Donghyun Kim, Jiho Shin, Jung Taek Seo, Journal of Internet Computing and Services, Vol. 24, No. 1, pp. 17-26, Feb. 2023
10.7472/jksii.2023.24.1.17, Full Text:  HTML
Keywords: Smart City, Internet of Things, Malware, Massive IoT, MITRE ATT&CK

Abstract

A smart city is a massive internet of things (IoT) environment, where all terminal devices are connected to a network to create and share information. In accordance with massive IoT environments, millions of IoT devices are connected, and countless data are generated in real time. However, since heterogeneous IoT devices are used, collecting the logs for each IoT device is difficult. Due to these issues, when an IoT device is invaded or is engaged in malicious behavior, such as infection with malware, it is difficult to respond quickly, and additional damage may occur due to information leakage or stopping the IoT device. To solve this problem, in this paper, we propose identifying the attack technique used for initial access to IoT devices through MITRE ATT&CK, collect the logs that can be generated from the identified attack technique, and use them to identify the cause of malware infection.

Statistics
Cite this article