Botnet detection system and method for IoT environment, and storage medium

Abstract

The invention discloses a botnet detection system and method for an IoT environment, and belongs to the technical field of intrusion detection. The method comprises the following steps: a flow collector monitoring the flow of monitored IoT equipment, and obtaining a flow data packet conforming to a to-be-detected rule based on a white list mechanism; the storage unit storing a flow data packet acquired by the flow collector; the data packet analyzer analyzing the content in the traffic data packet stored in the storage unit and obtaining IP information after analysis, and the IP information comprising time, a source IP, a destination IP, a source address and a destination address; the feature extractor extracting all statistical features of the IP information and performing feature dimension reduction processing in feature engineering to obtain three statistical features ranked in the front; and the sample detector carrying out malicious behavior judgment detection on the obtained three statistical characteristics based on a detection model constructed by a decision tree algorithm. The botnet detection method and device are used for botnet detection of the IoT environment.

Description

technical field [0001] A system and method for detecting a botnet in an IoT environment, which is used for detecting a botnet in an IoT environment, belongs to the field of intrusion detection technology, and specifically adopts an offline method to design an automated IoT traffic detection system, and can use The detection model of the detection system is updated in a plug-in way. Background technique [0002] IoT devices are showing a momentum of rapid development in today's Internet. Communication technologies such as the Internet of Things significantly surpass the perception of the surrounding environment by traditional technologies, which endow devices with the ability to collect, quantify and understand the surrounding environment. The Internet of Things is one of the fastest growing fields in the history of computers. A survey conducted by CISCO shows that the number of Internet of Things devices is rising every year, exceeding 50 billion in 2020, and 44ZB of data w...

AI Technical Summary

Problems solved by technology

[0009] In view of the problems of the above research, the purpose of the present invention is to provide a system and method for detecting botnets in the IoT environment, so as to solve the problem that the existing botnet detection technology cannot operate normally in the case of limited resources in the IoT environment

Images