C. N. Van, V. Phan, Cao Van Loi, Khanh Duy Tung Nguyen
{"title":"IoT Malware Detection based on Latent Representation","authors":"C. N. Van, V. Phan, Cao Van Loi, Khanh Duy Tung Nguyen","doi":"10.1109/KSE50997.2020.9287373","DOIUrl":null,"url":null,"abstract":"This paper proposes a new approach for IoT malware detection system based on the analysis of IoT network traffic features. First, we use an autoencoder network to gather latent presentation of the input data. This is followed by a classifier to identify whether an IoT network traffic is malware or benign. We carry out a comprehensive comparison of different input feature sets and figure out that using latent representation is more effective than the original features. This proves that autoencoder network can compress the IoT network traffic features and keep only the most meaningful features. The model latent representation and classifies IoT malware and benign with high performance. Another finding is that our trained model can detect new types of abnormal IoT network traffics which do not appear in the training process.","PeriodicalId":275683,"journal":{"name":"2020 12th International Conference on Knowledge and Systems Engineering (KSE)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-11-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"2020 12th International Conference on Knowledge and Systems Engineering (KSE)","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/KSE50997.2020.9287373","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
This paper proposes a new approach for IoT malware detection system based on the analysis of IoT network traffic features. First, we use an autoencoder network to gather latent presentation of the input data. This is followed by a classifier to identify whether an IoT network traffic is malware or benign. We carry out a comprehensive comparison of different input feature sets and figure out that using latent representation is more effective than the original features. This proves that autoencoder network can compress the IoT network traffic features and keep only the most meaningful features. The model latent representation and classifies IoT malware and benign with high performance. Another finding is that our trained model can detect new types of abnormal IoT network traffics which do not appear in the training process.