Novel Feature Extraction Method for Detecting Malicious MQTT Traffic Using Seq2Seq
Open Access
- 1 December 2022
- journal article
- research article
- Published by MDPI AG in Applied Sciences
- Vol. 12 (23) , 12306
Abstract
Owing to their wide application, Internet of Things systems have been the target of malicious attacks. These attacks included DoS, flood, SlowITe, malformed, and brute-force attacks. A dataset that includes these attacks was recently released. However, the attack detection accuracy reported in previous studies has not been satisfactory because the studies used too many features that are not important in detecting malicious message queue telemetry transport (MQTT) traffic. Therefore, this study aims to analyze these attacks. Herein, a novel feature extraction method is proposed that includes the source port index, TCP length, MQTT message type, keep alive, and connection acknowledgment. The attacks were classified using the Seq2Seq model. During the experiment, the accuracy of the proposed method was 99.97%, which is 7.33% higher than that of previously reported methods.Keywords
Funding Information
- Korean government, Ministry of Science (2019-0-00135, 2021-0-00546)
- Institute of Information and communications Technology Planning and evaluation (IITP) (2019-0-00135, 2021-0-00546)
This publication has 14 references indexed in Scilit:
- MQTTset, a New Dataset for Machine Learning Techniques on MQTTSensors, 2020
- Malicious PowerShell Detection Using Attention against Adversarial AttacksElectronics, 2020
- SlowITe, a Novel Denial of Service Attack Affecting MQTTSensors, 2020
- Attention-Based Automated Feature Extraction for Malware AnalysisSensors, 2020
- IoT-Flock: An Open-source Framework for IoT Traffic GenerationResearch Square, 2020
- Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT datasetFuture Generation Computer Systems, 2019
- Enhanced Network Anomaly Detection Based on Deep Neural NetworksIEEE Access, 2018
- HAST-IDS: Learning Hierarchical Spatial-Temporal Features Using Deep Neural Networks to Improve Intrusion DetectionIEEE Access, 2017
- Network Intrusion Detection Based on Directed Acyclic Graph and Belief Rule BaseETRI Journal, 2017
- Selfish node detection based on evidence by trust authority and selfish replica allocation in DANETInternational Journal of Information and Communication Technology, 2016