
The ubiquitous data streaming through the Internet of Things (IoT) creates security risks. Intrusion detection systems (IDS) based on machine learning can support user security. Generative Artificial Intelligence (GenAI) demonstrates strong capabilities in generating synthetic data based on realistic distributions and learning complex patterns from high-dimensional data. By harnessing the capabilities of generative AI, it is feasible to augment intrusion detection models, allowing for more robust and adaptive security solutions in IoT environments. This paper introduces a systematic literature review of recent GenAI applications in IoT IDS and analyzes the architectures and techniques in the models. We classify the common usages such as data augmentation and class balancing, data reconstruction, and adversarial attack generation. We outline the commonly used datasets and evaluation metrics and compare the performances of each model under these conditions. The study identifies current challenges and emerging research trends in various technologies for applying GenAI in IoT IDS.
Generative AI (GenAI), Generative Adversarial Network (GAN), Systematic Literature Review (SLR), systematic literature review (SLR), intrusion detection system (IDS), Telecommunication, TK5101-6720, Intrusion Detection System (IDS), generative adversarial network (GAN), Transportation and communications, Internet of Things (IoT), HE1-9990
Generative AI (GenAI), Generative Adversarial Network (GAN), Systematic Literature Review (SLR), systematic literature review (SLR), intrusion detection system (IDS), Telecommunication, TK5101-6720, Intrusion Detection System (IDS), generative adversarial network (GAN), Transportation and communications, Internet of Things (IoT), HE1-9990
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 0 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
