Tuesday, March 19, 2024

Researchers Use Machine Learning to Create Real-time IoT DDoS Detection Tool to Block Attack Traffic from IoT Botnets

Researchers using Machine learning as a new technique to create a Real-Time Internet of Things(IoT) DDoS detection tool to prevent the DDoS attack from IoT botnets.

IoT botnet attacks are dramatically increasing and conduct distributed denial of service (DDoS) on Internet infrastructure in recent years by various botnets families such as Mirai, HNS,Doubledoor.

AdvancedĀ IoT Botnet attacks are bypassing an IoT layered security that leads to taking complete control of the targeting network systemsĀ and attackers always find the many ways to bypass it.

Researchers using Machine learning techniques to develop a new  IoT DDoS Detection Tool to detect the suspicious DDoS traffic in real time.

Real-Time DDOS detection tool will perform based on the IoT network behavior such as regular time interval between packets.

In this case, Variety of machine Learning algorithm such as neural networks will be implemented with this tool for high accuracy DDoS detection in IoT network traffic.

This Technique will effectively work for home gateway routers or other network middleboxes to could automatically detect local IoT device sources of DDoS attacks.

Also, at the same time, it works with low-cost machine learning algorithms and traffic data
that is based on the Traffic Flow.

Also, Researchers develop a machine learning pipeline in order to collect the data feature extraction and binary classification for IoT traffic DDoS detection.

machine learning pipeline

Researchers concentrate with two backgrounds to detect IoT Based DDoS Attack

1.Network Anomaly Detection 

Anomaly detection aims to identify patterns in data that do not conform to expected behavior. In the context of this research, anomaly detection techniques may be used to discern attack traffic from regular traffic

2.Network Middlebox Limitations

Network middleboxes have limited memory and processing power, imposing constraints on the algorithmic techniques used for anomaly detection.

Researchers explained in their Research Paper, Our classifiers successfully identify attack traffic with an accuracy higher than 0.999,ā€ the team writes. ā€œWe found that random forest, K-nearest neighbors, and neural net classifiers were particularly effective. We expect that deep learning classifiers will continue to be effective with additional data from real-world deployments.

Website

Latest articles

Hackers Exploiting Microsoft Office Templates to Execute Malicious Code

In a cyberattack campaign dubbed "PhantomBlu," hundreds of employees across various US-based organizations were...

How ANY.RUN Malware Sandbox Process IOCs for Threat Intelligence Lookup?

The database includes indicators of compromise (IOCs) and relationships between different artifacts observed within...

CryptoWire Ransomware Attacking Abuses Schedule Task To maintain Persistence

AhnLab security researchers detected a resurgence of CryptoWire, a ransomware strain originally prevalent in...

E-Root Admin Sentenced to 42 Months in Prison for SellingĀ 350,000 Credentials

Tampa, FL ā€“ In a significant crackdown on cybercrime, Sandu Boris Diaconu, a 31-year-old...

WhiteSnake Stealer Checks for Mutex & VM Function Before Execution

A new variant of the WhiteSnake Stealer, a formidable malware that has been updated...

Researchers Hacked AI Assistants Using ASCII Art

Large language models (LLMs) are vulnerable to attacks, leveraging their inability to recognize prompts...

Microsoft Deprecate 1024-bit RSA Encryption Keys in Windows

Microsoft has announced an important update for Windows users worldwide in a continuous effort...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles