The proliferation of the Internet of Things (IoT) has raised concerns about the security of connected devices. There is a need to develop suitable and cost-efficient methods to identify vulnerabilities in IoT devices in order to address them before attackers seize opportunities to compromise them. The deception technique is a prominent approach to improving the security posture of IoT systems. Honeypot is a popular deception technique that mimics interaction in real fashion and encourages unauthorised users (attackers) to launch attacks. Due to the large number and the heterogeneity of IoT devices, manually crafting the low and high-interaction honeypots is not affordable. This has forced researchers to seek innovative ways to build honeypots for IoT devices. In this paper, we propose a honeypot for IoT devices that uses machine learning techniques to learn and interact with attackers automatically. The evaluation of the proposed model indicates that our system can improve the session length with attackers and capture more attacks on the IoT network.
翻译:物联网(IoT)的普及引发了对连接设备安全性的担忧。有必要开发适合且具有成本效益的方法来识别物联网设备中的漏洞,以便在攻击者利用机会进行攻击之前进行处理。误导技术是改善物联网系统安全性的突出方法。蜜罐是一种流行的误导技术,可以模拟实际交互并鼓励未经授权的用户(攻击者)发动攻击。由于物联网设备数量众多且异构性较高,手工制作低交互和高交互蜜罐显然效率不高。这迫使研究人员寻求创新方法来为物联网设备构建蜜罐。本文提出了一种基于机器学习技术来自动学习和与攻击者交互的物联网设备蜜罐。评估结果表明,我们的系统可以提高与攻击者的会话长度,并捕获更多的物联网网络攻击。