Over the last few decades, the proliferation of the Internet of Things (IoT) has produced an overwhelming flow of data and services, which has shifted the access control paradigm from a fixed desktop environment to dynamic cloud environments. Fog computing is associated with a new access control paradigm to reduce the overhead costs by moving the execution of application logic from the centre of the cloud data sources to the periphery of the IoT-oriented sensor networks. Indeed, accessing information and data resources from a variety of IoT sources has been plagued with inherent problems such as data heterogeneity, privacy, security and computational overheads. This paper presents an extensive survey of security, privacy and access control research, while highlighting several specific concerns in a wide range of contextual conditions (e.g., spatial, temporal and environmental contexts) which are gaining a lot of momentum in the area of industrial sensor and cloud networks. We present different taxonomies, such as contextual conditions and authorization models, based on the key issues in this area and discuss the existing context-sensitive access control approaches to tackle the aforementioned issues. With the aim of reducing administrative and computational overheads in the IoT sensor networks, we propose a new generation of Fog-Based Context-Aware Access Control (FB-CAAC) framework, combining the benefits of the cloud, IoT and context-aware computing; and ensuring proper access control and security at the edge of the end-devices. Our goal is not only to control context-sensitive access to data resources in the cloud, but also to move the execution of an application logic from the cloud-level to an intermediary-level where necessary, through adding computational nodes at the edge of the IoT sensor network. A discussion of some open research issues pertaining to context-sensitive access control to data resources is provided, including several real-world case studies. We conclude the paper with an in-depth analysis of the research challenges that have not been adequately addressed in the literature and highlight directions for future work that has not been well aligned with currently available research.

The electric vehicle (EV) charging ecosystem, being a distinguishable paradigm of IIoT infrastructure, consists of distributed and complex hybrid systems that demand adaptive data-driven cyber-defense mechanisms to tackle the ever-growing attack vectors of cyber-physical systems. We propose an adaptive differential privacy-based federated learning framework for building a collaborative network intrusion detection system model for EV charging stations (EVCS). We use utility optimized local differential privacy to provide data privacy to the local network traffic data of each EVCS. Moreover, we propose a reinforcement learning-based intelligent privacy allocation mechanism at the EVCS level. The main significance of the proposed mechanism is that it can make privacy provisioning adaptive to the extent of privacy breaching rate, and dynamically optimize the privacy budget and the utility to avoid human intervention such as domain knowledge experts. The experimental results confirm the efficacy of our proposed mechanism and achieves appropriate privacy provisioning accuracy to approximately 95%.

In this article, we propose a trustworthy privacy-preserving federated learning (FL)-based deep learning (DL) service framework for Industrial Internet of Things-enabled systems. FL mitigates the privacy issues of the traditional collaborative learning model by aggregating multiple locally trained models without sharing any datasets among the participants. Nevertheless, the FL-based DL (FDL) model cannot be trusted as it is susceptible to intermediate results and data structure leakage during the model aggregation process. The proposed framework introduces an edge and cloud-powered service-oriented architecture identifying the key components and a service model for residual networks-based FDL with differential privacy for generating trustworthy locally trained models. The service model decomposes the functionality of the overall FDL process as services to ensure trustworthy execution through privacy preservation. Finally, we develop a privacy-preserving local model aggregation mechanism for FDL. We perform several experiments to assess the performance of the proposed framework.

In recent years, multiunmanned aerial vehicular systems (MUAVs) have become prevalent in divergent applications: agriculture, spectrum utilization, transportation, forest fire monitoring, and among others, due to their flexible, robust, and autonomous operational maneuver. Battery-powered multiunmanned aerial vehicles (MUAVs) systems possess limited computation and communication resources, significantly reducing their functional dimension by limiting mission time and range. To address this issue, we propose a federated deep reinforcement learning (FDRL)-based intelligent and decentralized task offloading scheme for resource-constrained UAVs that can enhance the operational capability of the MUAV systems. Moreover, the proposed FDRL scheme can improve offloading policy quality while preserving data privacy in MUAV. However, such intelligent systems may fall prey to backdoor attacks that can intervene in the system’s regular operation causing rapid degradation of its performance. We introduce a novel triggerless backdoor attack scheme on intelligent task offloading UAVs and analyze its impact to gauge the resiliency of the offloading policy in the presence of an adversary. Then, we propose lightweight agnostic defense mechanisms to combat such backdoors in multi-UAV settings. The extensive simulation results show that the proposed attack and defense strategies are practical and efficient.