BYOT-CPS: A Hybrid Cyber-Physical Systems Testbed for IoT Security Assessment and Platform Evaluation
- URL: http://arxiv.org/abs/2605.23059v1
- Date: Thu, 21 May 2026 21:49:14 GMT
- Title: BYOT-CPS: A Hybrid Cyber-Physical Systems Testbed for IoT Security Assessment and Platform Evaluation
- Abstract summary: This paper presents Build Your Own Cyber-Physical Systems Testbed (BYOT-CPS)<n> BYOT-CPS is a hybrid cyber-physical testbed that connects real IoT devices to virtualised network infrastructure built on GNS3.<n>A prototype deployment integrating smart bulbs, smart plugs, switches, and IP cameras is used to demonstrate hybrid connectivity, testing penetration, a Mirai-style denial-of-service attack, traffic monitoring, and controlled device manipulation.
- Score: 0.0
- License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
- Abstract: Internet of Things (IoT) security research continues to face a methodological gap between scalable virtual experimentation and realistic device behaviour. While pure simulation and emulation platforms provide control, repeatability, and scale, they do not fully reproduce firmware-specific behaviours, hardware characteristics, and vendor implementation weaknesses that frequently determine real-world exploitability. Conversely, physicalonly testbeds provide realism but are costly to assemble, difficult to reconfigure, and hard to replicate across institutions. This paper presents Build Your Own Cyber-Physical Systems Testbed (BYOT-CPS), a hybrid cyber-physical testbed that connects real IoT devices to virtualised network infrastructure built on GNS3. BYOT-CPS is designed to support security experimentation, education, and independent evaluation of commercial IoT security platforms within a controlled environment that preserves authentic device behaviour. Six requirements for such a testbed are defined: fidelity, heterogeneity, scalability, reproducibility, extensibility, and independence. A prototype deployment integrating smart bulbs, smart plugs, switches, and IP cameras with virtual enterprise, server, attack, and monitoring zones is used to demonstrate hybrid connectivity, penetration testing workflows, a Mirai-style denial-of-service attack, traffic monitoring, and controlled device manipulation. The evidence presented constitutes a feasibility validation of the framework rather than a largescale comparative benchmark. Within that scope, BYOT-CPS offers a practical middle ground between emulation-only research environments and costly physical laboratories while positioning vendor-neutral platform evaluation as a forward-looking design objective.
Related papers
- PhyAgentOS: A Self-Evolving Operating System for Embodied Agents with Decoupled Cognitive Planning and Physical Execution [49.776611937968]
We present PhyAgentOS, a foundation delivering scheduling, verification, memory, benchmarking, and safety as system-level services.<n>Its Session-Centered treats a session, not an action, as the minimum unit of scheduling, compatibility, supervised execution, evidence collection, and acceptance.<n>SessionVerifier distinguishes execution termination from semantic task completion via evidence-grounded verdicts of success, failure, or replan.<n> Benchmarking reuses the deployment session and verification path, so results trace to real execution.
arXiv Detail & Related papers (2026-07-18T04:46:53Z) - An AI-Based Solution for Secure Service Provisioning in IoT [4.2354621152563485]
We present a comprehensive framework designed to select the most suitable smart objects to deliver a target service within a given IoT environment.<n>We use a Deep Reinforcement Learning (DRL) approach in which an intelligent agent learns, through interaction with a complex, dynamic environment, how to adapt to changes.<n>For behavioral monitoring, we leverage Federated Learning (FL) to develop a global Behavioral Fingerprinting (BF) model.
arXiv Detail & Related papers (2026-06-29T12:23:48Z) - Resilience of IEC 61850 Sampled Values-Based Protection Systems Under Coordinated False Data Injections [0.0]
This paper assesses the resilience of IEC 61850 digital substations under False Data Injection Attacks (FDIAs) targeting the Sampled Values (SV) protocol.<n>The multicast nature of SV exposes substations to cyber intrusions capable of disrupting protection functions and causing large-scale outages.<n>A defense strategy covering deterrence, prevention, detection, mitigation, and resilience is analyzed.
arXiv Detail & Related papers (2026-05-08T10:08:51Z) - Robust Cross-Domain WiFi Fall Detection via Physics-Driven Attention-Enhanced Transformers [64.35403680946182]
Device-free fall detection utilizing WiFi Channel State Information (CSI) has emerged as a promising solution for elderly health monitoring.<n>Existing deep learning approaches suffer from severe performance degradation when deployed in unseen environments.<n>We propose a robust, domain-general framework featuring a novel Attention-Enhanced CNN-Transformer hybrid architecture.
arXiv Detail & Related papers (2026-04-23T03:28:12Z) - Physically Unclonable Functions for Secure IoT Authentication and Hardware-Anchored AI Model Integrity [1.9795169518658187]
This survey reviews and synthesizes existing literature on hardware-rooted trust mechanisms for AI-enabled IoT systems.<n>It examines and compares representative trust anchor mechanisms, including TPM, PUFs, container-aware hardware roots of trust, and software-only security approaches.<n>It shows that PUF-based and hybrid trust anchors offer a promising balance for large-scale, AI-enabled IoT systems.
arXiv Detail & Related papers (2026-04-23T01:06:42Z) - Emulation-based System-on-Chip Security Verification: Challenges and Opportunities [1.9091520236263388]
Hardware emulation is emerging as an increasingly important pre-silicon verification technology.<n>We organize the landscape of prior work across assertion-based security checking, coverage-driven exploration, adversarial testing, information-flow tracking, fault injection, and side-channel-oriented evaluation.<n>We discuss emerging directions such as AI-assisted emulation, digital security twins, chiplet-scale security exploration, automated vulnerability assessment, and cloud-scale secure emulation.
arXiv Detail & Related papers (2026-04-16T14:38:02Z) - ManipulationNet: An Infrastructure for Benchmarking Real-World Robot Manipulation with Physical Skill Challenges and Embodied Multimodal Reasoning [61.35327888597012]
Dexterous manipulation enables robots to purposefully alter the physical world, transforming them from passive observers into active agents in unstructured environments.<n>Despite decades of advances in hardware, perception, control, and learning, progress toward general manipulation systems remains fragmented.<n>We introduce ManipulationNet, a global infrastructure that hosts real-world benchmark tasks for robotic manipulation.
arXiv Detail & Related papers (2026-03-04T18:29:28Z) - OS-Sentinel: Towards Safety-Enhanced Mobile GUI Agents via Hybrid Validation in Realistic Workflows [77.95511352806261]
Computer-using agents powered by Vision-Language Models (VLMs) have demonstrated human-like capabilities in operating digital environments like mobile platforms.<n>We propose OS-Sentinel, a novel hybrid safety detection framework that combines a Formal Verifier for detecting explicit system-level violations with a Contextual Judge for assessing contextual risks and agent actions.
arXiv Detail & Related papers (2025-10-28T13:22:39Z) - MetAdv: A Unified and Interactive Adversarial Testing Platform for Autonomous Driving [85.04826012938642]
MetAdv is a novel adversarial testing platform that enables realistic, dynamic, and interactive evaluation.<n>It supports flexible 3D vehicle modeling and seamless transitions between simulated and physical environments.<n>It enables real-time capture of physiological signals and behavioral feedback from drivers.
arXiv Detail & Related papers (2025-08-04T03:07:54Z) - A Contrastive Federated Semi-Supervised Learning Intrusion Detection Framework for Internet of Robotic Things [0.43512163406552007]
This paper proposes a Contrastive Federated Semi-Supervised Learning Network Intrusion Detection framework (CFedSSL-NID) for IoRT intrusion detection and defense.<n>CFedSSL-NID integrates randomly weak and strong augmentation, latent contrastive learning, and EMA update to integrate supervised signals, thereby enhancing performance and robustness on robots' local unlabeled data.
arXiv Detail & Related papers (2025-05-10T12:59:01Z) - Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning [52.6706505729803]
We introduce Federated Learning (FL) to collaboratively train a decentralized shared model of Intrusion Detection Systems (IDS)
FLEKD enables a more flexible aggregation method than conventional model fusion techniques.
Experiment results show that the proposed approach outperforms local training and traditional FL in terms of both speed and performance.
arXiv Detail & Related papers (2024-01-22T14:16:37Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.