IoTDevID: A Behavior-Based Device Identification Method for the IoT
This addresses network security for IoT systems by enabling detection of devices using non-IP and low-energy protocols, though it is incremental in improving feature selection.
The authors tackled IoT device identification by developing IoTDevID, a machine learning method that uses network packet characteristics, achieving high predictive accuracy across two public datasets and outperforming existing feature sets.
Device identification is one way to secure a network of IoT devices, whereby devices identified as suspicious can subsequently be isolated from a network. In this study, we present a machine learning-based method, IoTDevID, that recognizes devices through characteristics of their network packets. As a result of using a rigorous feature analysis and selection process, our study offers a generalizable and realistic approach to modelling device behavior, achieving high predictive accuracy across two public datasets. The model's underlying feature set is shown to be more predictive than existing feature sets used for device identification, and is shown to generalize to data unseen during the feature selection process. Unlike most existing approaches to IoT device identification, IoTDevID is able to detect devices using non-IP and low-energy protocols.