Detect unknown (zero-day) IoT attacks using unsupervised anomaly detection with deep autoencoders. Train only on normal traffic - no attack labels needed!