An Internet of Things (IoT) constitutes a network of diverse entities, referred to as ‘things’, interconnected via a wide area network such as the Internet. The extensive connectivity to the broader Internet introduces potential security vulnerabilities within an IoT network. Consequently, there exists a probability of malicious devices targeting the IoT network. As such, it becomes imperative to monitor the behavior of IoT devices to detect and isolate malicious nodes within the network. This paper introduces a traffic-based anomaly detection protocol aimed at enhancing the security of nodes within an IoT network. The protocol’s foundation lies in the traffic generated by devices within the IoT network. The efficacy of the proposed protocol is evaluated through simulation-based performance analysis. The observations indicate a reasonable success rate in the detection of anomalous nodes by the protocol.