Behavioral fingerprinting of Internet‐of‐Things devices

Bezawada, Bruhadeshwar; Ray, Indrakshi; Ray, Indrajit

doi:10.1002/widm.1337

Behavioral fingerprinting of Internet‐of‐Things devices

Journal Article · Mon Sep 30 00:00:00 EDT 2019 · WIREs Data Mining and Knowledge Discovery

DOI:https://doi.org/10.1002/widm.1337· OSTI ID:1567895

Bezawada, Bruhadeshwar ^[1]; ^[1]; Ray, Indrajit ^[2]

Department of Computer Science Colorado State University Fort Collins Colorado
Department of Computer Science Colorado State University Fort Collins Colorado, National Science Foundation Alexandria Virginia

Abstract

Rapid advances in the Internet‐of‐Things (IoT) domain have led to the development of several useful and interesting devices that have enhanced the quality of home living and industrial automation. The vulnerabilities in the IoT devices have rendered them susceptible to compromise and forgery. The problem of device authentication, that is, the question of whether a device's identity is what it claims to be, is still an open problem. Device fingerprinting seems to be a promising authentication mechanism. Device fingerprinting profiles a device based on information available about the device and generate a robust, verifiable and unique identity for the device. Existing approaches for device fingerprinting may not be feasible or cost‐effective for the IoT domain due to the resource constraints and heterogeneity of the IoT devices. Due to resource and cost constraints, behavioral fingerprinting provides promising directions for fingerprinting IoT devices. Behavioral fingerprinting allows security researchers to understand the behavioral profile of a device and to establish some guidelines regarding the device operations. In this article, we discuss existing approaches for behavioral fingerprinting of devices in general and evaluate their applicability for IoT devices. Furthermore, we discuss potential approaches for fingerprinting IoT devices and give an overview of some of the preliminary attempts to fingerprint IoT devices. We conclude by highlighting the future research directions for fingerprinting in the IoT domain.

This article is categorized under:

Application Areas > Science and Technology

Application Areas > Internet

Technologies > Machine Learning

Application Areas > Industry Specific Applications

View Accepted Manuscript (Publisher)

Sponsoring Organization:: USDOE

Grant/Contract Number:: NE0008571

OSTI ID:: 1567895

Alternate ID(s):: OSTI ID: 1850509

Journal Information:: WIREs Data Mining and Knowledge Discovery, Journal Name: WIREs Data Mining and Knowledge Discovery Journal Issue: 1 Vol. 11; ISSN 1942-4787

Publisher:: Wiley Blackwell (John Wiley & Sons)Copyright Statement

Country of Publication:: United States

Language:: English

References (31)

Passive classification of wireless NICs during active scanning Corbett, Cherita L.; Beyah, Raheem A.; Copeland, John A. International Journal of Information Security, Vol. 7, Issue 5 https://doi.org/10.1007/s10207-007-0053-7	journal	January 2008
WDTF: A Technique for Wireless Device Type Fingerprinting Dalai, Asish Kumar; Jena, Sanjay Kumar Wireless Personal Communications, Vol. 97, Issue 2 https://doi.org/10.1007/s11277-017-4652-y	journal	July 2017
Towards automatic fingerprinting of IoT devices in the cyberspace Yang, Kai; Li, Qiang; Sun, Limin Computer Networks, Vol. 148 https://doi.org/10.1016/j.comnet.2018.11.013	journal	January 2019
Statistical pattern recognition: a review Jain, A. K.; Duin, P. W. IEEE Transactions on Pattern Analysis and Machine Intelligence, Vol. 22, Issue 1 https://doi.org/10.1109/34.824819	journal	January 2000
Comparison of the Device Lifetime in Wireless Networks for the Internet of Things Morin, Elodie; Maman, Mickael; Guizzetti, Roberto IEEE Access, Vol. 5 https://doi.org/10.1109/ACCESS.2017.2688279	journal	January 2017
IoT Devices Recognition Through Network Traffic Analysis Shahid, Mustafizur R.; Blanc, Gregory; Zhang, Zonghua 2018 IEEE International Conference on Big Data (Big Data) https://doi.org/10.1109/BigData.2018.8622243	conference	December 2018
A channel-based hypothesis testing approach to enhance user authentication in wireless networks Tugnait, Jitendra K.; Kim, Hyosung 2010 Second International Conference on COMmunication Systems and NETworks (COMSNETS 2010) https://doi.org/10.1109/COMSNETS.2010.5432018	conference	January 2010
Device Fingerprinting in Wireless Networks: Challenges and Opportunities Xu, Qiang; Zheng, Rong; Saad, Walid IEEE Communications Surveys & Tutorials, Vol. 18, Issue 1 https://doi.org/10.1109/COMST.2015.2476338	journal	April 2016
A passive approach to wireless device fingerprinting No authors listed 2010 IEEE/IFIP International Conference on Dependable Systems & Networks (DSN) https://doi.org/10.1109/DSN.2010.5544294	conference	June 2010
Toward an Intrusion Detection Approach for IoT Based on Radio Communications Profiling Roux, Jonathan; Alata, Eric; Auriol, Guillaume 2017 13th European Dependable Computing Conference (EDCC) https://doi.org/10.1109/EDCC.2017.11	conference	September 2017
IoT SENTINEL: Automated Device-Type Identification for Security Enforcement in IoT Miettinen, Markus; Marchal, Samuel; Hafeez, Ibbad 2017 IEEE 37th International Conference on Distributed Computing Systems (ICDCS) https://doi.org/10.1109/ICDCS.2017.283	conference	June 2017
Estimation and removal of clock skew from network delay measurements Moon, S. B.; Skelly, P.; Towsley, D. IEEE INFOCOM '99. Conference on Computer Communications https://doi.org/10.1109/INFCOM.1999.749287	conference	January 1999
Characterizing and classifying IoT traffic in smart cities and campuses Sivanathan, Arunan; Sherratt, Daniel; Gharakheili, Hassan Habibi 2017 IEEE Conference on Computer Communications: Workshops (INFOCOM WKSHPS), 2017 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) https://doi.org/10.1109/INFCOMW.2017.8116438	conference	May 2017
The Power of Models: Modeling Power Consumption for IoT Devices Martinez, Borja; Monton, Marius; Vilajosana, Ignasi IEEE Sensors Journal, Vol. 15, Issue 10 https://doi.org/10.1109/JSEN.2015.2445094	journal	October 2015
Automatic Device Classification from Network Traffic Streams of Internet of Things Bai, Lei; Yao, Lina; Kanhere, Salil S. 2018 IEEE 43rd Conference on Local Computer Networks (LCN) https://doi.org/10.1109/LCN.2018.8638232	conference	October 2018
Stuxnet, the real start of cyber warfare? [Editor's Note] Chen, Thomas M. IEEE Network, Vol. 24, Issue 6 https://doi.org/10.1109/MNET.2010.5634434	journal	November 2010
Remote physical device fingerprinting Kohno, T.; Broido, A.; Claffy, K. Proceedings. 2005 IEEE Symposium on Security and Privacy, 2005 IEEE Symposium on Security and Privacy (S&P'05) https://doi.org/10.1109/SP.2005.18	conference	January 2005
The Divergence and Bhattacharyya Distance Measures in Signal Selection Kailath, T. IEEE Transactions on Communications, Vol. 15, Issue 1 https://doi.org/10.1109/TCOM.1967.1089532	journal	February 1967
GTID: A Technique for Physical Device and Device Type Fingerprinting Radhakrishnan, Sakthi Vignesh; Uluagac, A. Selcuk; Beyah, Raheem IEEE Transactions on Dependable and Secure Computing, Vol. 12, Issue 5 https://doi.org/10.1109/TDSC.2014.2369033	journal	September 2015
MIMO Authentication via Deliberate Fingerprinting at the Physical Layer Yu, Paul L.; Sadler, Brian M. IEEE Transactions on Information Forensics and Security, Vol. 6, Issue 3 https://doi.org/10.1109/TIFS.2011.2134850	journal	September 2011
On Fast and Accurate Detection of Unauthorized Wireless Access Points Using Clock Skews Jana, S.; Kasera, S. K. IEEE Transactions on Mobile Computing, Vol. 9, Issue 3 https://doi.org/10.1109/TMC.2009.145	journal	March 2010
Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics Sivanathan, Arunan; Gharakheili, Hassan Habibi; Loi, Franco IEEE Transactions on Mobile Computing, Vol. 18, Issue 8 https://doi.org/10.1109/TMC.2018.2866249	journal	August 2019
Machine Learning Techniques for Passive Network Inventory Francois, Jerome; Abdelnur, Humberto; State, Radu IEEE Transactions on Network and Service Management, Vol. 7, Issue 4 https://doi.org/10.1109/TNSM.2010.1012.0352	journal	December 2010
Adversarial classification Dalvi, Nilesh; Domingos, Pedro Proceedings of the 2004 ACM SIGKDD international conference on Knowledge discovery and data mining - KDD '04 https://doi.org/10.1145/1014052.1014066	conference	January 2004
Active behavioral fingerprinting of wireless devices Bratus, Sergey; Cornelius, Cory; Kotz, David Proceedings of the first ACM conference on Wireless network security - WiSec '08 https://doi.org/10.1145/1352533.1352543	conference	January 2008
Wireless device identification with radiometric signatures Brik, Vladimir; Banerjee, Suman; Gruteser, Marco Proceedings of the 14th ACM international conference on Mobile computing and networking - MobiCom '08 https://doi.org/10.1145/1409944.1409959	conference	January 2008
On physical-layer identification of wireless devices Danev, Boris; Zanetti, Davide; Capkun, Srdjan ACM Computing Surveys, Vol. 45, Issue 1 https://doi.org/10.1145/2379776.2379782	journal	November 2012
ProfilIoT: a machine learning approach for IoT device identification based on network traffic analysis Meidan, Yair; Bohadana, Michael; Shabtai, Asaf Proceedings of the Symposium on Applied Computing - SAC '17 https://doi.org/10.1145/3019612.3019878	conference	January 2017
IoTScanner: Detecting Privacy Threats in IoT Neighborhoods Siby, Sandra; Maiti, Rajib Ranjan; Tippenhauer, Nils Ole ASIA CCS '17: ACM Asia Conference on Computer and Communications Security, Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security https://doi.org/10.1145/3055245.3055253	conference	April 2017
Behavioral Fingerprinting of IoT Devices Bezawada, Bruhadeshwar; Bachani, Maalvika; Peterson, Jordan Proceedings of the 2018 Workshop on Attacks and Solutions in Hardware Security - ASHES '18 https://doi.org/10.1145/3266444.3266452	conference	January 2018
Who's in Control of Your Control System? Device Fingerprinting for Cyber-Physical Systems Formby, David; Srinivasan, Preethi; Leonard, Andrew https://doi.org/10.14722/ndss.2016.23142	conference	January 2016

Similar Records

Tierless Programming for the Internet of Things

Technical Report · Sat Jan 31 23:00:00 EST 2015 · OSTI ID:1169934

Integrated Triboelectric Nanogenerators in the Era of the Internet of Things

Journal Article · Mon Sep 30 00:00:00 EDT 2019 · Advanced Science · OSTI ID:1567900

Behavioral fingerprinting of Internet‐of‐Things devices

Citation Formats

References (31)

Similar Records

Related Subjects