On preventing suspicious communication from IoT devices by utilizing DNS name resolution

Abstract

The number of IoT devices connected to the Internet has been rapidly increasing. On the other hand, some IoT devices may not have sufficient security capabilities because they do not have enough resources. Previous work to monitor IoT device traffic used a monitoring node running packet sniffing software, but it required an extensive resource. We propose new IoT traffic monitoring method which utilizes DNS name resolution. Our method not only decrease CPU resources, but also prevent suspicious communication from IoT devices. We implemented the prototype to verify the proposed method can detect and prevent suspicious communication with lower CPU load.