Categories: BotnetIoT

Researchers Use Machine Learning to Create Real-time IoT DDoS Detection Tool to Block Attack Traffic from IoT Botnets

Researchers using Machine learning as a new technique to create a Real-Time Internet of Things(IoT) DDoS detection tool to prevent the DDoS attack from IoT botnets.

IoT botnet attacks are dramatically increasing and conduct distributed denial of service (DDoS) on Internet infrastructure in recent years by various botnets families such as Mirai, HNS,Doubledoor.

Advanced IoT Botnet attacks are bypassing an IoT layered security that leads to taking complete control of the targeting network systems and attackers always find the many ways to bypass it.

Researchers using Machine learning techniques to develop a new  IoT DDoS Detection Tool to detect the suspicious DDoS traffic in real time.

Real-Time DDOS detection tool will perform based on the IoT network behavior such as regular time interval between packets.

In this case, Variety of machine Learning algorithm such as neural networks will be implemented with this tool for high accuracy DDoS detection in IoT network traffic.

This Technique will effectively work for home gateway routers or other network middleboxes to could automatically detect local IoT device sources of DDoS attacks.

Also, at the same time, it works with low-cost machine learning algorithms and traffic data
that is based on the Traffic Flow.

Also, Researchers develop a machine learning pipeline in order to collect the data feature extraction and binary classification for IoT traffic DDoS detection.

machine learning pipeline

Researchers concentrate with two backgrounds to detect IoT Based DDoS Attack

1.Network Anomaly Detection

Anomaly detection aims to identify patterns in data that do not conform to expected behavior. In the context of this research, anomaly detection techniques may be used to discern attack traffic from regular traffic

2.Network Middlebox Limitations

Network middleboxes have limited memory and processing power, imposing constraints on the algorithmic techniques used for anomaly detection.

Researchers explained in their Research Paper, Our classifiers successfully identify attack traffic with an accuracy higher than 0.999,” the team writes. “We found that random forest, K-nearest neighbors, and neural net classifiers were particularly effective. We expect that deep learning classifiers will continue to be effective with additional data from real-world deployments.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Silver Fox APT Hackers Target Healthcare Services to Steal Sensitive Data

A sophisticated cyber campaign orchestrated by the Chinese Advanced Persistent Threat (APT) group, Silver Fox,…

8 hours ago

Ghostwriter Malware Targets Government Organizations with Weaponized XLS File

A new wave of cyberattacks attributed to the Ghostwriter Advanced Persistent Threat (APT) group has…

8 hours ago

LCRYX Ransomware Attacks Windows Machines by Blocking Registry Editor and Task Manager

The LCRYX ransomware, a malicious VBScript-based threat, has re-emerged in February 2025 after its initial…

8 hours ago

Threat Actors Using Ephemeral Port 60102 for Covert Malware Communications

Recent cybersecurity investigations have uncovered a sophisticated technique employed by threat actors to evade detection…

9 hours ago

App with Over 100,000 Downloads from Google Play Steals User Data and Blackmails

A financial management app named Finance Simplified has been revealed as a malicious tool for…

9 hours ago

Poseidon Mac Malware Hiding Within PKG Files to Evade Detections

A recent discovery by cybersecurity researchers has revealed that the Poseidon malware, a macOS-targeting trojan,…

9 hours ago