<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01994156</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-24T12:50:25+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">IoT devices recognition through network traffic analysis</title>
            <author role="aut">
              <persName>
                <forename type="first">Mustafizur</forename>
                <forename type="middle">Rahman</forename>
                <surname>Shahid</surname>
              </persName>
              <email type="md5">982f1f4dcfc0b6ff3d575516d46a8a29</email>
              <email type="domain">telecom-sudparis.eu</email>
              <idno type="idhal" notation="numeric">1042070</idno>
              <idno type="halauthorid" notation="string">2260334-1042070</idno>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-442711"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Gregory</forename>
                <surname>Blanc</surname>
              </persName>
              <email type="md5">8bb9c8c6b1f1a95e5f373658e053ebcb</email>
              <email type="domain">telecom-sudparis.eu</email>
              <idno type="idhal" notation="string">blanc-gregory</idno>
              <idno type="idhal" notation="numeric">177186</idno>
              <idno type="halauthorid" notation="string">28999-177186</idno>
              <idno type="IDREF">https://www.idref.fr/235400564</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-8150-6617</idno>
              <idno type="GOOGLE SCHOLAR">9Tf1a1cAAAAJ</idno>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-442711"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Zonghua</forename>
                <surname>Zhang</surname>
              </persName>
              <email type="md5">f535fd92a3aa77364fe812bb0eeff6a8</email>
              <email type="domain">telecom-lille.fr</email>
              <idno type="idhal" notation="numeric">998849</idno>
              <idno type="halauthorid" notation="string">983752-998849</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-0379-7089</idno>
              <affiliation ref="#struct-442711"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Hervé</forename>
                <surname>Debar</surname>
              </persName>
              <email type="md5">0db2034ce3b1cb2f236b246418b2db62</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="string">herve-debar</idno>
              <idno type="idhal" notation="numeric">175424</idno>
              <idno type="halauthorid" notation="string">4309-175424</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-1344-4167</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=KSLoggcAAAAJ&amp;hl=fr</idno>
              <idno type="IDREF">https://www.idref.fr/103969284</idno>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-442711"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Mustafizur Rahman</forename>
                <surname>SHAHID</surname>
              </persName>
              <email type="md5">ebf2eb0b2cf7d4de7303dc4cfbebfeb4</email>
              <email type="domain">gmail.com</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2019-01-25 12:14:11</date>
              <date type="whenModified">2026-01-21 03:30:15</date>
              <date type="whenReleased">2019-02-11 16:49:44</date>
              <date type="whenProduced">2018-12-10</date>
              <date type="whenEndEmbargoed">2019-01-25</date>
              <ref type="file" target="https://hal.science/hal-01994156v1/document">
                <date notBefore="2019-01-25"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-01994156v1/file/IEEE_BigData2018_IoT_devices_recognition_through_network_traffic_analysis.pdf" id="file-1994156-2011399">
                <date notBefore="2019-01-25"/>
              </ref>
              <ref type="externalLink" target="https://hal.archives-ouvertes.fr/hal-01994156/file/IEEE_BigData2018_IoT_devices_recognition_through_network_traffic_analysis.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="658135">
                <persName>
                  <forename>Mustafizur Rahman</forename>
                  <surname>SHAHID</surname>
                </persName>
                <email type="md5">ebf2eb0b2cf7d4de7303dc4cfbebfeb4</email>
                <email type="domain">gmail.com</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01994156</idno>
            <idno type="halUri">https://hal.science/hal-01994156</idno>
            <idno type="halBibtex">shahid:hal-01994156</idno>
            <idno type="halRefHtml">&lt;i&gt;BIG DATA 2018: IEEE International Conference on Big Data&lt;/i&gt;, Dec 2018, Seattle, United States. pp.5187-5192, &lt;a target="_blank" href="https://dx.doi.org/10.1109/BigData.2018.8622243"&gt;&amp;#x27E8;10.1109/BigData.2018.8622243&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">BIG DATA 2018: IEEE International Conference on Big Data, Dec 2018, Seattle, United States. pp.5187-5192, &amp;#x27E8;10.1109/BigData.2018.8622243&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-1994156-2011399"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="TELECOM-SUDPARIS" corresp="INSTITUT-MINES-TELECOM">Télécom SudParis</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="TELECOM-SUDPARIS-SACLAY" corresp="UNIV-PARIS-SACLAY">TELECOM-SUDPARIS-SACLAY</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
            <idno type="stamp" n="DEPARTEMENT-DE-MATHEMATIQUES">Collection du Département de Mathématiques</idno>
            <idno type="stamp" n="IP-PARIS-DEPARTEMENT-MATHEMATIQUES">Département de Mathèmatiques</idno>
            <idno type="stamp" n="SAMOVAR">Services répartis, Architectures, Modélisation, Validation, Administration des Réseaux</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">IoT devices recognition through network traffic analysis</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Mustafizur</forename>
                    <forename type="middle">Rahman</forename>
                    <surname>Shahid</surname>
                  </persName>
                  <email type="md5">982f1f4dcfc0b6ff3d575516d46a8a29</email>
                  <email type="domain">telecom-sudparis.eu</email>
                  <idno type="idhal" notation="numeric">1042070</idno>
                  <idno type="halauthorid" notation="string">2260334-1042070</idno>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-442711"/>
                  <affiliation ref="#struct-441569"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Gregory</forename>
                    <surname>Blanc</surname>
                  </persName>
                  <email type="md5">8bb9c8c6b1f1a95e5f373658e053ebcb</email>
                  <email type="domain">telecom-sudparis.eu</email>
                  <idno type="idhal" notation="string">blanc-gregory</idno>
                  <idno type="idhal" notation="numeric">177186</idno>
                  <idno type="halauthorid" notation="string">28999-177186</idno>
                  <idno type="IDREF">https://www.idref.fr/235400564</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-8150-6617</idno>
                  <idno type="GOOGLE SCHOLAR">9Tf1a1cAAAAJ</idno>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-442711"/>
                  <affiliation ref="#struct-441569"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Zonghua</forename>
                    <surname>Zhang</surname>
                  </persName>
                  <email type="md5">f535fd92a3aa77364fe812bb0eeff6a8</email>
                  <email type="domain">telecom-lille.fr</email>
                  <idno type="idhal" notation="numeric">998849</idno>
                  <idno type="halauthorid" notation="string">983752-998849</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-0379-7089</idno>
                  <affiliation ref="#struct-442711"/>
                  <affiliation ref="#struct-441569"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Hervé</forename>
                    <surname>Debar</surname>
                  </persName>
                  <email type="md5">0db2034ce3b1cb2f236b246418b2db62</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="string">herve-debar</idno>
                  <idno type="idhal" notation="numeric">175424</idno>
                  <idno type="halauthorid" notation="string">4309-175424</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-1344-4167</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.fr/citations?user=KSLoggcAAAAJ&amp;hl=fr</idno>
                  <idno type="IDREF">https://www.idref.fr/103969284</idno>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-442711"/>
                  <affiliation ref="#struct-441569"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>BIG DATA 2018: IEEE International Conference on Big Data</title>
                  <date type="start">2018-12-10</date>
                  <date type="end">2018-12-13</date>
                  <settlement>Seattle</settlement>
                  <country key="US">United States</country>
                </meeting>
                <imprint>
                  <publisher>IEEE</publisher>
                  <biblScope unit="serie">2018 IEEE International Conference on Big Data (Big Data)</biblScope>
                  <biblScope unit="pp">5187-5192</biblScope>
                  <date type="datePub">2018</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/BigData.2018.8622243</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info.info-lg">Computer Science [cs]/Machine Learning [cs.LG]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-cv">Computer Science [cs]/Computer Vision and Pattern Recognition [cs.CV]</classCode>
              <classCode scheme="halDomain" n="info.info-ai">Computer Science [cs]/Artificial Intelligence [cs.AI]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>The growing Internet of Things (IoT) market introduces new challenges for network activity monitoring. Legacy network monitoring is not tailored to cope with the huge diversity of smart devices. New network discovery techniques are necessary in order to find out what IoT devices are connected to the network. In this context, data analysis techniques can be leveraged to find out specific patterns that can help to recognize device types. Indeed, contrary to desktop computers, IoT devices perform very specific tasks making their networking behavior very predictable. In this paper, we present a machine learning based approach in order to recognize the type of IoT devices connected to the network by analyzing streams of packets sent and received. We built an experimental smart home network to generate network traffic data. From the generated data, we have designed a model to describe IoT device network behaviors. By leveraging the t-SNE technique to visualize our data, we are able to differentiate the network traffic generated by different IoT devices. The data describing the network behaviors are then used to train six different machine learning classifiers to predict the IoT device that generated the network traffic. The results are promising with an overall accuracy as high as 99.9% on our test set achieved by Random Forest classifier</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="department" xml:id="struct-95600" status="VALID">
          <orgName>Département Réseaux et Services de Télécommunications</orgName>
          <orgName type="acronym">TSP - RST</orgName>
          <desc>
            <address>
              <addrLine>Télécom SudParis - 9 rue Charles Fourier - 91011 Évry cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://rst.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-442711" status="OLD">
          <orgName>Réseaux, Systèmes, Services, Sécurité</orgName>
          <orgName type="acronym">R3S-SAMOVAR</orgName>
          <date type="end">2023-05-31</date>
          <desc>
            <address>
              <addrLine>TELECOM Sudparis 9 rue Charles Fourier 91011 EVRY</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://samovar.telecom-sudparis.eu</ref>
          </desc>
          <listRelation>
            <relation active="#struct-638" type="direct"/>
            <relation active="#struct-352124" type="indirect"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-352124" status="VALID">
          <idno type="IdRef">162347510</idno>
          <idno type="ISNI">0000000406406351</idno>
          <idno type="ROR">https://ror.org/05xvk4r52</idno>
          <idno type="Wikidata">Q43305</idno>
          <orgName>Télécom SudParis</orgName>
          <orgName type="acronym">TSP</orgName>
          <desc>
            <address>
              <addrLine>9 rue Charles Fourier -91011 Evry Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
            <relation name="563936" active="#struct-563936" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-563936" status="VALID">
          <idno type="IdRef">238327159</idno>
          <idno type="ISNI">0000000502717600</idno>
          <idno type="ROR">https://ror.org/042tfbd02</idno>
          <idno type="Wikidata">Q48759778</idno>
          <orgName>Institut Polytechnique de Paris</orgName>
          <orgName type="acronym">IP Paris</orgName>
          <date type="start">2019-06-02</date>
          <desc>
            <address>
              <addrLine>Route de Saclay, 91120 Palaiseau Cedex, France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ip-paris.fr</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-638" status="VALID">
          <idno type="IdRef">281286515</idno>
          <idno type="ISNI">0000000403830480</idno>
          <idno type="RNSR">200319330C</idno>
          <orgName>Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux</orgName>
          <orgName type="acronym">SAMOVAR</orgName>
          <desc>
            <address>
              <addrLine>Télécom Sudparis, 9 rue Charles Fourier -91011 Evry cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://samovar.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>