IoT Device Identification and Fingerprinting
Salma Abdalla Hamad, Quan Z. Sheng, Wei Emma Zhang · 2024
Nowadays, an increasing number of intelligent devices and smart sensors are connected by IoT techniques and have helped people to manage and improve their lives. However, security issues are emerging in IoT, among which things identification is one of the challenges in that various solutions of different vendors, standards, protocols, and community groups coexist. Chapter 2 noted that current cryptographic technologies are not necessarily effective alone while authenticating IoT devices to a network. In this chapter, we address the challenge of IoT device identification by analyzing a sequence of packets from its high-level network traffic, i.e., network-flow data, and extract unique flow-based features to create a fingerprint for each device. We adopt supervised ML techniques for the identification task. The proposed approach can automatically identify white-listed device types and individual device instances connected to a network. Moreover, we propose a security system model design, named BIN-IoT that enables enforcement of rules for constraining the IoT device communications as per their given privileges. Unknown or suspicious devices with abnormal behaviour can be identified, and their communication is restricted for further monitoring as discussed in Chapter 4 . We show that the presented approach is effective in identifying white-listed device types with average accuracy up to 90.3%, which is a 9.3% increase compared with the state-of-the-art technique. Individual device instances having the same model and vendor as well as unknown devices are correctly identified with minimal performance overhead. The main content of this chapter is from Hamad et al. [ 107 ].