1. Automated IoT device identification based on full packet information using real-time network traffic
- Author
-
Narges Yousefnezhad, Avleen Malhi, Kary Främling, Department of Computer Science, Computer Science Adjunct Professors, Aalto-yliopisto, and Aalto University
- Subjects
IoT Security ,Computer science ,0211 other engineering and technologies ,Device identification ,Device profiling ,device identification ,02 engineering and technology ,Real-time traffic ,lcsh:Chemical technology ,Biochemistry ,Article ,Analytical Chemistry ,law.invention ,Robustness (computer science) ,law ,Internet Protocol ,Header ,Machine learning ,0202 electrical engineering, electronic engineering, information engineering ,lcsh:TP1-1185 ,Electrical and Electronic Engineering ,Instrumentation ,021110 strategic, defence & security studies ,business.industry ,Network packet ,Computer Sciences ,real-time traffic ,Volume (computing) ,020206 networking & telecommunications ,device profiling ,Atomic and Molecular Physics, and Optics ,Identification (information) ,Datavetenskap (datalogi) ,machine learning ,Feature (computer vision) ,Media access control ,business ,Computer network - Abstract
openaire: EC/H2020/688203/EU//bIoTope | openaire: EC/H2020/856602/EU//FINEST TWINS In an Internet of Things (IoT) environment, a large volume of potentially confidential data might be leaked from sensors installed everywhere. To ensure the authenticity of such sensitive data, it is important to initially verify the source of data and its identity. Practically, IoT device identification is the primary step toward a secure IoT system. An appropriate device identification approach can counteract malicious activities such as sending false data that trigger irreparable security issues in vital or emergency situations. Recent research indicates that primary identity metrics such as Internet Protocol (IP) or Media Access Control (MAC) addresses are insufficient due to their instability or easy accessibility. Thus, to identify an IoT device, analysis of the header information of packets by the sensors is of imperative consideration. This paper proposes a combination of sensor measurement and statistical feature sets in addition to a header feature set using a classification-based device identification framework. Various machine Learning algorithms have been adopted to identify different combinations of these feature sets to provide enhanced security in IoT devices. The proposed method has been evaluated through normal and under-attack circumstances by collecting real-time data from IoT devices connected in a lab setting to show the system robustness.
- Published
- 2021
- Full Text
- View/download PDF