Malicious Web traffic detection for Internet of Things environments. (July 2019)

• Record Type: Journal Article
• Authors: Yong, Binbin; Liu, Xin; Yu, Qingchen; Huang, Liang; Zhou, Qingguo
• Is Part Of: Computers & electrical engineering. Volume 77(2019)
• Page Start: 260
• Page End: 272
• Publication Date: 2019-07
• Subjects: Internet of Things -- Parameter injection -- Malicious codes -- Hidden Markov Model -- Bidirectory scoring; Computer engineering -- Periodicals; Electrical engineering -- Periodicals; Electrical engineering -- Data processing -- Periodicals; Ordinateurs -- Conception et construction -- Périodiques; Électrotechnique -- Périodiques; Électrotechnique -- Informatique -- Périodiques; Computer engineering; Electrical engineering; Electrical engineering -- Data processing; Periodicals; Electronic journals; 621.302854
• DOI: 10.1016/j.compeleceng.2019.06.008
• Languages: English
• ISSNs: 0045-7906

Abstract

Abstract: The Internet of Things (IoT) is gradually becoming an infrastructure, providing a wide range of applications, from health monitoring to industrial control and many other social domains. Unfortunately, for open connectivity, it is always built on Hypertext Transfer Protocol (HTTP), which inherently brings in new challenging security threats. Parameter injection, as a common and powerful attack, is often exploited by attackers to break into the HTTP servers of IoT by injecting malicious codes into the parameters of the HTTP requests. In this work we present a Hidden Markov Model (HMM) based detection system, which is designed as a novel bidirectory scoring architecture utilizing both benign and malicious Web traffic, to defend against parameter injection attacks in IoT systems. We evaluate the proposed system in terms of Web traffic data in real IoT environments. Results show improvements over baselines.