A method for vulnerability detection by IoT network traffic analytics

Full text
Author(s):	Brezolin, Uelinton ; Vergutz, Andressa ; Nogueira, Michele Total Authors: 3
Document type:	Journal article
Source:	Ad Hoc Networks; v. 149, p. 10-pg., 2023-10-01.
Abstract
The Internet of Things comprises wireless devices with limited computing resources. It targets attacks that exploit vulnerabilities such as unencrypted data transfer. Conventional vulnerability detection occurs from databases that list the most common vulnerabilities and exploits (CVEs). However, these bases are limited to known vulnerabilities, which is not the case for the IoT context most of the time. This work proposes MANDRAKE: a Method for vulnerAbilities detectioN baseD on the IoT netwoRk pAcKEt traffic using machine learning techniques. A performance evaluation has been conducted in a smart home scenario taking as basis two datasets, one generated experimentally for this work and the other from the literature. The results have achieved 99% precision in detecting vulnerabilities in network traffic. (AU)

FAPESP's process:	18/23098-0 - MENTORED: from modeling to experimentation - predicting and detecting DDoS and zero-day attacks
Grantee:	Michele Nogueira Lima
Support Opportunities:	Research Projects - Thematic Grants


FAPESP's process:	21/06733-6 - Identifying and obfuscating security vulnerabilities and behaviors in IoT
Grantee:	Aldri Luiz dos Santos
Support Opportunities:	Regular Research Grants