IoT Behavioral Monitoring via Network Traffic Analysis

01/28/2020
by   Arunan Sivanathan, et al.
0

Smart homes, enterprises, and cities are increasingly being equipped with a plethora of Internet of Things (IoT), ranging from smart-lights to security cameras. While IoT networks have the potential to benefit our lives, they create privacy and security challenges not seen with traditional IT networks. Due to the lack of visibility, operators of such smart environments are not often aware of their IoT assets, let alone whether each IoT device is functioning properly safe from cyber-attacks. This thesis is the culmination of our efforts to develop techniques to profile the network behavioral pattern of IoTs, automate IoT classification, deduce their operating context, and detect anomalous behavior indicative of cyber-attacks. We begin this thesis by surveying IoT ecosystem, while reviewing current approaches to vulnerability assessments, intrusion detection, and behavioral monitoring. For our first contribution, we collect traffic traces and characterize the network behavior of IoT devices via attributes from traffic patterns. We develop a robust machine learning-based inference engine trained with these attributes and demonstrate real-time classification of 28 IoT devices with over 99 classification by reducing the cost of attribute extraction while also identifying IoT device states. Prototype implementation and evaluation demonstrate the ability of our supervised machine learning method to detect behavioral changes for five IoT devices. Our third and final contribution develops a modularized unsupervised inference engine that dynamically accommodates the addition of new IoT devices and/or updates to existing ones, without requiring system-wide retraining of the model. We demonstrate via experiments that our model can automatically detect attacks and firmware changes in ten IoT devices with over 94

READ FULL TEXT

page 1

page 28

research
09/04/2021

Network Traffic Characteristics of IoT Devices in Smart Homes

Understanding network traffic characteristics of IoT devices plays a cri...
research
02/04/2020

Machine Learning Methods for Monitoring of Quasi-Periodic Traffic in Massive IoT Networks

One of the central problems in massive Internet of Things (IoT) deployme...
research
02/07/2019

Verifying and Monitoring IoTs Network Behavior using MUD Profiles

IoT devices are increasingly being implicated in cyber-attacks, raising ...
research
04/12/2018

Clear as MUD: Generating, Validating and Applying IoT Behaviorial Profiles (Technical Report)

IoT devices are increasingly being implicated in cyber-attacks, driving ...
research
04/02/2020

Efficient Online Classification and Tracking on Resource-constrained IoT Devices

Timely processing has been increasingly required on smart IoT devices, w...
research
04/16/2018

Investigating Cybersecurity Issues In Active Traffic Management Systems

Active Traffic Management (ATM) systems have been introduced by transpor...
research
10/16/2020

Position paper: A systematic framework for categorising IoT device fingerprinting mechanisms

The popularity of the Internet of Things (IoT) devices makes it increasi...

Please sign up or login with your details

Forgot password? Click here to reset