N-BaIoT: Network-based Detection of IoT Botnet Attacks Using Deep Autoencoders

Abstract

The proliferation of IoT devices which can be more easily compromised than desktop computers has led to an increase in the occurrence of IoT based botnet attacks. In order to mitigate this new threat there is a need to develop new methods for detecting attacks launched from compromised IoT devices and differentiate between hour and millisecond long IoTbased attacks. In this paper we propose and empirically evaluate a novel network based anomaly detection method which extracts behavior snapshots of the network and uses deep autoencoders to detect anomalous network traffic emanating from compromised IoT devices. To evaluate our method, we infected nine commercial IoT devices in our lab with two of the most widely known IoT based botnets, Mirai and BASHLITE. Our evaluation results demonstrated our proposed method's ability to accurately and instantly detect the attacks as they were being launched from the compromised IoT devices which were part of a botnet.

Accepted for publication in July September issue of IEEE Pervasive Computing

Cited by in corpus (35)

• Decentralized Federated Learning: Fundamentals, State of the Art, Frameworks, Trends, and Challenges
• Explainable Artificial Intelligence Applications in Cyber Security: State-of-the-Art in Research
• IoT Anomaly Detection Methods and Applications: A Survey
• Utilising Deep Learning Techniques for Effective Zero-Day Attack Detection
• Machine Learning for Encrypted Malicious Traffic Detection: Approaches, Datasets and Comparative Study
• Machine Learning-Enabled IoT Security: Open Issues and Challenges Under Advanced Persistent Threats
• A Survey on Device Behavior Fingerprinting: Data Sources, Techniques, Application Scenarios, and Datasets
• Clustered Federated Learning Architecture for Network Anomaly Detection in Large Scale Heterogeneous IoT Networks
• Federated Learning for Internet of Things: A Federated Learning Framework for On-device Anomaly Data Detection
• Machine and Deep Learning for IoT Security and Privacy: Applications, Challenges, and Future Directions
• Real-Time Nonparametric Anomaly Detection in High-Dimensional Settings
• An Automated and Comprehensive Framework for IoT Botnet Detection and Analysis (IoT-BDA)
• Online Self-Supervised Deep Learning for Intrusion Detection Systems
• SHARKS: Smart Hacking Approaches for RisK Scanning in Internet-of-Things and Cyber-Physical Systems based on Machine Learning
• A systematic literature review on the code smells datasets and validation mechanisms
• FedMSE: Semi-supervised federated learning approach for IoT network intrusion detection
• Federated PCA on Grassmann Manifold for IoT Anomaly Detection
• Network Intrusion Datasets: A Survey, Limitations, and Recommendations
• Gotham Testbed: a Reproducible IoT Testbed for Security Experiments and Dataset Generation
• CADeSH: Collaborative Anomaly Detection for Smart Homes
• Anomalous Communications Detection in IoT Networks Using Sparse Autoencoders
• Robust Attack Detection Approach for IIoT Using Ensemble Classifier
• Detecting Attacks on IoT Devices using Featureless 1D-CNN
• A systematic review of metaheuristics-based and machine learning-driven intrusion detection systems in IoT
• Federated Learning for Malware Detection in IoT Devices
• Enhancing Robustness of On-line Learning Models on Highly Noisy Data
• Online Deep Learning based on Auto-Encoder
• D-Score: An Expert-Based Method for Assessing the Detectability of IoT-Related Cyber-Attacks
• Locality Sensitive Hashing for Network Traffic Fingerprinting
• IoT Threat Detection Testbed Using Generative Adversarial Networks
• NEUROPULS: NEUROmorphic energy-efficient secure accelerators based on Phase change materials aUgmented siLicon photonicS
• Efficient Attack Detection in IoT Devices using Feature Engineering-Less Machine Learning
• A Lightweight Federated Learning Approach for Privacy-Preserving Botnet Detection in IoT
• Detecting Compromised IoT Devices Using Autoencoders with Sequential Hypothesis Testing
• Reliable Probability Intervals For Classification Using Inductive Venn Predictors Based on Distance Learning