Optimizing data privacy and security measures for critical infrastructures via IoT based ADP2S technique

Abstract

The sensitive nature of the data processed by the critical infrastructures of a shared platform like the internet of things (IoT) makes it vulnerable to a wide range of security risks. These infrastructures must have robust security measures to protect the privacy of the user data transmitted to the processing systems that utilize them. However, data loss and complexities are significant issues when handling enormous data in IoT applications. This paper uses a reptile search optimization algorithm to offer attuned data protection with privacy scheme (ADP2S). This study follows the reptiles’ hunting behaviours to find a vulnerability in our IoT service’s security. The system activates the reptile swarm after successfully gaining access to explode ice. An attack of protection and authentication measures explodes at the breach location. The number of swarm densities and the extent to which they explore a new area are both functions of the severity of the breach. Service response and related loss prevention time verify fitness according to the service-level fitness value. The user and the service provider contribute to the authentication, which is carried out via elliptic curve cryptography and two-factor authentication. The reptile’s exploration and exploitation stages are merged by sharing a similar search location across the initialized candidates. The proposed scheme leverages breach detection and protection recommendations by 11.37% and 8.04%, respectively. It reduces the data loss, estimation time, and complexity by 6.58%, 10.9%, and 11.21%, respectively.

Introduction

Data protection is an important task to perform in every application and system. Data protection secures the data presented in the database. The Internet of Things (IoT) is used for data protection, enhancing the systems’ efficiency and feasibility. IoT is mainly used here to improve communication and interaction processes¹. IoT-based critical infrastructure is widely used in many applications. Specific data analyses and techniques are used for the data protection process. The significant elements of critical infrastructure are human, cyber, and physical². Data protection ensures the safety and security of information stored in the database. IoT-based critical infrastructure provides critical information required to perform a particular task in an application³. Fundamental values and variables are detected from the database, which offers feasible data for further processes in critical infrastructure systems. The cyber security system is used to protect data from third-party members. Cyber security analysis generates important aspects and effects of the database that produce optimal data for government and public projects⁴.

Privacy-preserving policies and schemes are primarily used in various applications. The main goal of the privacy-preserving scheme is to ensure the safety and security of users’ data from unknown third-party members⁵. Privacy preservation in critical infrastructure is a crucial task. Various models and methods ensure the user’s privacy from attackers. A bi-level optimization model is used in critical infrastructure⁶. The actual aim of the optimization model is to detect the security issues that occur during specific tasks. Bi-level optimization model maximizes accuracy in the problem-detection process. Bi-level optimization model improves users’ privacy and security range in critical infrastructure⁷. Cryptographic encryption techniques are also used in critical infrastructure. A privacy-preserving strategy is used in encryption that enhances the necessary infrastructure security level⁸. Important fundamental values and features are secured in the database, reducing overall data loss in critical infrastructure. A wireless sensor network (WSN) is used for security protection in essential infrastructure systems⁹. WSN monitors the information using wireless sensors that improve reliability and ensure the safety of users’ privacy from attackers. WSN increases users’ personal information’s safety and security levels¹⁰.

Optimization methods and techniques are used for critical infrastructure security systems. The main aim of the optimization method is to improve the robustness and security range in critical infrastructure¹¹. A novel heuristic simulation optimization method is most widely used for critical infrastructure security systems. The optimization method identifies the datasets required to perform a particular task in an application. The optimization method reduces the computation cost and time consumption ratio, which enhances the user’s data from the attackers¹². The optimization method improves the overall quality of service (QoS) range in critical infrastructure and reduces the complexity level in computation processes. The genetic algorithm-based optimization method is also used for essential infrastructure¹³. The genetic algorithm identifies the key values presented in the user’s details. The genetic algorithm ensures the safety of fundamental values, improving critical infrastructure’s performance and feasibility ratio. A mathematical optimization model is also implemented for critical infrastructure security. The mathematical optimization model detects the features and patterns of security management systems^14,15. The key contribution of the research article is given as follows:

• Introduction of a novel ADP2S scheme utilizing reptile search optimization for enhanced data protection in critical infrastructures.

• Implementing advanced security measures such as elliptic curve cryptography and two-factor authentication strengthens the authentication process.

• Development of a comprehensive system to detect and respond to security breaches, thereby preventing data loss in IoT applications.

The organization subsection of the manuscript is arranged in the following order: “Related works” section is an introduction, related works, followed by the objective of the study; “The proposed scheme” section discusses the proposed ADP2S scheme; “The proposed scheme” section discusses the sequential resource allocation; “Results and implications” section is results and discussion includes the performance comparison using various metrics, “Compute new privacy measure such that” section concludes the research summary.

Related works

Hao et al.¹⁶ proposed a distributed anomaly detection-based resource allocation for industrial cyber-physical systems (ICPS). The traffic and anomalies are detected using a distributed detection method that provides feasible data for the allocation process. Optimization problems are solved based on specific functions and conditions. The detected distributed anomaly reduces the error ratio in the resource allocation process. The proposed method maximizes the accuracy in resource allocation, which enhances the performance and efficiency range of ICPS.

Chinnasamy et al.¹⁷ proposed the Blockchain 6G-Based Wireless Network Security Management with Optimization Using Machine Learning Techniques. This study implements a blockchain-based user datagram transit protocol incorporating reinforcement projection regression to manage the security of 6G wireless sensor networks. After that, the author used artificial democratic cuckoo glowworm remora optimization to finish optimizing the network. Several network characteristics, including energy efficiency, packet delivery ratio, accuracy, end-to-end latency, and throughput, have generated the simulation results. It can determine which node and route are best for data transmission to reduce network traffic. The suggested method achieved a throughput of 97%, energy efficiency of 95%, accuracy of 96%, end-to-end latency of 50%, and packet delivery ratio of 94%.

Oliva et al.¹⁸ introduced a multi-criteria model for security assessment in large infrastructure construction sites. The actual goal of the presented model is to select feasible construction for the sites. Specific criteria are used in the multi-criteria model, which provides relevant data for site selection and construction processes. The risks, attacks, and challenges are also detected, which reduces the overall damage range in large infrastructure sites. Experimental results show that the introduced model enhances the performance and accuracy of critical infrastructure systems.

Dong et al.¹⁹ developed an integrated infrastructure plan analysis for a resilience scorecard. Infrastructure vulnerability and risks are identified by analysis that provides feasible data for further processes. The proposed study mainly addresses road infrastructure vulnerabilities to access critical facilities. An integrated infrastructure analysis process reduces the identified gaps and latency. The proposed analysis method improves resilience and infrastructure’s overall efficiency and reliability.

Silva et al.²⁰ presented a new Privacy Risk Assessment (PRA) and Privacy-Preserving Monitoring(PPM). Natural language processing tools are used here to address an application’s risks and privacy issues. Data transaction-based threats and attacks occur during the transaction and further processes. Compared with other methods, the proposed method achieves high accuracy in privacy-preserving policies, increasing the security of the systems.

Wang et al.²¹ introduced a deep learning (DL) based resilience analysis framework for critical infrastructure systems. DL is mainly used here to identify the attributes and variables with vulnerabilities in infrastructure systems. Failure propagation is also used here to detect the problems presented in the computation and identification processes. DL technique improves the accuracy of strategies, enhancing the systems’ performance and effectiveness range. The introduced framework ensures the security and safety levels in critical infrastructure systems.

Rios et al.²² designed a security level agreement (SLA) for Internet of Things (IoT) platforms and applications. The main aim of the proposed method is to increase users’ security and privacy ratio in IoT platforms. The proposed method is also used in cloud-based IoT platforms. The exact relationship among components and variables is detected by SLA, which provides feasible data for security management systems. Experimental results show that the proposed SLA maximizes safety and improves the efficiency and significance range of IoT networks. Feizollahibarough et al.²³ developed a security-aware virtual machine for decision-making processes. The virtual machine is mainly used here to address the resources required to make a particular decision in an application. Security-aware frameworks identify the cumulative vulnerability ratio of the physical machine. The recognized framework provides optimal information for decision-making processes. The introduced frameworks achieve high accuracy in decision-making, improving the systems’ feasibility and robustness.

Bing et al.²⁴ presented a meta-learning framework based on a memory-augmented neural network (M-ANN) for critical infrastructure systems. M-ANN detects the valuable data and variables from the database that provide necessary information for further processes. M-ANN also improves the accuracy ratio in resource allocation and scheduling processes. The proposed framework enhances critical infrastructure systems’ performance and efficiency range compared to other frameworks.

Authors in²⁵ recommended the Intelligent Breach Detection System into 6G Enabled Smart Grid-Based Cyber-Physical Systems (SGCPS). The review covers various topics, such as intrusion detection systems enabled by artificial intelligence, methods for detecting False Data Injection (FDI) attacks, intrusion detection systems based on anomalies, and adaptive robust state estimators. It concludes with introducing a new intrusion detection model called the AI-IBDS, which uses the Grey Wolf Algorithm and Artificial Neural Networks (GWAANN) to achieve optimized detection of network intrusions in energy systems. Extensive analysis and comparison of performance metrics show that the proposed GWAANN method outperforms traditional classification methods like SVM and KNN in detecting critical events and improving cybersecurity measures. This highlights the potential of AI-driven intrusion detection technologies to strengthen network security and resilience in SGCPS environments, leading to safer and more efficient energy distribution networks in the digital age.

Brignoli et al.²⁶ proposed a distributed security framework for ICT infrastructures. The proposed framework predicts the network threats that are presented in an infrastructure. The distributed framework provides feasible solutions to the threats that reduce the latency in performing specific tasks. Cyber security indicators are also used here to detect problems and threats from an infrastructure design. The proposed framework maximizes the safety and security level in ICT infrastructures.

Bringhenti et al.²⁷ designed a novel methodology for the software-defined network (SDN) aware Internet of Things (IoT) networks. Maximum satisfiability modulo theories are used here to provide adequate data for allocation and scheduling processes. The proposed method detects the exact attacks that occurred in SDN systems and offers the optimal solution to solve the attacks. The proposed method enhances IoT networks’ performance and feasibility ratio compared with other methods.

Miloslavskaya et al.²⁸ developed a security zone infrastructure for network security intelligence centres (NSIC). The main aim of the proposed framework is to detect the advanced threats presented in NSIC. Specific functions and schemes are used here to identify the exact cause of threats in NSIC. The proposed framework provides fewer attack services to users, which maximizes the efficiency of NSIC. The introduced framework ensures the safety and security of data presented in NSIC.

In their study, Javanmardi et al.²⁹ tackle the emerging difficulties in Software-Defined Networking (SDN)-based Internet of Things (IoT)-Fog networks by introducing a new method called Secure Workflow Scheduling, abbreviated as S-FoS. The paper addresses the issue of enhancing performance in these networks, with a particular focus on the importance of incorporating security measures into workflow scheduling. The main goal is to develop a robust scheduling method to improve the overall effectiveness of SDN-based IoT-Fog networks. The authors utilize pioneering techniques to accomplish this objective by incorporating security considerations into the workflow scheduling process. Their research demonstrates that the S-FoS technique effectively enhances performance while maintaining a solid security foundation. Nevertheless, the literature review recognizes specific constraints, providing insight into areas that require additional investigation and improvement to enhance the practicality and extent of the suggested approach.

Chinnasamy et al.³⁰ suggested the Ciphertext-Policy Attribute-Based Encryption (CP-ABE) for Cloud Storage. There is a risk that user and data privacy might be compromised due to the access policy being delivered as plaintext in the current CP-ABE system instead of an encrypted version. This issue is addressed by the author’s novel method, which employs a signature verification approach to prevent insider assaults and a hashing algorithm to conceal the access policy. From a computational and expressive policy perspective, the suggested system is contrasted with current CP-ABE methods. The author may check how well any possible IoT access control system works. The proposed study further analyzes security against attacks with indistinguishable adaptive selected ciphertext.

Widel et al.³¹ designed a meta-attack language framework and attack graph-based countermeasure selection. The main aim of the proposed framework is to ensure the safety and security of critical infrastructure. An attack graph is used here to predict the attacks presented in infrastructure. The attack language framework detects the optimal set of countermeasures. The proposed frameworks reduce computation time and computational cost, improving the systems’ flexibility and scalability.

Dedousis et al.³² introduced a security-aware framework for industrial engineering processes. The main aim of the proposed framework is to identify crucial flows and components and to classify the types of physical systems. The proposed framework is widely used for designing processes that reduce both time and energy consumption range in the computation process. The introduced frameworks increase industrial engineering systems’ overall security and feasibility levels.

Table 1 gives a comparative summary of the existing related works.

Table 1.

Comparison summary of related works.

Ref. No	Security measures	Threat response	Data protection	Breach detection efficiency	Limitations
16	ICPS	Incident handling	Data encryption	Moderate	As the infrastructure expands, coordinating the distributed detection of anomalies across zones may become difficult
17	Attack graph-based countermeasure selection and access control policies	Manual incident response	Limited data access	Inefficient	A limitation of the prototype is the assumption of a static attack graph
18	Multi-criteria model	Real-time monitoring	Enhanced data privacy	Efficient	The methodology targets a single type of attacker and might fail to identify the variety of threats and adversaries that might strike construction sites
19	Integrated infrastructure plan analysis for resilience scorecard	Manual incident response	Restricted data access	Moderate	The absence of vital access to facilities fails to clarify community vulnerability
20	Privacy-preserving monitoring with Password-based security	No real-time monitoring	Basic data encryption	Inefficient	Scalability to manage significant data volumes or rising demand may be an issue
21	DL based authentication	Automated threat analysis	Controlled data sharing	High	Obtaining complete and accurate network topology, failure, and operating data may be difficult
22	SLA-IoT	Dynamic threat response	Immutable data records	Effective	SLA composition and management may get more difficult and resource-intensive as the application or infrastructure grows
23	AI-driven security	Predictive threat detection	Adaptive data protection	Proactive	Security assessments are subjective, and vulnerability impacts are unpredictable, affecting risk estimations
24	M-ANN for Multi-factor authentication	Real-time incident response	Granular data access	Robust	Organizations with limited resources or infrastructures may struggle to implement and sustain such a system
25	Zero trust architecture for industrial engineering processes	Continuous monitoring	Secure data transmission	Comprehensive	Using previous evaluations and industry standards to assess risks and predict failure rates may limit the industrial engineering method-building approach
26	Behavioural biometrics-distributed security framework	Anomaly detection	Personalized data security	Enhanced	Despite cybersecurity indicator definition and measurement, gaps in coverage may leave infrastructure exposed to attack
27	SDN-aware IoT networks	Collaborative threat analysis	Privacy-preserving data sharing	Efficient	The distributed measuring approach for determining cybersecurity vulnerability may struggle to keep up with quickly emerging cyber threats
28	NSIC	Fewer attack services	Enhance privacy controls	Efficient	The architecture may enable visibility into intranet regions and facilitate IT and IS team cooperation, but it may still have blind spots or risks
29	SDN-IoT fog networks	Limited threat detection	Standard data protection	Moderate	defends from DDoS and scanning of ports attacks, but it may open IoT-Fog networks to other security concerns

Under the adaptive hunting behaviour, multi-modal threat detection, and low computational overhead, the Reptile Swarm Optimization (RSO) algorithm outshines other swarm-based and AI-driven optimization techniques like Particle Swarm Optimization (PSO), Genetic Algorithm (GA), or Deep Learning (DL) when it comes to optimizing for IoT security. With its exploration–exploitation balance, RSO can monitor and eradicate changing cyber risks in real time, unlike PSO’s premature convergence problem in dynamic IoT contexts. RSO is the way for time-sensitive security applications like intrusion detection and anomaly prediction in IoT networks since it uses reptile-inspired quick decision-making, unlike GA, which depends on mutation and crossover processes, which may cause delays. To add insult to injury, despite their outstanding accuracy, resource-constrained IoT nodes cannot handle the computational rigour and massive labelled datasets needed by Deep Learning-based security models. In contrast, RSO improves intrusion response strategies, optimizes cryptographic key management, and reacts to real-time network variations using few computing resources. Security for critical infrastructures powered by the Internet of Things (IoT) may be improved using RSO’s scalable, efficient, and resilient multi-agent intelligence, decentralized decision-making, and adaptive swarm coordination solutions.

The proposed scheme

The design goal of ADP2S using data protection and security measures in critical infrastructure is improved based on the user requests and responses from the IoT environment. Users’ input is observed through AI and IoT requests and responses.

For IoT applications, the primary aim of the suggested framework is to reinforce data protection and security protocols in critical infrastructure. Reptile search and AI-assisted devices optimize real-time intrusion and vulnerability detection. Distributed user information secured through high security ensures secure data management in IoT environments and better data control to protect privacy. The proposed approach includes two-factor authentication, demand from consumers analysis, sequential resource allocation, and service-level fitness estimation. The collaboration of these elements guarantees the protection and confidentiality of user information on the IoT platform. The strategy authenticates users, measures service-level fitness, and efficiently allocates resources using mathematical methods and optimization algorithms. These algorithms efficiently reduce breaches and vulnerabilities. Elliptic curve cryptography and two-factor authentication are used for data security and privacy. These controls prevent unauthorized involvement with the system and protect sensitive data.

The AI-assisted devices are used to process systems and applications in real-time. Reptile search optimization is aided in identifying breaches in critical infrastructure with appropriate request processing, which relies on distributed user information with high-level security. Data protection in critical infrastructure provides more control for the individual’s information and monitors who can access it. The user-distributed information in IoT is converted into a request to ensure privacy. In this request processing, the reptile search optimization algorithm efficiently addresses the breach and theft in that environment. The input user requests are processed to exchange services between the IoT platform and the available resources for sensitive data handling. In this proposed scheme, the addressing of adversaries or breaches in services is considered to augment the exploration and fitness of the service connection.

Security model and definition analysis

The proposed scheme considers many adversaries and threats, such as unauthorized access, intrusions of data security, and privacy violations. It presupposes malicious actors may exploit system vulnerabilities to obtain unauthorized access to confidential data. Confidentiality, availability, and integrity of user data are the principal security objectives of the proposed scheme. By employing robust authentication techniques, methods of encryption, and access control policies, it intends to accomplish these objectives. The proposed scheme is portrayed in Fig. 1.

Fig. 1.

Proposed scheme.

The user requesting services are processed using ADP2S to control high-security risks due to handling information, whereas the position and location of the breach in resources are identified. The sophisticated IoT is used to handle user requests and responses and process multiple services, which serves as different types of moments for the position or location of the breach being identified in critical infrastructure, which is unavailable.

The requests and responses from the IoT platform are analyzed to provide services and identify the breach in a user connecting IoT service due to handling highly secured information. The objective of this attuned data protection with a privacy scheme used for reptile search optimization is to mitigate the breach position and ensure the sensitive information in the IoT platform. The scheme is designed to increase data protection and privacy measures in AI-based applications through swarm initialization. The processing system in this article is a combination of software and hardware components that can grasp and analyze user requests with high security to ensure privacy on that platform. The request is observed from users through AI-assisted devices or sensors in critical infrastructure and reduces adversaries and vulnerabilities under controlled processing time. Therefore, balancing requests and responses for processing appropriate services in the IoT platform for different moments, like reptile behaviour, is analyzed. Critical infrastructures reliant on the Internet of Things (IoT) are better protected from cyberattacks, according to the security analysis results of the proposed ADP2S. To detect and eliminate threats such as data breaches, denial-of-service (DoS) assaults, and unauthorized access in real time, ADP2S uses swarm intelligence inspired by reptiles. The explode ice mechanism is implemented to counterattack and strengthen the system’s resistance automatically. Further, the approach ensures that data is secret and protected from malicious manipulations by prioritizing privacy preservation via encryption and safe authentication procedures. By constantly adjusting to new security threats, ADP2S improves network availability and integrity and stops interruptions in their tracks. One dependable solution for smart grids, healthcare IoT, industrial control systems, and intelligent transportation networks is ADP2S, which greatly improves the security posture of IoT-driven infrastructures through adaptive defence mechanisms, proactive monitoring, and automated response strategies. The first user requests input is observed through wireless sensors or devices and is expressed as

1

where,

2

3

where the variables and used to represent sensitive data processing for users based on requests and responses . The processing systems analyze services at intervals in the IoT platform. If the variables and denotes service connections and resource allocation for storing and collecting user information. Based on the instance, the second user request is processed with , and swarm density, breach position, and location exploration are identified through reptile swarm optimization (RSO). The third objective is to minimize the adversaries and vulnerabilities in processing services with the condition . Where, illustrates a set of users in an IoT platform, then the number of service connections between resources and the IoT environment is addressed for distributing the user information to those resources at processing time . The infrastructure analysis based on whereas the swarm initialization is . From the overall service connection for processing and distributing the information in IoT using the constraints and is the admittable service for addressing breaches/adversaries. The initialization process for is presented in Fig. 2.

Fig. 2.

Initialization of .

The the set is disintegrated through for exploration. In the first population initialization, is generated considering unique reptile swarms. However, the initialized swarm is reused based on status. If the status is idle, then is allocated else is pursued through repeated iterations. A change observed in the service fitness disturbs this allocation wherein is modified with new swarms (Fig. 2). Resource allocation in the IoT platform for service connection and infrastructure analysis is optimal in identifying the breach intensity and location using service-level fitness computations in the upcoming connections. In this sequence, the reptile swarm optimization is initialized in post-service access, which is essential for the user connecting IoT service to identify the breach and theft in that common platform for processing additional services. In infrastructure analysis, the swarm density changes based on the identified breach intensity in IoT services, and the location exploration is performed to ensure security is considered for maximum user request processing with high-level security. Further, the hunting patterns of the reptiles are used to identify the breach/adversaries at a similar time when information is distributed to the available resources. The service-level fitness computation uses the public service response and associated processing time. In particular, the service connection of available user information for controlling breaches and theft is the improving factor in this infrastructure analysis. For instance, location exploration is the prevailing sequence for service connection and resource allocation. The process of services in an IoT platform with associated user requests is analyzed for breach occurrence, which is essential in this proposed scheme.

Sequential resource allocation

In this sequential resource allocation for processing systems in the IoT platform, the user data distribution for all the end-users accessing the particular application based on swarm flood is the addressing breach occurrence. Instead, the pursuing user requests are analyzed with high security. Therefore, the probability of resource allocation for available service connection processed continuously is given as

4

where,

5

Equations (4) and (5) compute the sequential service connection between the users and the IoT platform with an idle probability of identifying the breach. Hence, no more data distribution occurs in those resources, and then infrastructure analysis is performed using the above Eq. (5). Now, the resource allocation for further location analysis is expressed as

6

In Eq. (6), the resource allocation for initializing the reptile swarm is analyzed for user privacy, and it is valid for and ensuring security in critical infrastructure. The processing systems in this crucial infrastructure provide service connection between the end-users in that IoT platform for mitigating breaches and adversaries using the condition and is computed. The allocation using the initial population of is presented in Fig. 3. The allocation using is performed based on achieved from . This allocation is performed in space as generation. Throughout the response process, the allocated is analyzed . In this , the is alternatively computed.

Fig. 3.

Allocation using .

This computation is required for fitness validation such that generates is required for new initialization (Fig. 3). The resource allocation for connecting services is descriptive using RSA. Therefore, the current user request conditions in and , the occurred breach or vulnerabilities identified using fitness estimation is less than enough to satisfy Eq. (1). Similarly, the location exploration output prolongs service access across the IoT platform, hence, the associated time output in service disconnections and failures.

Service-level fitness estimation

This computation is performed to identify breaches for position and location. The service disconnection indicates a breach occurrence in that platform. Therefore, the user data distribution to the processing systems using this infrastructure is analyzed and monitored to identify breaches when information exchange is time-invariant. Along with the idle time for service connection (service-level fitness) for user request, the service disconnection in critical infrastructure is the identifying breach in this proposed scheme. The probability of service-level fitness is computed as

7

8

9

10

where the variable represents service response for validating the fitness and its associated time of service connection at intervals. The reptile swarm is initialized to analyze the different types of moments in IoT for location exploration using service-level fitness size computed for all user requests to address breaches. Resource allocation for data protection and privacy measures in this infrastructure requires a high amount of associated time, thereby increasing the losses in IoT. Figure 4 presents the fitness estimation flow. The fitness estimation is performed using such that the computation is increased. Considering the it’s a maximum value (1),, the possible combination generates . The remaining is used as reallocating agents that generate new for . If , then is reinitiated from ; this is optimal for such that is achievable. Therefore, the iterations are recurrent for the validating across new (Refer to Fig. 4).

Fig. 4.

Fitness estimation flow.

The security measure for user privacy and data protection across the critical infrastructure is analyzed based on the constraint and for identifying losses, service disconnections, and associated time in that IoT platform. The swarm density variations are identifiable for breach detection using RSA to mitigate and authenticate the procedure through rational two-factor authentication. The following section represents the authentication processing for user privacy and data protection.

Two-factor authentication for data protection and user privacy

The secure information exchange and processing output in optimal service connection and resource allocation within this infrastructure using RSA is to mitigate the breach and adversaries in processing systems. From this instance, the preventive and confronting security for data protection and user privacy follows some security measures to avoid breaches and vulnerability in data processing. The authentication for the user and service provider relies on is the serving input for fitness evaluation to improve privacy measures. If the location exploration is identified, it indicates loss and breach in user information, and then new security measures are generated to ensure privacy. This authentication uses elliptic curve cryptography to administer the current processing systems based on sequential data analysis.

The Reptile Search Optimization method was developed to streamline the search process and increase the efficiency of finding breaches in critical infrastructure. To demonstrate the efficacy of this method in identifying potential security risks, mathematical demonstrations and simulations can be utilized to examine the robustness of this technique. The concept uses two-factor authentication and elliptic curve cryptography to secure sensitive data and user privacy. Elliptic curve cryptography is notable for its robustness against many cryptographic assaults, notably brute-force and key-compromising attacks. By utilizing this technique, the system can accomplish robust authentication, which makes it resistant to efforts to get access without authorization. To circumvent the authentication method, adversaries must simultaneously change many parameters, making it substantially more difficult to achieve their goal. The risk of successful assaults targeted at breaching user privacy or data protection measures is decreased when the system maintains a steady security posture to prevent such attacks.

In this authentication requires for enhancing data protection and user privacy in critical infrastructure between the successive service connections and fitness values, the following steps are to generate new privacy measures:

1. Let the variables and follow user request and response such that for all data protection is provided based on different expectations and exploration.

2. Validate

11

3. Estimate the authentication

12

4. The reptile exploration and exploitation are combined for the current hunting patterns using a common search location from the initialized candidates such that , it is repeated for further request and response processing.

5. Compute new privacy measure such that

13

User privacy ensures authentication for service connection, and resource allocation relies on user and service provider performance to reduce breaches. The current hunting pattern of the reptiles is used for candidate initialization in the upcoming resource allocation to improve user privacy and data protection. The reptile exploration and exploitation are jointly computed for breach detection and data protection recommendations at different intervals, preventing losses. This authentication for processing systems in critical infrastructure uses RSA to identify changes in swarm density, thereby reducing breaches and threats and improving privacy measures. Here, the user information process relies on associated time intervals and losses in service-level fitness to identify location exploration. The security implementation process is illustrated in Fig. 5. The is generated for and throughout the authentication process. Considering the and across , the authentication response is analyzed. If the condition is not satisfied, then a new and is verified. This verification is required to prevent authentication failures across multiple n∀m (Fig. 5). Therefore, the security measures and data protection are authenticated together with two-factor authentication of data protection recommendation for the user and service provider for secure information access. Hence, the privacy measures remain stable for all swarm initialization.

Fig. 5.

Security implementation process.

The consecutive service connections and disconnections in critical infrastructure rely on fitness level and breach detection validation to modify security measures for breach position and location in available resources. Based on the sequence, the continuous sensor data processing is performed in an IoT platform with high security, and then the breaches and thefts are identified through ADP2S with the condition and is used to halt the breach service connection and prevent losses. Data breaches, losses, and thefts in the processing system are identified, and security measures are provided to protect the user information with high-level security at different intervals on the IoT platform. The security measures in critical infrastructure for user privacy and data protection using two-factor authentication for the user and service providers in both request and response processing instances.

The optimization approach for data protection and user privacy is analyzed through a series of access in 10 intervals. The total access demanded is 160, and the split gives 16 / intervals. First, the initialization is performed with 16 agents to connect 11 resources. Creating and utilizing a custom dataset in this research occurs in an organization considered a Data collection method that involves defining critical parameters such as intervals, total access needs, and agent-resource relationships. The custom dataset is created. Randomness in dataset development simulates stochasticity in real life to reproduce access requests across time and capture agent-resource interactions. The dataset size involves the total demand for access as 160 with the segment of 16 demands per interval for 16 agents along with the connected 11 resources. Each interval in an organization’s customized dataset is rigorously documented to capture system status and agent-resource connections. Validation is necessary to ensure the custom dataset’s accuracy and reliability. The custom dataset underpins data protection and user privacy optimization. It lets researchers assess how well the suggested approach improves critical infrastructure security. To create a simulation or custom dataset using the optimization approach discussed, one must carefully plan and generate data with great attention to detail. The simulation defines critical parameters, such as intervals, total access needs, and agent-resource relationships. Subsequently, artificial data is produced to replicate access requests over specific periods and to capture the process of agents establishing connections with resources. Randomness can be introduced to simulate stochastic aspects seen in the real world. Each interval is meticulously documented, capturing the system’s status and the linkages between the agent and resources. Certain properties, such as time intervals, access demands, and pertinent factors, are established when creating a custom dataset. The dataset is thereafter created, guaranteeing authenticity by considering resource limitations and possible clashes. Validation, privacy concerns, documentation, and potential collaboration are crucial elements of an all-encompassing procedure.

The initialization is performed based on such that the iterations are repeated if . This is therefore identified for two different combinations (i.e.) and . From the two different combinations, the iterations are determined; the condition is verified. If the condition is true, then the new allocation from 1 to is performed using . It is to be noted that is re-utilized from the previous (Fig. 6). the search space (resource validation) is examined after the initialization process. This examination relies on resources available, augmenting combination for different iterations. In this process, if a common visits a common resource, then the probability (i.e.) is either incremental/ decremental. This analysis is presented in Fig. 7.

Fig. 6.

Initialization process.

Fig. 7.

and analyses.

The proposed scheme is vibrant depending on the iterations for stabilizing and requirement. Depending on the available , the is planned for the different intervals to be utilized. Considering the availability and condition satisfaction, the new allocation is performed. This new allocation is validated for different and conditions. The and is concurrent if is parallel. Therefore, if a joint agent is reassigned, then is retained. Contrarily, if no agent is reassigned, then is retained. Contrarily, if no agents are available, then fails (the downside in the above analysis), relating it to the decremental factor (Fig. 7). From this analysis, the level in both conditions is satisfied based on the previous . This analysis is presented in Fig. 8.

Fig. 8.

and analyses.

The analysis for over the varying and conditions are analyzed in Fig. 8. The increases the chance for improvement such that authentication provisioning is maximized. Depending on the available , the allocations are performed; the reduction requires a new swarm agent. If a joint swarm agent is replicated, then increases in due . This maximizes the for which iterations are mandatory. Across the new , the implications are random and therefore, unique exploration with new fitness is performed (Fig. 8). To minimize system compromise, breach detection should be prioritized. Identifying and limiting unauthorized access or cyber intrusions in real-time is important. Next, authentication is critical for limiting the possibility of illegal access to IoT networks by confirming that only authorized people and devices may connect. Once secured access is in place, encryption is crucial for keeping data private since it prevents access to sensitive information regardless of interceptions. Since IoT networks handle massive volumes of operational and personal data, ensuring privacy is a close second. This is because these networks must comply with legislation and maintain user confidence. Next, optimizing resource allocation is important to balance security enforcement with device constraints. This will minimize excessive computational overhead and preserve system efficiency. As a last point, service-level fitness may be achieved by ensuring security measures don’t slow down the system. This way, IoT networks can keep working perfectly while being well protected.

Threat model of ADP2S

Using a swarm intelligence technique modelled after reptiles, the Attuned Data Protection with Privacy Scheme (ADP2S) aims to detect and mitigate security vulnerabilities in critical infrastructures that rely on the Internet of Things (IoT). Illegitimate access, data breaches, adversarial assaults, and denial-of-service (DoS) threats are all factors that might be accounted for in the threat model. When abnormalities are detected, the system triggers a reptile swarm mechanism, which uses hunting techniques similar to reptiles to find and reveal security vulnerabilities. Explode ice is an automatic countermeasure that blocks attack attempts and eliminates threats in real-time. It is activated when a vulnerability is detected. The adaptive security, real-time monitoring, and quick reaction offered by ADP2S’s proactive defensive mechanism make it an impervious solution to safeguard critical data and preserve infrastructure integrity.

Results and implications

The metrics of breach detection, protection recommendation, data loss, estimation time, and complexity are used for validating the proposed ADP2S. The service access and search solutions are varied according to the methods ICPS¹⁸, PRA-PPM²⁰, M-ANN²⁴, SVMPS²³, and DMS²⁶ along the proposed scheme. Table 2 shows the simulation environment.

Table 2.

Simulation environment.

Parameter	Specification
Simulation Tool	MATLAB
Programming language	Python 3.9
Operating system	Windows 11
Processor	Intel Core i7 / AMD Ryzen 7
RAM	32 GB
Storage	SSD 1 TB HDD
Network protocols	MQTT, CoAP, 6LoWPAN, IPv6
Attack scenarios	Unauthorized Access, DoS, Data Breach
Defence mechanism	Reptile Swarm Intelligence, Explode Ice
Number of IoT nodes	500
Simulation time	1000 s

Breach detection

In Fig. 9, the data protection and user privacy in critical infrastructures for improving the breach detection with ADP2S using a reptile search optimization algorithm rely on the available resource allocation and service connection. High-level security is provided for the user information distributed to the processing systems in these infrastructures, and it is analyzed through swarm initialization. In the user connection, IoT services are processed for all the user requests. The fitness is estimated using service response with the breach intensity, which helps to identify the breach position and location aided by RSA.

Fig. 9.

Breach detection.

The observed input request is analyzed for all the users and service providers to identify breaches and adversaries in the service connections for position and location. The swarm density is computed to estimate the breach intensity using the available resources that can be recommended for data protection. The data loss and estimation time are validated for connected services using the condition and To satisfy successive service responses in this infrastructure, they prevent breach detection. Therefore, the data losses are identified in this article, preventing high service response due to handling sensitive information.

Protection recommendation

The breach detection and data loss are identified in critical infrastructures based on resource allocation. Service connection with high-level security, which is ensured for a real-time application to achieve high data protection recommendations. The location exploration output is estimated for the connected services and applications employed in the processing system for detecting the vulnerability and data theft in the resources, as illustrated in Fig. 10. This proposed scheme satisfies high service response by computing the estimation time and complexity for the instances. This manuscript combines the reptile exploration and exploitation decision using complexity in these infrastructures to identify the breach at different intervals and prevent data loss. The constraint output helps to achieve high data protection recommendations, whereas a breach in the available resources is processed for service connection until a breach occurs in that platform. Hence, the different resource allocations in the IoT platform are processed to improve data protection and user privacy using RSA to achieve high recommendations and high service response in this proposed scheme.

Fig. 10.

Protection recommendation.

Data loss

The processing system in the IoT platform application improves the performance of the connected services based on user requests and service response from the end-users and its associated time at any time interval is depicted in Fig. 11. The post-service access is administered using swarm initialization of the connected real-time applications in the IoT platform. The data loss is identified in the processing system by exchanging information with the user by connecting IoT services for location exploration.

Fig. 11.

Data loss.

In this proposed scheme, resource management relies on connected services to ensure data authentication and improve the stability of available resources. The service-level fitness is estimated for handling sensitive information and prevents estimation time and complexity. Hence, the data loss is less than the other factors in this proposed scheme. The data loss is identified in a different sequence based on the instance.

Estimation time

The breach/adversaries identification in this critical infrastructure with AI is to improve the estimation time and performance of the real-time application using reptile swarm optimization for the service connection to reduce estimation time. The user request is processed in the IoT platform, and the incremental losses and breaches are identified from different resources in the real-time application, as represented in Fig. 12. In this proposed scheme, the stability of the resources management and allocation for the connected service is analyzed using service-level fitness output is computed for breach detection. From the condition and The estimation time is computed for the service connection and resource management in the processing system to gain a precise service response that augments data protection recommendations. With continuous service connection using RSA, the estimated time for user privacy and data protection in the IoT platform is computed for real-time applications with optimal resource allocation. Based on the location exploration output, the varying swarm density is identified using Eqs. (6), (7), (8), (9), and (10) computations. From this connected service for the active application in the IoT platform, the estimation time is less compared to the other factors.

Fig. 12.

Estimation time.

Complexity

This proposed resource management and processing systems in the IoT platform are computed for real-time applications with data loss, and estimation time is calculated depending on security measures provided for the end-users. The swarm density and confronting security for the user information are computed to improve service response using two-factor authentication for user privacy and data protection. The computation of fitness using the proposed scheme is analyzed with user requests and sensitive information to prevent estimation time at the time of service connection in the IoT platform, which is identified using RSA. The time associated with the users and service providers in real-time applications is analyzed. The breach occurrence is determined based on the reptile exploration and exploitation phase’s estimation to improve complexity. Compared to the previous user request processing, the current user request improves the success ratio of service response along with breach detection, preventing data loss. In the proposed scheme for data protection and user privacy through RSA, the estimation time computed for the authentication provided to the available resources achieves less complexity, as represented in Fig. 13.

Fig. 13.

Complexity.

The reptile search optimization algorithm in the proposed strategy detects breaches better than earlier algorithms. The strategy detects breaches and vulnerabilities quickly using AI-assisted devices and processing systems, minimizing security mishaps compared to previous schemes. Two-factor authentication and elliptic curve cryptography improve privacy protection over earlier approaches. These security measures prevent data breaches and privacy violations by restricting sensitive data access to authorized individuals. The sequential resource allocation method in the suggested system maximizes resource use and avoids waste, improving efficiency over earlier algorithms. Critical infrastructure performs at its peak by dynamically distributing resources in response to user and system demands. A complete critical infrastructure protection method is proposed, including several security mechanisms and optimization techniques.

Unlike prior algorithms, which could concentrate on single security issues, the suggested technique addresses several threats and vulnerabilities, improving security. In comparison, existing algorithms may rely on static security measures or periodic audits, leading to delayed responses to security threats. The suggested strategy uses AI-assisted devices and real-time processing systems to respond dynamically to security threats and incidents, reducing breach detection and mitigation time. The above discussion is summarized in Tables 3 and 4.

Table 3.

Summary of service access.

Metrics	ICPS	PRA-PPM	M-ANN	SVMPS	DMS	ADP2S
Breach detection (%)	38.5	40.12	41.19	58.91	68.89	79.076
Protection recommendation (/Access)	36	46	45	61	113	141
Data loss	0.140	0.149	0.139	0.123	0.097	0.0539
Estimation time (ms)	95.12	89.89	94.03	74.85	52.69	25.567
Complexity (Mb)	321.84	289.4	343.13	255.17	189.51	85.999

Table 4.

Summary of search solution.

Metrics	ICPS	PRA-PPM	M-ANN	SVMPS	DMS	ADP2S
Breach detection (%)	39.5	41.72	41.24	55.11	67.67	78.982
Protection recommendation (/Access)	42	57	39	74	115	140
Data loss	0.136	0.145	0.138	0.116	0.093	0.0544
Estimation time (ms)	88.23	86.45	94.21	67.13	42.99	29.92
Complexity (Mb)	334.2	298.1	344.23	265.1	195.27	89.514

The proposed scheme leverages breach detection and protection recommendations by 11.37% and 8.04%, respectively. It reduces the data loss, estimation time, and complexity by 6.58%, 10.9%, and 11.21%, respectively.

The proposed scheme leverages breach detection and protection recommendations by 12.15% and 7.62%, respectively. It reduces the data loss, estimation time, and complexity by 6.13%, 9.35%, and 11.1%, respectively.

The proposed scheme shows an improvement in breach detection compared to other schemes, with an increase of 11.37% to 8.04%. The outcome indicates that the proposed scheme is more effective in detecting breaches in the system. It also demonstrates better performance in protection recommendations, with increased recommendations per access by 11.37% to 8.04%. The result shows that the proposed scheme offers more robust recommendations for protecting the system against potential threats. The proposed scheme reduces data loss by 6.58% to 10.9% compared to other schemes. This implies that the proposed scheme effectively mitigates data loss incidents, enhancing data integrity and security. It also reduces estimation time by 6.58% to 10.9%, indicating improved efficiency in processing requests. This suggests that the proposed scheme offers the fastest response times, enhancing user experience and system performance. The ADP2S reduces complexity by 11.21%, indicating a more streamlined and efficient implementation. The result implies that the proposed scheme offers a more straightforward, manageable solution, reducing resource overhead.

Comparable to Table 3, the recommended breach detection method outperforms others.

The proposed technique improves security breach detection. The suggested strategy works best with more access protection measures and offers actionable network safety suggestions, confirming its strength. The protection recommended system loses less data at 6.13% than other existing approaches, with 12.15%. This illustrates that the proposed technique consistently lowers data loss. Request processing efficiency is shown by the suggested scheme’s shorter estimating time of 9.35 ms. The proposed approach has faster response times than alternative solutions. Like Table 3, the recommended system is more straightforward, making it easier to manage and emphasizes the scheme’s resource efficiency and simplicity by 11.1%.

System failures, poor resource use, and reduced dependability are consequences of the Internet of Things (IoT) systems’ lack of robustness caused by their diverse designs, limited resources, unpredictable network circumstances, and cyber-attack vulnerability. Adaptive defect detection, intelligent resource allocation, and predictive reliability mechanisms are ways AI-assisted devices make the Internet of Things more resilient. One example is defect detection models powered by AI. These models use reinforcement learning methods and deep learning for anomaly detection to find and fix system issues instantly, reducing downtime. Dynamic scheduling and AI-powered federated learning are two examples of adaptive resource allocation approaches that optimize energy consumption, compute resources, and bandwidth in response to current network circumstances, avoiding congestion and decreasing delay. Internet of Things (IoT) devices can now self-heal, reroute data across networks, and adapt performance measurements to changing conditions thanks to AI’s predictive analytics and self-healing capabilities, increasing system dependability. Internet of Things (IoT) systems that incorporate machine learning models for predictive maintenance, artificial intelligence (AI)-driven edge intelligence, and decentralized decision-making are better able to withstand cyber threats, improve operational efficiency, and increase fault tolerance. This makes them more suitable for smart cities, healthcare, and industrial automation.

With the help of reptile-inspired swarm intelligence, the Attuned Data Protection with Privacy Scheme (ADP2S) aims to improve the safety of key infrastructures powered by the Internet of Things (IoT) by detecting and mitigating threats in real-time. When data privacy and protection from cyber threats are paramount, this technology finds widespread use in smart grids, healthcare IoT (e.g., remote patient monitoring), industrial IoT (IIoT) for manufacturing security, and intelligent transportation systems (ITS). Protecting smart grids against cyberattacks and illegal access is one of ADP2S’s primary functions. Protecting private patient information during transmission across the Internet of Medical Things (IoMT) networks is an important part of healthcare IT. In the same way, ADP2S protects IIoT settings’ industrial control systems from cyber invasions and tightens ITS networks’ security to prevent data breaches and illegal vehicle monitoring. Protecting various real-time applications from ever-changing cyber threats, ADP2S offers adaptive security, real-time monitoring, and automatic countermeasures.

Conclusion

This article proposes attuned data protection with a privacy scheme for IoT-aided critical infrastructures. The proposed scheme seeks data protection and user privacy to enhance security and provide better user services. The recommendations are carried out in this protection process using reptile swarm optimization. The swarm is first initialized toward the recommended services for identifying security breaches and data loss. The search and validation are performed considering the reptiles’ exploration patterns. The swarm is initialized based on the service response and allocation to improve authentication integrity. The response to the request is validated as fitness for swarm assignment/ reassignment, depending on the severity of the loss. After the privacy measure, the best-afford reptile is replicated to handle multiple movement patterns. End-to-end two-factor authentication is employed in administering the privacy measure, preventing service connection failures. The fitness estimation is re-instigated to avoid complexity in exploration phases. Therefore, the proposed scheme leverages breach detection and protection recommendations by 11.37% and 8.04%, respectively. It reduces the data loss, estimation time, and complexity by 6.58%, 10.9%, and 11.21%, respectively.

The future scope of the research includes assessing progressed neural network approaches to breach detection, combining blockchain technology into systems for protected data management and verification of transactions, establishing responsive safety protocols that continuously adapt to real-time threat evaluation, expanding research studies to include more critical industries like infrastructure to understand better security issues and possible remedies across domains, and real-world applicability.

Author contributions

1. Zhenyu Xu: Conceptualization, Methodology. 2. Jinming Wang: Data curation, Writing–original draft, 3. Shujuan Feng: Validation, Writing–review and editing. 4. Salwa Othmen: Writing–original draft, Writing–review and editing. 5. Chahira Lhioui: Writing–review and editing, Supervision. 6. Aymen Flah: Formal Analysis, Validation. 7. Zdenek Slanina: Data curation, Writing–review and editing.

Data availability

Data will be made available on request to the Corresponding Author.

Declarations

Competing interests

The authors declare no competing interests.