Predicting the Unseen Hybrid AI for IoT Threat Defense

Detect IoT attacks in progress, with fewer false alarms.

100% on-device detection. Your traffic never leaves your network.

~20%
Fewer False Alarms vs. Standalone LSTM
0.30%
False-Positive Rate (Hybrid Model)
99.95%
Accuracy (Hybrid Model)

Results from doctoral research on a labeled public test dataset. See details and limitations.

The Growing IoT Security Crisis

Traditional security tools can't keep pace with IoT expansion

Massive Scale

Connected IoT devices are projected to grow from about 10 billion in 2019 to about 30 billion by 2030.1

Invisible Threats

Attackers increasingly target edge and network devices that “typically lack standard endpoint detection and response (EDR) telemetry.”2

Delayed Detection

Median attacker dwell time rose to 14 days in 2025.2 On average, organizations took 241 days to identify and contain a breach.3

  1. Statista, IoT connected devices worldwide 2019–2030 (Vailshery, 2023). statista.com
  2. Mandiant, M-Trends 2026. cloud.google.com
  3. IBM, Cost of a Data Breach Report 2025 (via Infosecurity Magazine). infosecurity-magazine.com

Our Innovation

Hybrid AI-Powered IoT Threat Detection

Hybrid AI for IoT Threat Defense

LSTM (supervised) + Isolation Forest (unsupervised)

Attack Classes Tested

Evaluated on normal traffic plus DDoS, DoS TCP flood, port scanning, ICMP flood and other anomaly classes

Fewer False Alarms

In doctoral research, the hybrid model cut the false-positive rate from 0.38% (standalone LSTM) to 0.30%, about 20% fewer false alarms

Lightweight Architecture

Minimal footprint: runs on a single edge device, no cloud dependency.

From Research Testbed to Live Edge Pilot

ZNET AI Defender builds on Dr. Akere's doctoral research. Development continues independently at A4C Labs, the R&D lab of A4C Prod LLC.

Phase 1: Doctoral research (Azure testbed)

The hybrid LSTM + Isolation Forest model was built and evaluated using Microsoft Azure cloud compute. It was trained on a labeled public IoT traffic dataset (Stratosphere Laboratory, via Kaggle) and tested on a held-out subset. The test covered normal traffic, DDoS, DoS TCP flood, port scanning, ICMP flood, and other anomalies.

Phase 2: Live edge pilot (now)

The model now runs on an NVIDIA Jetson Orin Nano at A4C Labs and analyzes live traffic from a growing set of real consumer and smart-home IoT devices. This phase tests what the research couldn't: performance on unlabeled, real-world traffic.

IoT devices
→
Network tap / mirror port
→
Jetson Orin Nanocapture, features, hybrid model scoring
→
Local analyst dashboard
Where detection runs: On the device, inside your network.
What leaves the network: Nothing. In the current pilot, traffic capture, model scoring, alert storage and the analyst dashboard all run locally on an NVIDIA Jetson Orin Nano. No packets, alerts or telemetry are sent to the cloud.

Research results (doctoral test dataset)

Hybrid model: 99.95% accuracy; 0.30% false-positive rate, compared with 0.38% for a standalone LSTM, about 20% fewer false alarms.
Results are from the doctoral test dataset. Live-pilot metrics will be published once validated.

Performance figures describe research results on a specific labeled test dataset and are not a guarantee of results in any particular environment.

Model Stack

Python, Keras (LSTM) and scikit-learn (Isolation Forest); edge inference on NVIDIA Jetson Orin Nano

Multi-Protocol Inputs Roadmap

Planned support for Pcap, MQTT, Modbus, and custom IoT protocols

Explainable Scores Roadmap

Planned SHAP-based feature attribution so analysts can see why traffic was flagged

Built for Defense Industrial Base Manufacturers

Manufacturers that supply the defense supply chain run connected sensors, PLCs, and controllers next to systems that handle Controlled Unclassified Information. Most of those devices can’t run an endpoint agent, and CMMC Level 2 still expects you to monitor them. ZNET AI Defender watches their network behavior instead.

Defense Industrial Base

  • Agentless anomaly detection for IoT and OT devices on the plant floor
  • Supports CMMC Level 2 monitoring practices (system and communications protection, system and information integrity)
  • Detection runs on-site, so plant traffic stays inside your network

Also applicable

Healthcare IoT, energy and utilities, and smart infrastructure: any environment with devices that can’t run security agents.

Why ZNET AI Defender?

Built for environments where devices can’t run agents and traffic shouldn’t leave the site

Buyer concern Gap we address ZNET AI Defender approach
Hardware cost Network detection often means dedicated appliances or sensors Edge inference on a ~$250 NVIDIA Jetson Orin Nano
Model transparency Hard-to-inspect “black box” scoring Inspectable LSTM + Isolation Forest models with published research results
Data locality Traffic or telemetry sent off-site for analysis On-site detection; in the current pilot, traffic stays local
Cost to adopt Enterprise pricing out of reach for smaller manufacturers Low-cost edge hardware, sized for small and mid-size sites

Leadership Team

Expertise in cybersecurity, AI/ML, and research

Dr. Yemi Akere

Founder, Developer, CISO & CEO

Cybersecurity engineer and vCISO with 20+ years in risk and compliance. U.S. Navy veteran. University instructor in intrusion detection and forensics, cryptography, and network security. CISSP, CISA, PCI-QSA, CDPSE, HITRUST CCSFP, CySA+. D.Eng in Cybersecurity Analytics (GWU).

See ZNET AI Defender in Action

Request a demo or contact us to learn how ZNET AI Defender detects anomalous IoT and OT traffic

Get In Touch

Email

info@znet.ai

Investment Opportunities

Seeking $250K in pre-seed funding to ship a commercial MVP and run 3 design-partner pilots.

The investment is in ZNET AI Defender, a product of A4C Prod LLC, which holds its intellectual property.

Investment Inquiry: invest@znet.ai