ProfilIoT

Published 3 April 2017Open access

Yair Meidan, Michael Bohadana, Asaf Shabtai, Juan Guarnizo, Martín Ochoa, Nils Ole Tippenhauer

DOI10.1145/3019612.3019878

Citations399

TL;DR

This work trained a multi-stage meta classifier that can distinguish between traffic generated by IoT and non-IoT devices, and collected and labeled network traffic data from nine distinct IoT devices and PCs and smartphones.

Abstract

In this work we apply machine learning algorithms on network traffic data for accurate identification of IoT devices connected to a network. To train and evaluate the classifier, we collected and labeled network traffic data from nine distinct IoT devices, and PCs and smartphones. Using supervised learning, we trained a multi-stage meta classifier; in the first stage, the classifier can distinguish between traffic generated by IoT and non-IoT devices. In the second stage, each IoT device is associated a specific IoT device class. The overall IoT classification accuracy of our model is 99.281+.

Keywords

Computer Science

Ad Hoc NetworksInternet of things: Vision, applications and research challenges

3,556 Citations2012Daniele Miorandi, Sabrina Sicari +2 more

A survey of technologies, applications and research challenges for Internetof-Things is presented, in which digital and physical entities can be linked by means of appropriate information and communication technologies to enable a whole new class of applications and services.

View PDF

Journal of Bioresource ManagementBotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection

1,023 Citations2008Guofei Gu, Roberto Perdisci +2 more

This paper presents a general detection framework that is independent of botnet C&C protocol and structure, and requires no a priori knowledge of botnets (such as captured bot binaries and hence the botnet signatures, and C &C server names/addresses).

View PDF

Wireless device identification with radiometric signatures

819 Citations2008Vladimir Brik, Suman Banerjee +2 more

The design, implement, and evaluate a technique to identify the source network interface card (NIC) of an IEEE 802.11 frame through passive radio-frequency analysis, called PARADIS, which leverages minute imperfections of transmitter hardware that are acquired at manufacture and are present even in otherwise identical NICs.

Unknown malware detection using network traffic classification

136 Citations2015Dmitri Bekerman, Bracha Shapira +2 more

An end-to-end supervised based system for detecting malware by analyzing network traffic outperforms existing state-of-the-art rule-based systems, such as Snort and Suricata and shows that many unknown malware incidents could have been detected at least a month before their static rules were introduced to either the Snort or SuricATA systems.

International Journal of Computer ApplicationsObject Classification based Context Management for Identity Management in Internet of Things

29 Citations2013Parikshit N. Mahalle, Neeli R. Prasad +1 more

This paper presents the logical framework for object classification in context aware IoT, as richer contextual information creates an impact on the access control.

View PDF