A Multi-Layer Security Framework for Internet of Things Networks: Integrating Firewall Filtering, Authentication, Encryption, and Intrusion Detection
Keywords:
Internet of Things, Multi-Layer Security, Network Security, Authentication, Encryption, Intrusion Detection SystemAbstract
The evolution of the Internet of Things (IoT) enhances connectivity while simultaneously expanding the attack surface through interconnected heterogeneous devices, communication channels, applications, and network services. Single security mechanisms have limited functionality and cannot independently address the full spectrum of IoT security risks. This research aims to identify functional relationships among key security mechanisms, uncover conceptual gaps, and develop a multi-layer security framework that integrates traffic control, identity verification, communication protection, and intrusion detection. A literature review employing a narrative synthesis approach was conducted, covering IoT threats, device security, access control, secure communication, monitoring, application security, Smart City contexts, 5G networks, and the trade-off between security and performance. The analysis identifies four complementary security functions: firewall filtering for traffic control and attack surface reduction; authentication for identity verification and the prevention of unauthorized access; encryption for safeguarding communication confidentiality and integrity; and intrusion detection for monitoring and identifying abnormal activity. The resulting framework proposes four security metrics—Attack Blocking Rate, Detection Rate, False Positive Rate, and Response Time—and five performance metrics—throughput, latency, packet loss, CPU utilization, and memory utilization—for future empirical validation. The findings indicate that IoT security is best established through complementary layers of protection rather than reliance on a single mechanism. While the proposed framework serves as a conceptual foundation for security and performance evaluation, future research should validate it using IoT testbeds and controlled attack scenarios.
Downloads
References
[1] Agi Nanjar, Titi Safitri Maharani, Priyo Agung Prastyo, Muhammad Taufik Nur Hidayat, and Imam Kharits Najibulloh, “Internet Of Things (IoT) Integration In Telecommunication Networks: Challenges and Opportunities,” J. Technol. Inform. Eng., vol. 3, no. 1, pp. 11–24, Mar. 2024, doi: 10.51903/jtie.v3i1.156.
[2] T. Magara and Y. Zhou, “Internet of Things (IoT) of Smart Homes: Privacy and Security,” J. Electr. Comput. Eng., vol. 2024, pp. 1–17, Apr. 2024, doi: 10.1155/2024/7716956.
[3] I. Hidayatullah, M. H. Khairi, I. Maulana, and F. P. Eka Putra, “Analisis Protokol Keamanan Jaringan dalam Era Internet of Things (IoT),” Infotek J. Inform. Dan Teknol., vol. 8, no. 2, pp. 356–366, Jul. 2025, doi: 10.29408/jit.v8i2.30257.
[4] F. P. Eka Putra, A. Baidawi, A. A. Mubarok, and Frediyanto, “Merancang Jaringan Sensor Nirkabel dan IoT untuk Kota Pintar Pamekasan,” J. Inf. Dan Teknol., pp. 138–145, Jul. 2023, doi: 10.37034/jidt.v5i2.331.
[5] F. P. E. Putra, S. A. A. Sugi, K. Mufidah, and Y. R. Febriani, “Analysis of Cyber Attacks on Network Security,” vol. 6, no. 2, 2024.
[6] M. L. Ali, K. Thakur, S. Schmeelk, J. Debello, and D. Dragos, “Deep Learning vs. Machine Learning for Intrusion Detection in Computer Networks: A Comparative Study,” Appl. Sci., vol. 15, no. 4, p. 1903, Feb. 2025, doi: 10.3390/app15041903.
[7] M. Sajid et al., “Enhancing intrusion detection: a hybrid machine and deep learning approach,” J. Cloud Comput., vol. 13, no. 1, p. 123, Jul. 2024, doi: 10.1186/s13677-024-00685-x.
[8] F. P. E. Putra, S. M. Dewi, A. Hamzah, and U. Madura, “Privasi dan Keamanan Penerapan IoT Dalam Kehidupan Sehari-Hari : Tantangan dan Implikasi,” vol. 5, no. 2, 2023.
[9] D. Javeed, M. S. Saeed, M. Adil, P. Kumar, and A. Jolfaei, “A federated learning-based zero trust intrusion detection system for Internet of Things,” Ad Hoc Netw., vol. 162, p. 103540, Sep. 2024, doi: 10.1016/j.adhoc.2024.103540.
[10] S. S. Bamber, A. V. R. Katkuri, S. Sharma, and M. Angurala, “A hybrid CNN-LSTM approach for intelligent cyber intrusion detection system,” Comput. Secur., vol. 148, p. 104146, Jan. 2025, doi: 10.1016/j.cose.2024.104146.
[11] M Sahyudi and Erliyan Redy Susanto, “Analisis Implementasi Sistem Keamanan Basis Data Berbasis Role-Based Access Control (RBAC) pada Aplikasi Enterprise Resource Planning,” SATESI J. Sains Teknol. Dan Sist. Inf., vol. 5, no. 1, pp. 105–116, Apr. 2025, doi: 10.54259/satesi.v5i1.3997.
[12] H. Sharma, P. Kumar, and K. Sharma, “Advanced Security for IoT and Smart Devices: Addressing Modern Threats and Solutions,” in Emerging Threats and Countermeasures in Cybersecurity, 1st ed., G. Shrivastava, R. P. Ojha, S. Awasthi, H. Bansal, and K. Sharma, Eds., Wiley, 2025, pp. 191–216. doi: 10.1002/9781394230600.ch10.
[13] M. Q. Li and B. C. M. Fung, “Security concerns for Large Language Models: A survey,” J. Inf. Secur. Appl., vol. 95, p. 104284, Dec. 2025, doi: 10.1016/j.jisa.2025.104284.
[14] M. Zia, M. Siddiqua, M. Ouameur, M. Bagaa, and F. Turjman, “Securing the Future: A Survey on Smart Home Security in IoT-Integrated Smart Cities,” Adv. Netw., vol. 12, no. 1, pp. 1–18, Mar. 2025, doi: 10.11648/j.net.20251201.11.
[15] D. Alsalman, “A Comparative Study of Anomaly Detection Techniques for IoT Security Using Adaptive Machine Learning for IoT Threats,” IEEE Access, vol. 12, pp. 14719–14730, 2024, doi: 10.1109/ACCESS.2024.3359033.
[16] S. Muneer, U. Farooq, A. Athar, M. Ahsan Raza, T. M. Ghazal, and S. Sakib, “A Critical Review of Artificial Intelligence Based Approaches in Intrusion Detection: A Comprehensive Analysis,” J. Eng., vol. 2024, no. 1, p. 3909173, Jan. 2024, doi: 10.1155/2024/3909173.
[17] J. G. A. Ginting, B. Arifwidodo, and E. Wahyudi, “Virtual Privat Network: Koneksi Keamanan Pada Aplikasi Berbasis Android,” J. Telecommun. Electron. Control Eng. JTECE, vol. 7, no. 1, pp. 32–42, Jan. 2025, doi: 10.20895/jtece.v7i1.1632.
[18] S. Wahyu Widiyanti, N. Maya Hastuti, and E. Adita Kusumawati, “TINJAUAN KEAMANAN DATA REKAM MEDIS ELEKTRONIK PADA APLIKASI SIMPUS BERDASARKAN ASPEK CONFIDENTIALITY, INTEGRITY, DAN AVAILABILITY DI PUSKESMAS TASIKMADU KARANGANYAR: REVIEW OF ELECTRONIC MEDICAL RECORD DATA SECURITY IN THE SIMPUS APPLICATION BASED ON THE ASPECTS OF CONFIDENTIALITY, INTEGRITY AND AVAILABILITY AT TASIKMADU KARANGANYAR HEALTH CENTER,” Indones. J. Health Inf. Manag., vol. 4, no. 2, Jun. 2024, doi: 10.54877/ijhim.v4i2.212.
[19] Zahrah Hayat Arka Putri, Yessy Arye Yustraini, Ramdhan Ariansyah, Najma Choirun Nisa, Eka Dyar Wahyuni, and Agung Brastama Putra, “Pengamanan Data Akademik Berbasis Web dengan Enkripsi AES-256 (Studi Kasus pada Pendataan Digital SMA XYZ),” J. Nas. Teknol. Inf. Dan Apl., vol. 3, no. 3, pp. 707–716, May 2025, doi: 10.24843/JNATIA.2025.v03.i03.p26.
[20] F. P. E. Putra, M. Dafid, and I. Syafi’i, “Firewall Implementation as a Computer Network Security Strategy for Data Protection,” Brill. Res. Artif. Intell., vol. 5, no. 1, pp. 291–297, Jul. 2025, doi: 10.47709/brilliance.v5i1.6162.
[21] F. D. Insani, M. D. Anggraeni, and M. D. Anggraeni, “ANALISIS KINERJA ALGORITMA ADVANCED ENCRYPTION STANDARD (AES) ENCRYPTION DAN ALGORITMA BLOWFISH PADA PROSES ENKRIPSI DAN DEKRIPSI,” TRANSFORMASI, vol. 21, no. 2, Dec. 2025, doi: 10.56357/jt.v21i2.478.
[22] /A. F. Pranata, A. F. Saragih, R. Fikri, K. Rahmadani, and N. P. Aulia, “Analisis Perbandingan Enkripsi dan Dekripsi Menggunakan Algoritma Simetris AES dan Hybrid (AES + RSA) Pada File Video,” JIKUM J. Ilmu Komput., vol. 2, no. 1, pp. 102–107, Jan. 2026, doi: 10.62671/jikum.v2i1.143.
[23] R. A. Nasution and Tommy, “Analisis Performa Kecepatan Enkripsi File Video Menggunakan Algoritma DSA dan Twofish Berbasis Web,” J. Komput. Teknol. Inf. Sist. Inf. JUKTISI, vol. 4, no. 3, pp. 2068–2075, Jan. 2026, doi: 10.62712/juktisi.v4i3.520.
[24] O. Arreche, T. Guntur, and M. Abdallah, “XAI-IDS: Toward Proposing an Explainable Artificial Intelligence Framework for Enhancing Network Intrusion Detection Systems,” Appl. Sci., vol. 14, no. 10, p. 4170, May 2024, doi: 10.3390/app14104170.
[25] S. Racherla, P. Sripathi, N. Faruqui, M. Alamgir Kabir, M. Whaiduzzaman, and S. Aziz Shah, “Deep-IDS: A Real-Time Intrusion Detector for IoT Nodes Using Deep Learning,” IEEE Access, vol. 12, pp. 63584–63597, 2024, doi: 10.1109/ACCESS.2024.3396461.
[26] S. Latif, W. Boulila, A. Koubaa, Z. Zou, and J. Ahmad, “DTL-IDS: An optimized Intrusion Detection Framework using Deep Transfer Learning and Genetic Algorithm,” J. Netw. Comput. Appl., vol. 221, p. 103784, Jan. 2024, doi: 10.1016/j.jnca.2023.103784.
[27] H. Niu et al., “A Survey on Artificial Noise for Physical Layer Security: Opportunities, Technologies, Guidelines, Advances, and Trends,” IEEE Commun. Surv. Tutor., vol. 28, pp. 341–381, 2026, doi: 10.1109/COMST.2025.3610758.
[28] M. Sajid, K. R. Malik, A. H. Khan, A. Bilal, A. Alqazzaz, and A. A. Darem, “Advanced multilayer security framework: integrating AES and LSB for enhanced data protection,” J. Supercomput., vol. 81, no. 17, p. 1607, Nov. 2025, doi: 10.1007/s11227-025-08093-x.
[29] B. M. Elomda, T. A. A. Abdelbary, H. A. Hassan, K. S. Hamza, and Q. Kharma, “An Enhanced Multi-Layer Blockchain Security Model for Improved Latency and Scalability,” Information, vol. 16, no. 3, p. 241, Mar. 2025, doi: 10.3390/info16030241.
[30] F. P. Eka Putra, Amir Hamzah, W. Agel, and R. O. Firmansyah Kusuma, “Impelementasi Sistem Keamanan Jaringan Mikrotik Menggunakan Firewall Filtering dan Port Knocking,” J. Sistim Inf. Dan Teknol., pp. 82–87, Jan. 2024, doi: 10.60083/jsisfotek.v5i4.329.
[31] O. H. Abdulganiyu, T. A. Tchakoucht, and Y. K. Saheed, “RETRACTED ARTICLE: Towards an efficient model for network intrusion detection system (IDS): systematic literature review,” Wirel. Netw., vol. 30, no. 1, pp. 453–482, Jan. 2024, doi: 10.1007/s11276-023-03495-2.
[32] F. P. E. Putra, U. Ubaidi, A. Zulfikri, G. Arifin, and R. M. Ilhamsyah, “Analysis of Phishing Attack Trends, Impacts and Prevention Methods: Literature Study,” Brill. Res. Artif. Intell., vol. 4, no. 1, pp. 413–421, Aug. 2024, doi: 10.47709/brilliance.v4i1.4357.
[33] J. Ali et al., “A deep dive into cybersecurity solutions for AI-driven IoT-enabled smart cities in advanced communication networks,” Comput. Commun., vol. 229, p. 108000, Jan. 2025, doi: 10.1016/j.comcom.2024.108000.
[34] A. Mubarakali, S. Sharavanan, H. Elshafie, and S. B. Changalasetty, “A secure and scalable home security system using IoT, 6G networks, AI-based hybrid deep learning models, blockchain, and smart contracts,” Int. J. Inf. Secur., vol. 25, no. 1, p. 15, Feb. 2026, doi: 10.1007/s10207-025-01178-x.
[35] F. A. Ananta, A. Wulandary, J. Rizka, W. A. Hidayat, and M. Azkal, “Analisis Keamanan Komputer dalam Melindungi Data dari Serangan Siber,” JIKUM J. Ilmu Komput., vol. 2, no. 1, pp. 133–137, Jan. 2026, doi: 10.62671/vxn5fx87.
[36] P. Rizkika, D. Juardi, and A. Susilo Yuda Irawan, “ANALISIS KEAMANAN PADA APLIKASI HIMFO BERBASIS ANDROID MENGGUNAKAN MOBSF,” JATI J. Mhs. Tek. Inform., vol. 8, no. 4, pp. 5945–5952, Jun. 2024, doi: 10.36040/jati.v8i4.10051.
[37] T. I. Protick, A. Sabir, S. Abhinaya, A. Bartlett, and A. Das, “Unveiling Users’ Security and Privacy Concerns Regarding Smart Home IoT Products from Online Reviews,” ACM J. Comput. Sustain. Soc., vol. 2, no. 4, pp. 1–41, Dec. 2024, doi: 10.1145/3685929.
[38] A. R. Aulia, E. I. Alwi, and A. W. M. Gaffar, “Perancangan Sistem Keamanan Jaringan Intrusion Prevention System Menggunakan Suricata Dan IPTables,” LINIER Lit. Inform. Dan Komput., vol. 1, no. 3, pp. 235–240, Dec. 2024, doi: 10.33096/linier.v1i3.2500.
[39] S. M. S. Bukhari et al., “Secure and privacy-preserving intrusion detection in wireless sensor networks: Federated learning with SCNN-Bi-LSTM for enhanced reliability,” Ad Hoc Netw., vol. 155, p. 103407, Mar. 2024, doi: 10.1016/j.adhoc.2024.103407.
[40] Muhammad Randy Fachrezi, Dwiky Oldi Amsyah, Alwi Syahputra, and Ibnu, “Perancangan dan Implementasi Sistem Enkripsi Data Sensitif Menggunakan AES-256-CBC pada Aplikasi Berbasis Web Sederhana,” J. Ilmu Komput. Dan Tek. Inform., vol. 2, no. 1, pp. 55–62, Jan. 2026, doi: 10.64803/juikti.v2i1.100.
[41] K. Aziz, S. Zakir, W. Aprison, and L. Efriyanti, “IMPLEMENTASI KEAMANAN JARINGAN DENGAN METODE FIREWALL FILTERING MENGGUNAKAN MIKROTIK DI SMKN 3 PAYAKUMBUH,” JATI J. Mhs. Tek. Inform., vol. 8, no. 3, pp. 3343–3352, May 2024, doi: 10.36040/jati.v8i3.9662.
[42] N. Syafitri, M. S. Lamada, and I. Suhardi, “Implementasi Firewall untuk Mencegah Ancaman Keamanan pada Akses Remote Dekstop Protocol di Sistem Operasi Windows,” JIMUJurnal Ilm. Multidisipliner, vol. 2, no. 04, pp. 1095–1105, Aug. 2024, doi: 10.70294/jimu.v2i04.494.
[43] P. Badoni, M. Wadhwa, and R. Walia, “System of IntelliGuard Access Using IoT,” in 2024 International Conference on Intelligent Systems for Cybersecurity (ISCS), Gurugram, India: IEEE, May 2024, pp. 1–6. doi: 10.1109/ISCS61804.2024.10581055.
[44] M. Saddam Ariyanto, G. Boy Hertantyo, and B. Hartati, “SERANGAN DEAUTHENTICATION ATTACK PADA WIRELESS ACCESS POINT: SYSTEMATIC LITERATUR REVIEW,” JATI J. Mhs. Tek. Inform., vol. 9, no. 4, pp. 6606–6612, May 2025, doi: 10.36040/jati.v9i4.13808.
[45] T. W. Lingga, O. K. Sulaiman, and K. Nasution, “Advance Encryption Standard (AES) sebagai Algoritma Kriptografi dalam Mengamankan Data pada Aplikasi E-Pariwisata,” Sudo J. Tek. Inform., vol. 3, no. 4, pp. 201–216, Jun. 2025, doi: 10.56211/sudo.v3i4.923.
[46] M. R. Fahlevvi, D. S. A. Putra, and W. Ariandi, “ALGORITMA AES128-CBC (ADVANCED ENCRYPTION STANDARD) UNTUK ENKRIPSI DAN DEKRIPSI BERKAS DOKUMEN PT. ADIARTA MUZIZAT,” J. Innov. Future Technol. IFTECH, vol. 7, no. 1, pp. 166–176, Feb. 2025, doi: 10.47080/iftech.v7i1.3929.
[47] H. Zhang, M. Zaman, A. Jain, and S. Sampalli, “A Hybrid Machine Learning Intrusion Detection System for Wireless Sensor Networks,” in 2024 International Wireless Communications and Mobile Computing (IWCMC), Ayia Napa, Cyprus: IEEE, May 2024, pp. 830–835. doi: 10.1109/IWCMC61514.2024.10592535.
[48] A. Belenguer, J. A. Pascual, and J. Navaridas, “A Review of Federated Learning Applications in Intrusion Detection Systems,” Comput. Netw., vol. 258, p. 111023, Feb. 2025, doi: 10.1016/j.comnet.2024.111023.
[49] A. F. Rachman, F. P. E. Putra, S. Syirofi, and D. Wahid, “Case Study of Computer Network Development for the Internet Of Things (IoT) Industry in an Urban Environment,” Brill. Res. Artif. Intell., vol. 4, no. 1, pp. 399–407, Aug. 2024, doi: 10.47709/brilliance.v4i1.4302.
[50] Fauzan Prasetyo Eka Putra, Dea Aulia Siswoyo, M. Idris Ainul Yaqin, and Rica Oktavia, “Tinjauan Regulasi Siber dan Kebijakan Keamanan Jaringan 5G: Perspektif Nasional dan Internasional,” J. Inform. Dan Tekonologi Komput. JITEK, vol. 5, no. 1, pp. 126–134, Mar. 2025, doi: 10.55606/jitek.v5i1.6141.
[51] N. Haidar Hari, F. P. Eka Putra, U. Hasanah, S. R. Sutarsih, and Riyan, “Transformasi Jaringan Telekomunikasi dengan Teknologi 5G: Tantangan, Potensi, dan Implikasi,” J. Inf. Dan Teknol., pp. 146–150, Jul. 2023, doi: 10.37034/jidt.v5i2.357.
[52] F. P. Eka Putra, . S., A. Ramadhani, and . M., “Integrasi Teknologi Kuantum dan fiber Optik untuk Meningkatkan Keamanan dan Efisiensi Jaringan Masa Depan,” J. Ilm. Ilk. - Ilmu Komput. Inform., vol. 8, no. 2, pp. 151–163, Jul. 2025, doi: 10.47324/ilkominfo.v8i2.342.
[53] R. Mustafa, N. I. Sarkar, M. Mohaghegh, and S. Pervez, “A Cross-Layer Secure and Energy-Efficient Framework for the Internet of Things: A Comprehensive Survey,” Sensors, vol. 24, no. 22, p. 7209, Nov. 2024, doi: 10.3390/s24227209.
[54] Y. Sanjalawe, S. Al-E’mari, S. Fraihat, M. Abualhaj, and E. Alzubi, “A deep learning-driven multi-layered steganographic approach for enhanced data security,” Sci. Rep., vol. 15, no. 1, p. 4761, Feb. 2025, doi: 10.1038/s41598-025-89189-5.
[55] A. Qaddos, M. U. Yaseen, A. S. Al-Shamayleh, M. Imran, A. Akhunzada, and S. Z. Alharthi, “A novel intrusion detection framework for optimizing IoT security,” Sci. Rep., vol. 14, no. 1, p. 21789, Sep. 2024, doi: 10.1038/s41598-024-72049-z.
[56] F. P. E. Putra, U. Ubaidi, A. Hamzah, W. A. Pramadi, and A. Nuraini, “Systematic Literature Review: Security Gap Detection On Websites Using Owasp Zap,” Brill. Res. Artif. Intell., vol. 4, no. 1, pp. 348–355, Jul. 2024, doi: 10.47709/brilliance.v4i1.4227.
Published
Issue
Section
License
Copyright (c) 2026 Jihan Abidah Fitriyah (Author); Belgis Putri Alfiyah, Trio Irham Chairil Anwar (Translator)
This work is licensed under a Creative Commons Attribution 4.0 International License.
