Evaluation of Functional Estimation Methods in IoT Devices at Intervals of a Few Seconds by Communication Traffic Analysis

Abstract

In recent years, IoT devices have become widespread in households, and IoT devices with various functions are sold and used in various situations.However, current IoT devices are black boxes in operation, and there is no way to detect when an IoT device is communicating in a suspicious manner. Therefore, we are aiming to realize a framework called the IoT activity tracker that has a function of access control, which can detect what kind of communication IoT devices are doing and allow only appropriate communication based on it, and a function that enables users to understand the operation status of IoT devices by visualizing what kind of communication IoT devices are doing. To achieve the IoT activity tracker, it is necessary to estimate the function in a few seconds of communication traffic. In this study, we used 8 models of IoT devices to estimate functions at intervals of a few seconds, and estimated 3 functions, including a state in which nothing is being executed, using features at intervals of 1 second. As a result, it was confirmed that the function could be estimated with an accuracy of 83% or higher for 5 of the 8 models, respectively.