Investigating Brute Force Attack Patterns in IoT Network

Abstract

Internet of Things (IoT) devices may transfer data to the gateway/application server through File Transfer Protocol (FTP) transaction. Unfortunately, in terms of security, the FTP server at a gateway or data sink very often is improperly set up. At the same time, password matching/theft holding is among the popular attacks as the intruders attack the IoT network. Thus, this paper attempts to provide an insight of this type of attack with the main aim of coming up with attack patterns that may help the IoT system administrator to analyze any similar attacks. This paper investigates brute force attack (BFA) on the FTP server of the IoT network by using a time-sensitive statistical relationship approach and visualizing the attack patterns that identify its configurations. The investigation focuses on attacks launched from the internal network, due to the assumption that the IoT network has already installed a firewall. An insider/internal attack launched from an internal network endangers more the entire IoT security system. The experiments use the IoT network testbed that mimic the internal attack scenario with three major goals: (i) to provide a topological description on how an insider attack occurs; (ii) to achieve attack pattern extraction from raw sniffed data; and (iii) to establish attack pattern identification as a parameter to visualize real-time attacks. Experimental results validate the investigation.

MQTTset, a New Dataset for Machine Learning Techniques on MQTT

“…A brute force attack consists in running possible attempts to retrieve users credentials used by MQTT [ 50 ]. Regarding MQTTset, the attacker’s aim is to crack users’ credentials (username and password) adopted during the authentication phase.…”

Survey on Network Slicing for Internet of Things Realization in 5G Networks

“…Device vendors tend to use common credentials for IoT devices and most of device consumers do not care to change these default credentials. This increases the vulnerability of the IoT devices to dictionary attacks, while being used by consumers [58]. This will help adversaries gain control of the IoT devices.…”

Rasefiberry: Secure and efficient Raspberry-Pi based gateway for smarthome IoT architecture

“…Wireshark utilized to run sniffing attack, Metasploit to run auxiliary contained slowloris and synflood attack for DOS type attack also password brute-force attack, and HULK python script to run floodbased DOS attack. The network attack will be run based on a basic penetration test [25][26][27]. Efficiency parameter evaluation will be tested in Rasefiberry generally used encryption algorithms such as DES, AES, Blowfish, ECDH, and Twofish.…”