Abstract:From a security perspective, identifying Industrial Internet of Things (IIoT) devices connected to a network has multiple applications such as penetration testing, vulnerability assessment, etc. In this work, we propose a feature-based methodology to perform device-type fingerprinting. A device fingerprint consists of the TCP/IP header features and port-based features extracted from the network traffic of the device. These features are collected by a hybrid mechanism which has a negligible impact on device functionality and can avoid the problem of the long TCP connection. Once the fingerprint of a device is generated, it will be fed to the classifiers based on Gradient Boosting to predict its type details. Based on our proposed method, we implement a prototype application called IIoT Device Type Fingerprinting (IDTF) which capable of automatically identifying the types of devices being connected to an IIoT network. We collect a dataset consisting of 19,174 fingerprints from real-world Internet-facing IIoT devices indexed by Shodan to train and evaluate the classifiers using ten-fold cross-validation. And we conduct comparative experiments in an IIoT testbed to compare the effectiveness of IDTF with two famous fingerprinting tools. The experimental result shows that the ability of our approach is confirmed by a high mean F-Measure of 95.76%. It also demonstrates that IDTF achieves the highest identification rate in the testbed and is non-intrusive for IIoT devices. Compared with existing works, our approach is more generic as it does not rely on a specific protocol or deep packet inspection and can distinguish almost all IIoT device-types.

Towards Automatic Fingerprinting of IoT Devices in the Cyberspace

Internet-Scale Fingerprinting the Reusing and Rebranding IoT Devices in the Cyberspace

Identification of IoT Devices Based on Hardware and Software Fingerprint Features

An IoT Device Identification Method Using Extracted Fingerprint From Sequence of Traffic Grayscale Images

Cross-Layer Protocol Fingerprint for Large-Scale Fine-Grain Devices Identification.

Inferring Hidden IoT Devices and User Interactions Via Spatial-Temporal Traffic Fingerprinting

Research on machine learning-based device fingerprint recognition technology for power internet of things

Fingerprinting Industrial Iot Devices Based on Multi-Branch Neural Network

Toward Automatically Connecting IoT Devices with Vulnerabilities in the Wild

IoTSense: Behavioral Fingerprinting of IoT Devices

Fingerprinting IIoT Devices Through Machine Learning Techniques

A Booting Fingerprint of Device for Network Access Control

Your Smart Home Can't Keep a Secret: Towards Automated Fingerprinting of IoT Traffic with Neural Networks

IoT Device Fingerprinting for Relieving Pressure in the Access Control

An Adaptive Ensembled Neural Network-Based Approach to IoT Device Identification

Fingerprinting Mainstream IoT Platforms Using Traffic Analysis

Automatically Discovering Surveillance Devices in the Cyberspace

IoT Devices Discovery and Identification Using Network Traffic Data

DevTag: A Benchmark for Fingerprinting IoT Devices

Unsupervised IoT Fingerprinting Method Via Variational Auto-encoder and K-means

Toward IoT Device Fingerprinting from Proprietary Protocol Traffic Via Key-Blocks Aware Approach