Title
Passive Inference Of User Actions Through Iot Gateway Encrypted Traffic Analysis
Abstract
Internet of Things (IoT) devices become widely used and their control is often provided through a cloud-based web service that interacts with an IoT gateway, in particular for individual users and home automation.In this paper, we propose a technique to infer private user information, i.e., actions performed, by considering a vantage point outside the end-user local IoT network. By learning the relationships between the user actions and the traffic sent by the web service to the gateway, we have been able to establish elementary signatures, one for each possible action, which can be then composed to discover compound actions in encrypted traffic.We evaluated the efficiency of our approach on one IoT gateway interacting with up to 16 IoT devices and showed that a passive attacker can infer user activities with an accuracy above 90%.
Year
Venue
Keywords
2019
2019 IFIP/IEEE SYMPOSIUM ON INTEGRATED NETWORK AND SERVICE MANAGEMENT (IM)
Internet of Things, fingerprinting, encrypted traffic, security, privacy
Field
DocType
Citations 
Traffic analysis,Computer science,Inference,Computer network,Home automation,User information,Encryption,Default gateway,Web service,Cloud computing
Conference
0
PageRank 
References 
Authors
0.34
0
3
Name
Order
Citations
PageRank
Pierre-Marie Junges100.34
Jérôme François217021.81
Olivier Festor366585.40