Categories: BotnetIoT

Researchers Use Machine Learning to Create Real-time IoT DDoS Detection Tool to Block Attack Traffic from IoT Botnets

Researchers using Machine learning as a new technique to create a Real-Time Internet of Things(IoT) DDoS detection tool to prevent the DDoS attack from IoT botnets.

IoT botnet attacks are dramatically increasing and conduct distributed denial of service (DDoS) on Internet infrastructure in recent years by various botnets families such as Mirai, HNS,Doubledoor.

Advanced IoT Botnet attacks are bypassing an IoT layered security that leads to taking complete control of the targeting network systems and attackers always find the many ways to bypass it.

Researchers using Machine learning techniques to develop a new  IoT DDoS Detection Tool to detect the suspicious DDoS traffic in real time.

Real-Time DDOS detection tool will perform based on the IoT network behavior such as regular time interval between packets.

In this case, Variety of machine Learning algorithm such as neural networks will be implemented with this tool for high accuracy DDoS detection in IoT network traffic.

This Technique will effectively work for home gateway routers or other network middleboxes to could automatically detect local IoT device sources of DDoS attacks.

Also, at the same time, it works with low-cost machine learning algorithms and traffic data
that is based on the Traffic Flow.

Also, Researchers develop a machine learning pipeline in order to collect the data feature extraction and binary classification for IoT traffic DDoS detection.

machine learning pipeline

Researchers concentrate with two backgrounds to detect IoT Based DDoS Attack

1.Network Anomaly Detection

Anomaly detection aims to identify patterns in data that do not conform to expected behavior. In the context of this research, anomaly detection techniques may be used to discern attack traffic from regular traffic

2.Network Middlebox Limitations

Network middleboxes have limited memory and processing power, imposing constraints on the algorithmic techniques used for anomaly detection.

Researchers explained in their Research Paper, Our classifiers successfully identify attack traffic with an accuracy higher than 0.999,” the team writes. “We found that random forest, K-nearest neighbors, and neural net classifiers were particularly effective. We expect that deep learning classifiers will continue to be effective with additional data from real-world deployments.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting victims…

8 hours ago

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ advanced…

9 hours ago

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to execute…

11 hours ago

Meta Removed 2 Million Account Linked to Malicious Activities

 Meta has announced the removal of over 2 million accounts connected to malicious activities, including…

15 hours ago

Veritas Enterprise Vault Vulnerabilities Lets Attackers Execute Arbitrary Code Remotely

Critical security vulnerability has been identified in Veritas Enterprise Vault, a widely-used archiving and content…

16 hours ago

7-Zip RCE Vulnerability Let Attackers Execute Remote Code

A critical security vulnerability has been disclosed in the popular file archiving tool 7-Zip, allowing…

16 hours ago