Protocol-agnostic IoT Device Classification on Encrypted Traffic Using Link-Level Flows

GA Morales, A Bienek-Parrish, P Jenkins… - Proceedings of Cyber …, 2023 - dl.acm.org
GA Morales, A Bienek-Parrish, P Jenkins, R Slavin
Proceedings of Cyber-Physical Systems and Internet of Things Week 2023, 2023dl.acm.org
Convenience is a strong driver for the evolution of technology. Such efforts have given rise
to the Internet-of-Things (IoT), defined as the network of everyday devices (ie,“things”)
ranging from light bulbs to smart speakers, connected to the Internet and each other. IoT
devices frequently transmit data wirelessly which can be passively collected by an
adversary. In this work we present a methodology with which to perform device classification
on encrypted traffic in a protocol-agnostic manner by applying network flow analysis to link …
Convenience is a strong driver for the evolution of technology. Such efforts have given rise to the Internet-of-Things (IoT), defined as the network of everyday devices (i.e., “things”) ranging from light bulbs to smart speakers, connected to the Internet and each other. IoT devices frequently transmit data wirelessly which can be passively collected by an adversary. In this work we present a methodology with which to perform device classification on encrypted traffic in a protocol-agnostic manner by applying network flow analysis to link-level data. Our evaluation demonstrates successful device classification for 15 device categories with an overall weighted F1-Score of 95% on a dataset consisting of Wi-Fi, Bluetooth, and Zigbee traffic. Furthermore, we explore model transferability between encrypted and decrypted datasets on these three networking protocols and present our flow generation tool, ProtoFlow.
ACM Digital Library
以上显示的是最相近的搜索结果。 查看全部搜索结果