AI-Driven Vulnerability Management Framework for the Internet of Things Page 19

doi:10.56201/ijcsmt.vol.12.no4.2026.pg19.31

AI-Driven Vulnerability Management Framework for the Internet of Things Page 19

Author not specified

Abstract

This rapid growth of IoT has changed the landscape of today’s digital world by allowing devices to communicate effectively, especially in different fields like healthcare, smart cities, industrial control, and defense. Despite its advantages, IoT introduces significant security challenges due to device heterogeneity, constrained computational resources, and weak security architectures, making it highly vulnerable to cyber threats. Traditional vulnerability management approaches, including rule-based intrusion detection systems and signature-based scanning, have proven inadequate in addressing the dynamic and large-scale nature of IoT environments, as they are largely reactive and incapable of detecting novel attack patterns. This study proposes an AI- driven vulnerability management framework that integrates anomaly detection techniques using machine learning to enhance proactive threat identification and mitigation in IoT ecosystems. The framework leverages publicly available datasets such as Bot-IoT, CIC-IoT, and UNSW- NB15 to train and evaluate models capable of distinguishing between normal and malicious network behaviors. Various machine learning algorithms, including supervised and unsupervised techniques, were implemented and assessed using performance metrics such as accuracy, precision, recall, F1-score and false positive rate. The results demonstrate that AI- based models significantly outperform traditional methods in detecting previously unseen threats, achieving high detection accuracy and reduced false positives. The proposed framework integrates anomaly detection into a structured vulnerability management lifecycle encompassing identification, prioritization and remediation of vulnerabilities. Generally, the study provides a scalable and adaptive solution for improving IoT security, reducing system vulnerabilities, and enhancing resilience against evolving cyber threats, with potential for future real-world deployment across critical sectors.

Keywords

Internet of ThingsVulnerability ManagementArtificial IntelligenceMachine LearningAnomaly DetectionCybersecurity. IJCSMT

References

Abisoye, A., Akerele, J. I., Odio, P. E., Collins, A., Babatunde, G. O., & Mustapha, S. D. (2025). Using AI and machine learning to predict and mitigate cybersecurity risks in critical infrastructure. International Journal of Engineering Research and Development, 21(2), 205–224. Alfarizi, B. Z., & Heryadi, D. (2024). Global governance in the 21st century: A digital trends and transformation. Global Local Interactions: Journal of International Relations, 4(1), 57– 67. Ali, S., & Anwer, F. (2025). An IoT-Enabled Cloud Computing Model for Authentication and Data Confidentiality using Lightweight Cryptography. Arabian Journal for Science and Engineering, 50(19), 15907–15929. George, A. S., Baskar, T., & Srikaanth, P. B. (2024). Cyber threats to critical infrastructure: assessing vulnerabilities across key sectors. Partners Universal International Innovation Journal, 2(1), 51–75. Goswami, M. (2024). AI-based anomaly detection for real-time cybersecurity. International Journal of Research and Review Techniques, 3(1), 45–53. Hassan, S., Shafi, I., Ahmad, J., Khan, A., Khurshaid, T., & Ashraf, I. (2025). Review of techniques for integrating security in software development lifecycle. Computers, Materials, & Continua, 82(1), 139. Homoliak, I., Venugopalan, S., Reijsbergen, D., Hum, Q., Schumi, R., & Szalachowski, P. (2020). The security reference architecture for blockchains: Toward a standardized model for studying vulnerabilities, threats, and defenses. IEEE Communications Surveys & Tutorials, 23(1), 341–390. Mahadik, S. S., Pawar, P. M., & Muthalagu, R. (2024). Heterogeneous IoT security: techniques, challenges and open issues. Multimedia Tools and Applications, 83(12), 35371–35412. Mallick, M. A. I., & Nath, R. (2024). Navigating the cyber security landscape: A comprehensive review of cyber-attacks, emerging trends, and recent developments. World Scientific News, 190(1), 1–69. Ndibe, O. S. (2025). Ai-driven forensic systems for real-time anomaly detection and threat mitigation in cybersecurity infrastructures. International Journal of Research Publication and Reviews, 6(5), 389–411. Okoli, U. I., Obi, O. C., Adewusi, A. O., & Abrahams, T. O. (2024). Machine learning in cybersecurity: A review of threat detection and defense mechanisms. World Journal of Advanced Research and Reviews, 21(1), 2286–2295. Qudus, L. (2025). Resilient systems: building secure cyber-physical infrastructure for critical industries against emerging threats. Int J Res Publ Rev, 6(1), 3330–3346. Rangarajan, S., & Al-Quraishi, T. (2023). Navigating the future of the Internet of things: emerging trends and transformative applications. Babylonian Journal of Internet of Things, 2023, 8–12. Sayed, M. (2024). The internet of things , applications and challenges: a comprehensive review. Journal of Innovative Intelligent Computing and Emerging Technologies , 1(01), 20–27. Shah, Z., Ullah, I., Li, H., Levula, A., & Khurshid, K. (2022). Blockchain based solutions to mitigate distributed denial of service attacks in the Internet of Things : A survey. Sensors, 22(3), 1094. IJCSMT Sunkara, G. (2022). AI-driven cybersecurity: Advancing intelligent threat detection and adaptive network security in the era of sophisticated cyber attacks. Well Testing Journal, 31(1), 185–198.

AI-Driven Vulnerability Management Framework for the Internet of Things Page 19

Abstract

Keywords

References

More Articles from INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND MATHEMATICAL THEORY