A Survey of Advanced Intrusion Detection Systems Using Deep Learning in Cloud-Edge IoT Environments
Received: 23 February 2026 | Revised: 14 March 2026 and 19 March 2026 | Accepted: 20 March 2026 | Online: 23 May 2026
Corresponding author: Mohammed Assiri
Abstract
The Internet of Things (IoT), Cloud Computing (CC), and Edge Computing (EC) represent an important shift from conventional structures on virtualized resource provisioning, introducing better adaptability and transparency for host systems, allowing cloud providers, on-premises sources, and edge nodes to fully realize the "everything-as-a-service" notion. This survey provides a comprehensive review of emerging cybersecurity threats in Cloud-Edge IoT systems and systematically examines AI-driven deep learning approaches for Intrusion Detection Systems (IDSs). The foundational concepts are first presented, including an overview of cybersecurity principles, cloud computing architecture, edge computing paradigms, and the advantages and challenges of IoT integration with cloud and edge infrastructures. Then, it further explores the role of ML and DL models in IDSs, highlighting architectures. A comparative analysis of recent studies is conducted based on datasets, performance metrics, scalability, computational efficiency, and robustness. Key findings are synthesized, identifying research gaps and evaluating practical deployment constraints. Finally, the survey outlines critical challenges and future research directions to support the development of secure, intelligent, and resilient Cloud-Edge IoT ecosystems.
Keywords:
Internet of Things (IoT), cloud computing, edge computing, cybersecurity, deep learning, machine learningReferences
S. Hamdan, M. Ayyash, and S. Almajali, "Edge-Computing Architectures for Internet of Things Applications: A Survey," Sensors, vol. 20, no. 22, Nov. 2020, Art. no. 6441.
A. S. Anshad et al., "Intelligent Anomaly Detection for Secure Data Transmission in Cloud Computing Systems over 6G Networks," Engineering, Technology & Applied Science Research, vol. 15, no. 6, pp. 30349–30355, Dec. 2025.
S. A. Alshaya, "IoT Device Identification and Cybersecurity: Advancements, Challenges, and an LSTM-MLP Solution," Engineering, Technology & Applied Science Research, vol. 13, no. 6, pp. 11992–12000, Dec. 2023.
L. Coppolino, S. D’Antonio, G. Mazzeo, and L. Romano, "Cloud security: Emerging threats and current solutions," Computers & Electrical Engineering, vol. 59, pp. 126–140, Apr. 2017.
H. Liu and B. Lang, "Machine Learning and Deep Learning Methods for Intrusion Detection Systems: A Survey," Applied Sciences, vol. 9, no. 20, Oct. 2019, Art. no. 4396.
A. T. Azar, S. U. Amin, M. A. Majeed, Ahmed Al-Khayyat, and I. Kasim, "Cloud-Cyber Physical Systems: Enhanced Metaheuristics with Hierarchical Deep Learning-based Cyberattack Detection," Engineering, Technology & Applied Science Research, vol. 14, no. 6, pp. 17572–17583, Dec. 2024.
P. L. S. Jayalaxmi, R. Saha, G. Kumar, M. Conti, and T. H. Kim, "Machine and Deep Learning Solutions for Intrusion Detection and Prevention in IoTs: A Survey," IEEE Access, vol. 10, pp. 121173–121192, 2022.
B. Vijetha, "Agentic Intelligence for Unified Cyber Defense: A Self-Adaptive Framework for Threat Detection Across Cloud, Edge, and IoT Systems," IEEE Access, vol. 14, pp. 5104–5118, 2026.
D. Darmin, W. Wahyudi, I. Taufik, A. Yusup, and A. H. Maulana, "Evaluation of Machine Learning Implementation for Network Intrusion Detection in Distributed IoT Systems," Riwayat: Educational Journal of History and Humanities, vol. 9, no. 1, pp. 1639–1653, Feb. 2026.
P. Laiu, M. Li, J. A. Nichols, M. Huettel, I. Sikkema, and M. Mathur, "Designing resilient IoT and Edge Computing with federated tinyML," Journal of Systems Architecture, vol. 174, May 2026, Art. no. 103709.
B. A. Agbor, B. U. A. Stephen, P. Asuquo, U. O. Luke, and V. Anaga, "Hybrid CNN–BiLSTM–DNN Approach for Detecting Cybersecurity Threats in IoT Networks," Computers, vol. 14, no. 2, Feb. 2025, Art. no. 58.
K. A. Alattas, "Advancing artificial intelligence-enabled cybersecurity framework using ensemble deep representation learning for intelligent cybersecurity in cloud-edge-IoT environments," AIMS Mathematics, vol. 10, no. 12, pp. 28981–29011, 2025.
T. Zhukabayeva, Z. Ahmad, A. Adamova, N. Karabayev, Y. Mardenov, and D. Satybaldina, "Penetration Testing and Machine Learning-Driven Cybersecurity Framework for IoT and Smart City Wireless Networks," IEEE Access, vol. 13, pp. 86144–86166, 2025.
Y. Xu, Y. Li, and Z. Sun, "IoT Intrusion Detection Using SDN Cloud-Edge Collaboration and Ensemble Deep Learning," in 2024 IEEE Cyber Science and Technology Congress (CyberSciTech), Nov. 2024, pp. 195–200.
M. F. Saiyedand and I. Al-Anbagi, "Deep Ensemble Learning With Pruning for DDoS Attack Detection in IoT Networks," IEEE Transactions on Machine Learning in Communications and Networking, vol. 2, pp. 596–616, 2024.
A. Enemosah and O. G. Ifeanyi, "Cloud security frameworks for protecting IoT devices and SCADA systems in automated environments," World Journal of Advanced Research and Reviews, vol. 22, no. 3, pp. 2232–2252, June 2024.
A. Gogineni, "AI-Enhanced Threat Detection and Response in Cloud Infrastructure Using Deep Learning Techniques," Journal of Artificial Intelligence & Cloud Computing, vol. 3, no. 1, pp. 1–7, Mar. 2024.
N. Kumar, J. P. Singh, and P. Kumar, "Machine learning-enhanced IoT network security: a Black Hole Algorithm-based feature selection approach for intrusion detection," Journal of Cyber Security Technology, vol. 10, no. 1, pp. 1–19, Dec. 2026.
C. Han, F. M. Alserhani, T. A. Ahanger, N. K. Almazmomi, and A. Hashmi, "Adaptive cyber threat detection in internet of things environment using deep learning and metaheuristic optimization," Peer-to-Peer Networking and Applications, vol. 19, no. 1, Jan. 2026, Art. no. 38.
O. Adeniyi, A. S. Sadiq, P. Pillai, M. Aljaidi, and O. Kaiwartya, "Securing Mobile Edge Computing Using Hybrid Deep Learning Method," Computers, vol. 13, no. 1, Jan. 2024, Art. no. 25.
R. Yang et al., "Efficient intrusion detection toward IoT networks using cloud–edge collaboration," Computer Networks, vol. 228, June 2023, Art. no. 109724.
U. Arul, R. Gnanajeyaraman, A. Selvakumar, S. Ramesh, T. Manikandan, and G. Michael, "Integration of IoT and edge cloud computing for smart microgrid energy management in VANET using machine learning," Computers and Electrical Engineering, vol. 110, Sept. 2023, Art. no. 108905.
Y, Wang, "Network Anomaly Traffic Detection Using WGAN-CNN-BiLSTM in Big Data Cloud–Edge Collaborative Computing Environment," JIPS(Journal of Information Processing Systems), vol. 20, no. 3, pp. 375–390, June 2024.
H. Liu, F. Han, and Y. Zhang, "Malicious traffic detection for cloud-edge-end networks: A deep learning approach," Computer Communications, vol. 215, pp. 150–156, Feb. 2024.
L. Zhou et al., "AI-driven robust dual attention-enhanced intrusion detection framework for IoT devices in edge-cloud computing networks," Future Generation Computer Systems, vol. 176, Mar. 2026, Art. no. 108110.
Z. Cao, B. Liu, D. Gao, D. Zhou, X. Han, and J. Cao, "A Dynamic Spatiotemporal Deep Learning Solution for Cloud–Edge Collaborative Industrial Control System Distributed Denial of Service Attack Detection," Electronics, vol. 14, no. 9, Apr. 2025.
J. Zhou et al., "CECN-DNN: A Cloud-Edge Collaborative Inference Approach to Intrusion Detection," Computer Networks, Feb. 2026, Art. no. 112127.
A. Gamlo, S. Sharaf, and R. Molla, "Efficient CNN–GRU Transfer Learning for Edge IoT Intrusion Detection," Electronics, vol. 15, no. 5, Feb. 2026.
H. Alamro et al., "An intelligent deep representation learning with enhanced feature selection approach for cyberattack detection in internet of things enabled cloud environment," Scientific Reports, vol. 15, no. 1, Sept. 2025, Art. no. 34013.
A. Bensaoud and J. Kalita, "Optimized detection of cyber-attacks on IoT networks via hybrid deep learning models," Ad Hoc Networks, vol. 170, Apr. 2025, Art. no. 103770.
F. Albalwy and M. Almohaimeed, "Advancing Artificial Intelligence of Things Security: Integrating Feature Selection and Deep Learning for Real-Time Intrusion Detection," Systems, vol. 13, no. 4, Mar. 2025, Art. no. 231.
Downloads
How to Cite
License
Copyright (c) 2026 Mohammed Assiri

This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain the copyright and grant the journal the right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) after its publication in ETASR with an acknowledgement of its initial publication in this journal.
