Abstract:The number of IoT devices on the Internet has surged recently, accompanied by a barrage of large-scale IoT malware infections breakouts. Designing security mechanisms for IoT devices poses significant challenges due to constantly changing malware variants that have numerous camouflage strategies, limited hardware resources, and heterogeneous architectures. In this article, we propose MIDAS, an adaptive safeguard framework for Linux-based IoT devices to defend against malwares with the real-time behavior auditing mechanism. First, we construct a stable and abstract behavior paradigm through behavioral characteristic extraction of 115 970 malwares. Then, based on the behavior paradigm, MIDAS can: 1) monitor suspicious behaviors of break-in programs in real-time driven by our built-in SELinux policy customized for malware defense; 2) aggregate behaviors of the program’s submodules with homology tracing; and 3) summarize these behaviors into abstract behavior pairs to unveil a possible IoT malware. Using the aforementioned real-time behavior auditing, MIDAS can constrain mutating and camouflaged malwares to protect discrepant IoT devices from being compromised while maintaining low overheads. We thoroughly evaluated the defense capabilities of MIDAS. On the benchmark dataset, MIDAS successfully constrained up to 94.46%, 91.79%, and 88.34% of 115970 malware samples on ARM, MIPS, and MIPSEL architectures, with less than 1.8 MiB of memory consumption and 0.54% CPU usage. Furthermore, we deployed virtual IoT devices worldwide to examine the performance of MIDAS when defending against real-world attacks. Over a duration of 25 days, these devices suffered from 971 951 attacks originating from 71 979 intruding malwares and 48 805 unique IPs distributed in 167 countries. For devices with MIDAS protection, the number of compromised incidents decreases by $343.1\times $ , and the duration of continuous operation is $179.2\times $ greater than devices without MIDAS on average. The evaluation results demonstrate that MIDAS can effectively safeguard IoT devices with minimal resource consumption.

AASH: A Lightweight and Efficient Static IoT Malware Detection Technique at Source Code Level

A State-of-the-Art Technique for Malware Detection Based on Deep Learning in IoT Environment

MDABP: A Novel Approach to Detect Cross-Architecture IoT Malware Based on PaaS

A Light-Weight Malware Static Visual Analysis For Iot Infrastructure

A Novel Static Analysis Approach Using System Calls for Linux IoT Malware Detection

Securing Android IoT devices with GuardDroid transparent and lightweight malware detection

Efficient Detection and Classification of Internet-of-Things Malware Based on Byte Sequences from Executable Files

Artificial intelligence-driven malware detection framework for internet of things environment

HSAS-MD Analyzer: A Hybrid Security Analysis System Using Model-Checking Technique and Deep Learning for Malware Detection in IoT Apps

Comprehensive Analysis of IoT Malware Evasion Techniques

Enhancement of cyber security in IoT based on ant colony optimized artificial neural adaptive Tensor flow

Cloudeyes: Cloud-Based Malware Detection with Reversible Sketch for Resource-Constrained Internet of Things (iot) Devices

DroidMD: an Efficient and Scalable Android Malware Detection Approach at Source Code Level

Automatic Detection and Analysis Towards Malicious Behavior in IoT Malware

Optimizing Malware Detection in IoT Networks: Leveraging Resource-Aware Distributed Computing for Enhanced Security

A Multimodal Malware Detection Technique for Android IoT Devices Using Various Features.

MIDAS: Safeguarding IoT Devices Against Malware Via Real-Time Behavior Auditing

HADES-IoT: A Practical Host-Based Anomaly Detection System for IoT Devices (Extended Version)

A Hybrid Optimization Model for Efficient Detection and Classification of Malware in the Internet of Things

Towards Obfuscated Malware Detection for Low Powered IoT Devices

Challenges of Malware Detection in the IoT and a Review of Artificial Immune System Approaches