journal article·2022-10-26Open access

A Study on Improving M2M Network Security through Abnormal Traffic Control

Seongsoo Cho, Bhanu Shrestha

Applied Sciences· Volume 12· Issue 21

Abstract

Machine-to-machine (M2M) intelligent network devices are exposed to vulnerable networks and security threats always exist. The devices are composed of low-capacity hardware by their nature and are exposed to various security threats such as worms, viruses and distributed denial of service (DDoS) flooding attacks due to lack of security or antivirus programs installed in the personal computer environment. In this paper, we proposed a network filter that improves the security of M2M intelligent networks by configuring the network security filter in a specific form that can be adapted to M2M intelligent networks. The proposed filter increases user convenience and decreases unnecessary loss. Experimental results show that when the security filter is applied, the response speed of the device improved by more than 50% in an abnormal traffic environment with a cost of less than 10% delay, depending upon the characteristics of the device.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · IoT and Edge/Fog Computing · Internet of Things and Social Network Interactions

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

School of Computer Science and Engineering, Soongsil University, Seoul 07027, Korea

Department of Electronics Engineering, Kwangwoon University, Seoul 01897, Korea

Funding

National Research Foundation of Korea

References (35)

Show source-provided references
1. Toward intelligent machine-to-machine communications in smart grid10.1109/MCOM.2011.5741147 ↗
2. Towards smart city: M2M communications with software agent intelligence10.1007/s11042-012-1013-4 ↗
3. Understanding the Internet of Things: Definition, potentials, and societal role of a fast evolving paradigm10.1016/j.adhoc.2016.12.004 ↗
4. A survey of intrusion detection systems in smart grid10.1504/IJSNET.2017.083410 ↗
5. Internet of Things (IoT) for Smart City, Agriculture and Healthcare
6. How smart, connected products are transforming competition
7. Detection of clone node attack in mobile wireless sensor network with optimised cost function10.1504/IJSNET.2017.085761 ↗
8. Design and Implementation of a Speed-reactive Connected Mobile Virtual Fence System with Context-aware Computing
9. IOT: To enhance automatic accident notification using M2M technologies
10. Reusability Strategy Based on Dynamic Reusability Object Oriented Metrics
11. Heuristic recommendation technique in Internet of Things featuring swarm intelligence approach10.1016/j.eswa.2021.115904 ↗
12. Agents-based algorithm for a distributed information system in Internet of Things10.1109/JIOT.2021.3074830 ↗
13. Internet of things: Applications and challenges in technology and standardization10.1007/s11277-011-0288-5 ↗
14. Multipath routing technique for responding to sniffing attacks in wireless multimedia sensor network environment10.1504/IJSNET.2017.085764 ↗
15. An information framework for creating a smart city through internet of things10.1109/JIOT.2013.2296516 ↗
16. EasiSec: A SoC security coprocessor based on fingerprint–based key management for WSN10.1504/IJSNET.2013.053722 ↗
17. Sadeghi, A.R., Wachsmann, C., and Waidner, M. (2015, January 8–12). Security and privacy challenges in industrial internet of things. Proceedings of the 52nd ACM/EDAC/IEEE DAC, California, CA, USA.10.1145/2744769.2747942 ↗
18. Information security and privacy in healthcare: Current state of research10.1504/IJIEM.2010.035624 ↗
19. An integrated data-driven scheme for the defense of typical cyber–physical attacks10.1016/j.ress.2021.108257 ↗
20. (2022, August 10). SHODAN the Computer Search Engine. Available online: https://www.shodan.io/.
21. (2022, August 10). Cyber Search Engine Shodan Exposes Industrial Control Systems to New Risks. Available online: https://www.washingtonpost.com/investigations/cyber-search-engine-exposes-vulnerabili-ties/2012/06/03/gJQAIK9KCV_story.html.
22. ShoVAT: Shodan-based vulnerability assessment tool for Internet-facing services10.1002/sec.1262 ↗
23. Furrer, F.J. (2022). Cyber-Physical Systems. Safety and Security of Cyber-Physical Systems, Springer Vieweg.10.1007/978-3-658-37182-1 ↗
24. Evaluation of the ability of the Shodan search engine to identify Internet-facing industrial control devices10.1016/j.ijcip.2014.03.001 ↗
25. Teach foundational language principles10.1145/2663342 ↗
26. Wang, J., Zhao, M., Zeng, Q., Wu, D., and Liu, P. (2015, January 22–25). Risk assessment of buffer “Heartbleed” over-read vulnerabilities. Proceedings of the 45th Annual IEEE/IFIP International Conference on DSN, Rio de Janeiro, Brazil.10.1109/DSN.2015.59 ↗
27. Tundis, A., Modo Nga, E.M., and Mühlhäuser, M. (2021, January 17–20). An exploratory analysis on the impact of Shodan scanning tool on the network attacks. Proceedings of the 16th International Conference on Availability, Reliability and Security, Vienna, Austria.10.1145/3465481.3469197 ↗
28. (2022, August 10). Shodan: The Scariest Search Engine on the Internet. Available online: https://money.cnn.com/2013/04/08/technology/security/shodan/index.html.
29. (2022, August 10). The Open Web Application Security Project. Available online: https://www.owasp.org.
30. Hongsong, C., Zhongchuan, F., and Dongyan, Z. (2011, January 10–12). Security and trust research in M2M system. Proceedings of the IEEE International Conference on ICVES, Beijing, China.10.1109/ICVES.2011.5983830 ↗
31. Markowsky, L., and Markowsky, G. (2015, January 24–26). Scanning for vulnerable devices in the Internet of Things. Proceedings of the 8th International Conference on IEEE, IDAACS, Warsaw, Poland.10.1109/IDAACS.2015.7340779 ↗
32. (2022, August 10). February 28th DDoS Incident Report. Available online: https://githubengineering.com/ddos-incident-report.
33. Kührer, M., Hupperich, T., Rossow, C., and Holz, T. (2014, January 11–13). Exit from Hell? Reducing the Impact of Amplification DDoS Attacks. Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA.
34. Technologies and challenges in developing machine-to-machine applications: A survey10.1016/j.jnca.2017.02.002 ↗
35. (2022, August 10). Network Traffic Generator and Analyzer. Available online: https://ostinato.org.