The rapidly increasing number of internet of things (IoT) and non-IoT devices has imposed new security challenges to network administrators. Accurate device identification in the increasingly complex network structures is necessary. In this paper, a device fingerprinting (DFP) method has been proposed for device identification, based on digital footprints, which devices use for communication over a network. A subset of nine features have been selected from the network and transport layers of a single transmission control protocol/internet protocol packet based on attribute evaluators in Weka, to generate device-specific signatures. The method has been evaluated on two online datasets, and an experimental dataset, using different supervised machine learning (ML) algorithms. Results have shown that the method is able to distinguish device type with up to 100% precision using the random forest (RF) classifier, and classify individual devices with up to 95.7% precision. These results demonstrate the applicability of the proposed DFP method for device identification, in order to provide a more secure and robust network.
翻译:迅速增长的互联网(IoT)和非IoT设备给网络管理员带来了新的安全挑战。 在日益复杂的网络结构中需要准确的装置识别。 在本文中,根据数字足迹提出了设备指纹识别方法(DFP),这是用于网络通信的装置。 从网络和运输层中选择了9个特性的子集,即基于Weka的属性评价员的单一传输控制协议/内部协议包,以生成特定装置的签字。该方法在两个在线数据集和实验数据集中进行了评估,使用了不同的受监督的机器学习算法。结果显示,该方法能够使用随机森林分类法(RF)来区分高达100%精确度的设备类型,并将达到95.7%精确度的单个装置分类。这些结果表明,拟议的DFP方法适用于设备识别,以便提供一个更安全和可靠的网络。