IoTCandyJar: Towards an Intelligent-Interaction Honeypot for IoT Devices

Black Hat USA 2017

Presented by: Xing Jin, Tongbo Luo, Xin Ouyang, Zhaoyan Xu
Date: Thursday July 27, 2017
Time: 17:00 - 18:00
Location: Lagoon ABCGHI

In recent years, the emerging Internet-of-Things (IoT) has led to rising concerns about the security of networked embedded devices. There is a strong need to develop suitable and cost-efficient methods to find vulnerabilities in IoT devices - in order to address them before attackers take advantage of them. In the previous Black Hat conference, conventional honeypot technology has been discussed multiple times. In this work, we focus on the adaptation of honeypots for improving the security of IoTs, and argue why we need to have a huge innovation to build honeypot for IoT devices.

Due to the heterogeneity of IoT devices, manually crafting the low-interaction honeypot is not affordable; on the other hand, we cannot purchase all of the physical IoT devices to build high-interaction honeypot. This dilemma forced us to seek an innovative way to build honeypot for IoT devices. We propose an automatic way to learn the behavioral knowledge of IoT devices and build "intelligent-interaction" honeypot. We also leverage multiple machine learning techniques to improve the quality and quantity.

Tongbo Luo

Tongbo Luo is a Principle Security Researcher at Palo Alto Networks. His current research interests include cybersecurity, mobile security and security data analysis. He obtained his MS and PhD in computer science from Syracuse University in 2014. He is active on mobile security, cyber security, IoT security and applied machine learning for security problems.

Zhaoyan Xu

Zhaoyan Xu is a research engineer at Palo Alto Networks, CA, United States. He joined Palo Alto Networks in 2014 and worked in the area of Internet security. He earned his PhD degree from Texas A&M; University, College Station in 2014. His research interests include web security, malware analysis, detection and system security.

Xin Ouyang

Xin Ouyang is a researcher in the Security Research Group of Palo Alto Networks. His research focuses on the network security research related field.

Xing Jin

.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats