Anomalous communications detection in IoT networks using sparse autoencoders - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2019

Anomalous communications detection in IoT networks using sparse autoencoders

Résumé

Nowadays, IoT devices have been widely deployed for enabling various smart services, such as, smart home or e-healthcare. However, security remains as one of the paramount concern as many IoT devices are vulnerable. Moreover, IoT malware are constantly evolving and getting more sophisticated. IoT devices are intended to perform very specific tasks, so their networking behavior is expected to be reasonably stable and predictable. Any significant behavioral deviation from the normal patterns would indicate anomalous events. In this paper, we present a method to detect anomalous network communications in IoT networks using a set of sparse autoencoders. The proposed approach allows us to differentiate malicious communications from legitimate ones. So that, if a device is compromised only malicious communications can be dropped while the service provided by the device is not totally interrupted. To characterize network behavior, bidirectional TCP flows are extracted and described using statistics on the size of the first N packets sent and received, along with statistics on the corresponding inter-arrival times between packets. A set of sparse autoencoders is then trained to learn the profile of the legitimate communications generated by an experimental smart home network. Depending on the value of N, the developed model achieves attack detection rates ranging from 86.9% to 91.2%, and false positive rates ranging from 0.1% to 0.5%.
Fichier principal
Vignette du fichier
IEEE_NCA2019_Anomalous_Communications_Detection_in_IoT_Networks_Using_Sparse_Autoencoders.pdf (515.58 Ko) Télécharger le fichier
conference_041818.pdf (509.56 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02423336 , version 1 (24-12-2019)

Identifiants

Citer

Mustafizur Rahman Shahid, Gregory Blanc, Zonghua Zhang, Hervé Debar. Anomalous communications detection in IoT networks using sparse autoencoders. NCA 2019: 18th International Symposium on Network Computing and Applications, Sep 2019, Cambridge, MA, United States. pp.1-5, ⟨10.1109/NCA.2019.8935007⟩. ⟨hal-02423336⟩
58 Consultations
264 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More