[Submitted on 24 Jan 2026 (v1), last revised 24 Jul 2026 (this version, v2)]

View PDF HTML (experimental)

Abstract:As Industrial Internet of Things (IIoT) environments scale to tens of thousands of connected devices, centralized security architectures introduce latency bottlenecks that sophisticated attackers can exploit to compromise an entire manufacturing ecosystem. We present a Decentralized Multi-Agent Swarm (DMAS) architecture that deploys autonomous agents at each edge gateway, forming a distributed defense layer for IIoT networks. Rather than relying on static firewalls or cloud-forwarded telemetry, DMAS agents coordinate through a lightweight peer-to-peer protocol, detecting threats locally without cloud dependency. We describe a Consensus-based Threat Validation (CVT) protocol in which agents collectively vote on detected threats, enabling near-instant quarantine of compromised nodes. Experiments on a 2000-device hardware testbed show that DMAS achieves sub-millisecond response times (0.85 ms average), 97.3% detection accuracy under high load, and 87% accuracy on zeroday attacks, each exceeding both centralized and edge-computing baselines. Bandwidth consumption drops by 89% relative to cloud-based solutions.

Submission history

From: Samaresh Kumar Singh Mr. [view email]
[v1] Sat, 24 Jan 2026 04:25:36 UTC (193 KB)
[v2] Fri, 24 Jul 2026 14:01:35 UTC (199 KB)