An NTP-based detection module for DDoS attacks on IoT

This paper proposes an event detection module for distributed denial of service (DDoS) attacks on Internet of Things (IoT). Different from existing detection modules using knowledge-based filtering, the proposed module focuses on the system behavior under DDoS attacks and detects it utilizing information obtained from NTP used in synchronization service. We conducted demonstration experiments with the developed module generating pseudo DDoS attacks. The result shows that the proposed module achieves high recall and precision values, indicating its usefulness in the real time event detection on IoT.