论文标题
朝着设置用于物联网僵尸网络攻击检测的通用功能
Towards a Universal Features Set for IoT Botnet Attacks Detection
论文作者
论文摘要
物联网设备的安全陷阱使攻击者可以轻松利用物联网设备并将其作为僵尸网络的一部分。一旦成千上万的物联网设备被妥协并成为僵尸网络的一部分,攻击者会使用此僵尸网络发射大型且复杂的分布式服务拒绝(DDOS)攻击,从而降低了目标网站或服务,并使他们无法响应合法用户。到目前为止,已经提出了许多僵尸网络检测技术,但其性能仅限于对其训练的特定数据集。这是因为用于在一个僵尸网络数据集上训练机器学习模型的功能,由于攻击模式的多样性,在其他数据集上表现不佳。因此,在本文中,我们提出了一个通用功能,可以更好地检测僵尸网络攻击,而不论其基础数据集如何。提出的功能设置了在三个不同的僵尸网络攻击数据集上测试经过训练的机器学习模型时检测僵尸网络攻击的明显结果。
The security pitfalls of IoT devices make it easy for the attackers to exploit the IoT devices and make them a part of a botnet. Once hundreds of thousands of IoT devices are compromised and become the part of a botnet, the attackers use this botnet to launch the large and complex distributed denial of service (DDoS) attacks which take down the target websites or services and make them unable to respond the legitimate users. So far, many botnet detection techniques have been proposed but their performance is limited to a specific dataset on which they are trained. This is because the features used to train a machine learning model on one botnet dataset, do not perform well on other datasets due to the diversity of attack patterns. Therefore, in this paper, we propose a universal features set to better detect the botnet attacks regardless of the underlying dataset. The proposed features set manifest preeminent results for detecting the botnet attacks when tested the trained machine learning models over three different botnet attack datasets.