DDoS-Capable IoT Malwares: Comparative Analysis and Mirai Investigation. (18th February 2018)

• Record Type: Journal Article
• Authors: De Donno, Michele; Dragoni, Nicola; Giaretta, Alberto; Spognardi, Angelo
• Other Names: Bugliesi Michele Academic Editor.
• Is Part Of: Security and communication networks. Volume 2018(2018)
• Publication Date: 2018-02-18
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1155/2018/7178164
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract : The Internet of Things (IoT) revolution has not only carried the astonishing promise to interconnect a whole generation of traditionally "dumb" devices, but also brought to the Internet the menace of billions of badly protected and easily hackable objects. Not surprisingly, this sudden flooding of fresh and insecure devices fueled older threats, such as Distributed Denial of Service (DDoS) attacks. In this paper, we first propose an updated and comprehensive taxonomy of DDoS attacks, together with a number of examples on how this classification maps to real-world attacks. Then, we outline the current situation of DDoS-enabled malwares in IoT networks, highlighting how recent data support our concerns about the growing in popularity of these malwares. Finally, we give a detailed analysis of the general framework and the operating principles of Mirai, the most disruptive DDoS-capable IoT malware seen so far.