• Citer

SmartRouter: Enhancing IoT Security in Small Office, Home Office: Hybrid approach for detecting infected IoT devices

par Villeret, Florian
Promoteur Debatty, Thibault
Co-Promoteur Croix, Alexandre
Publication Non publié, 2024-09-02

Mémoire

• Accès en ligne
• Détails
• Contenu
• Statistiques

Résumé :

The Internet of Things (IoT) has been experiencing exponential growth in recent years, evolving from simple temperature sensors to connected cars, becoming omnipresent in our daily lives. However, this rapid growth has led to significant security issues, particularly in small networks that are often poorly equipped to face cyber threats.The objective of this master’s thesis is to design and implement an intelligent router (SmartRouter) capable of detecting anomalies and threats affecting IoT devices in Small Office, Home Office (SOHO) environments.To achieve this objective, a literature review was conducted to understand the security of IoT devices and various detection methods. This review determined that the solution would consist of a network intrusion detection system (NIDS) combined with a cyber threat intelligence (CTI) platform. The methodology used to build this system in such an IoT environment, as well as its detailed architecture and installation, is described in detail. Several use cases were set up to evaluate the performance and limitations of the SmartRouter in terms of threat detection.The results of different test scenarios show that the solution can efficiently identify a significant number of suspicious behaviors of compromised IoT devices across the network. However, the solution is not effective in detecting threats through encrypted traffic. These results partially demonstrate the effectiveness of the integrated NIDS and CTI platform, enabling better threat management in real-time. The overall results suggest that future developments, including enhancing Snort rules, incorporating additional data from CTI sources, and strengthening detection capabilities for encrypted traffic, will significantly increase the detection rate.In short, this work demonstrates the feasibility of an intelligent router dedicated to detecting a large majority of infected IoT devices in a SOHO network. Despite its weakness regarding encrypted traffic, it remains a valuable tool to enhance the security of these small infrastructures, offering appropriate protection against growing threats in IoT environments.