IoT Device Attack Surface Feature Identification using Differentiated Dynamic Monitoring

Due to IoT device's heterogeneous characteristics, the dynamic stability monitoring for multiple types of IoT device cannot be achieved by single behavior monitoring technology. In this paper, a differentiated dynamic monitoring method is proposed for IoT device oriented to attack surface feature identification. The IoT device's basic information is obtained with probe program, and then the characteristics of the devices' attack surface are analyzed. Dynamic monitoring decision analysis model is developed to search the monitoring strategy for device adaptation. Based on the lightweight monitoring software framework, customized monitoring modules are generated to achieve lightweight on-demand monitoring of attack threats. Extensive experiments are performed for device dynamic monitoring strategy selection, showing that appropriate monitoring strategy can be selected effectively, and it can capture the characteristics of IoT device attack surface feature well, and improve the efficiency and accuracy of dynamic behavior monitoring.