Skip to content

Securing Time Integrity in Energy IoT Against Clock Drift and Y2K38 Failures

Jan 2026 · IEEE Internet of Things Journal · 1 citation · 67 references
Computer Science

TL;DR

STGAT (Spatio-Temporal Graph Attention Network), a clock-dynamics-aware anomaly detection solution that jointly models temporal distortion and inter-device consistency in energy IoT systems, is introduced.

Abstract

Time integrity across distributed Internet of Things (IoT) devices is fundamental to reliable sensing, control, and security in energy cyber-physical systems. However, operational energy IoT systems remain vulnerable to clock-drift escalation, time-synchronization manipulation, and catastrophic timestamp discontinuities, e.g., the Year 2038 (Y2K38) Unix epoch overflow. These failures violate timestamp monotonicity, distort temporal ordering, and introduce structured inconsistencies in system observations. Conventional anomaly detection models, which typically assume reliable and uniformly ordered timestamps, are therefore ill-equipped to capture timing-layer failures. This paper introduces STGAT (Spatio-Temporal Graph Attention Network), a clock-dynamics-aware anomaly detection solution that jointly models temporal distortion and inter-device consistency in energy IoT systems. STGAT integrates drift-aware temporal embeddings and temporal self-attention to capture non-uniform and corrupted time evolution within individual device streams, while graph attention models the spatial propagation of timing inconsistencies across interconnected nodes. A Jacobian-regularized latent representation further promotes geometric separation between nominal clock evolution and anomalous temporal deformation caused by drift escalation, synchronization offsets, jitter accumulation, and epoch-overflow events. Experimental evaluation on energy IoT telemetry augmented with controlled timing-layer perturbations shows that STGAT achieves 95.7% accuracy, 94.0% precision, 92.0% recall, 93.0% F1-score, and 0.97 AUC under the primary test setting. STGAT also reduces detection delay to 2.3 time steps, corresponding to a 26% improvement over the closest baseline, while maintaining stable performance under overflow-induced discontinuities, stealthy drift escalation, and temporally induced physical inconsistencies.

Read PDF

Similar papers

Preprint Oct 2026

Hierarchical Security Monitoring for Edge-IoT: A Formal Methods Approach

Cyber resiliency in edge-IoT deployments is fundamentally an economic problem: detection must keep critical processes operating under attack, but defender resources (compute, bandwidth, operator attention) are bounded. Centralised cloud monitoring offers expressive cross-device detection at prohibitive bandwidth cost;...

Nikolaos Kekatos, Marinelio Chintri, Panagiotis Katsaros et al. · 6 citations
Conference Sep 2026

Adaptive Control of Merkle Epoch Commitment for Ensuring Telemetry Integrity in Industrial IoT Systems

Protecting telemetry in Industrial Internet of Things systems requires reliable data aggregation at gateway nodes. Merkle trees provide a compact mechanism for verifying the inclusion of events in a dataset. However, a static epoch size is poorly suited to variable workloads: large epochs increase external commitment l...

Ilya Belokobylsky, A. Kharitonov, A. Beresnev · 0 citations
Preprint Oct 2026

A Resilient Runtime-Verification Fabric for Security Monitoring of Critical Edge-IoT Infrastructure

Protecting critical infrastructure increasingly depends on continuously verifying large IoT fleets against formal security specifications at runtime. Yet the runtime-verification (RV) pipelines proposed for this task are typically single-host prototypes whose monitors read a shared log file, with no resilience to the f...

Nikolaos Kekatos, Marinelio Chintri, Panagiotis Katsaros et al. · 4 citations
Preprint Aug 2026

Digital Twin Degradation: Detecting Cyber Physical Attacks via Temporal Inconsistencies

Digital Twins (DTs) are increasingly used to monitor and analyze Cyber Physical Systems (CPS). However, in adversarial environments, the fidelity of a DT cannot be assumed. Communication delays, data manipulation, sensor degradation, or partial information loss may cause the DT state to diverge from the physical proces...

Konstantinos E. Kampourakis, Vasileios Gkioulos, S. Katsikas · 1 citation
Open access 2026

A Digital Twin and Lightweight Blockchain Logging Framework for Real-Time CPS Threat Detection

A lightweight Digital Twin-driven cybersecurity framework that integrates synchronized DT state modeling, hybrid anomaly detection, and tamper-evident audit logging for real-time CPS threat detection and provides tamper-evident forensic traceability without the latency overhead of consensus-driven distributed ledger sy...

Salam R. Al-E'mari, Yousef K. Sanjalawe, B. Allehyani et al. · 0 citations

Related blog posts

MIT News · Artificial Intelligence Sep 29, 2026

Who we become when we talk to machines

Professor Sherry Turkle’s new book, “Artificial Intimacy,” offers a withering critique of chatbots and the antisocial dynamics she believes they encourage.

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.