Multi-level Anomaly Detection in IoT Networks

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F19%3A10133275" target="_blank" >RIV/63839172:_____/19:10133275 - isvavai.cz</a>

Result on the web

—

DOI - Digital Object Identifier

—

Result language

angličtina

Original language name

Multi-level Anomaly Detection in IoT Networks

Original language description

This paper is primarily focused on IoT networks that contain IP devices, such as gateways, sensors,and mobile phones. Our aim is to design scalable monitoring system and its features for IoT gateways, to analyze the behavior of IoT devices, classify them according to trained classes, and to detect anomalies at the network edge. This approach to securing infrastructure brings better visibility and improves threat detection because there is the biggest insight without any obstacles at the network edge. Our goal is to create a system that can notify owners of IoT gateway about suspicious behavior observed even in the encrypted traffic. In our case, anomalous traffic represents some change in the behavior of a device that can be occur after infection by malware or after some configuration changes.

Czech name

—

Czech description

—

Type

O - Miscellaneous

CEP classification

—

OECD FORD branch

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project

<a href="/en/project/VI20172020079" target="_blank" >VI20172020079: Secure Gateway for the Internet of Things (SIoT)</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2019

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů