protocols and security threats," IoT and Cyber-Physical Systems, vol. 3, pp. 1–13, Jan. 2023.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 The Nucleus

This work is licensed under a Creative Commons Attribution 4.0 International License.
For all articles published in The Nucleus, copyright is retained by the authors. Articles are licensed under an open access licence [CC Attribution 4.0] meaning that anyone may download and read the paper for free. In addition, the article may be reused and quoted provided that the original published version is cited properly.

