IoTPOT: Analysing the Rise of IoT Compromises

Authors: 

Yin Minn Pa Pa, Shogo Suzuki, Katsunari Yoshioka, and Tsutomu Matsumoto, Yokohama National University; Takahiro Kasama, National Institute of Information and Communications Technology; Christian Rossow, Saarland University

Abstract: 

We analyze the increasing threats against IoT devices. We show that Telnet-based attacks that target IoT devices have rocketed since 2014. Based on this observation, we propose an IoT honeypot and sandbox, which attracts and analyzes Telnet-based attacks against various IoT devices running on different CPU architectures such as ARM, MIPS, and PPC. By analyzing the observation results of our honeypot and captured malware samples, we show that there are currently at least 4 distinct DDoS malware families targeting Telnet-enabled IoT devices and one of the families has quickly evolved to target more devices with as many as 9 different CPU architectures.

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

BibTeX
@inproceedings {191952,
author = {Yin Minn Pa Pa and Shogo Suzuki and Katsunari Yoshioka and Tsutomu Matsumoto and Takahiro Kasama and Christian Rossow},
title = {{IoTPOT}: Analysing the Rise of {IoT} Compromises},
booktitle = {9th USENIX Workshop on Offensive Technologies (WOOT 15)},
year = {2015},
address = {Washington, D.C.},
url = {https://www.usenix.org/conference/woot15/workshop-program/presentation/pa},
publisher = {USENIX Association},
month = aug
}
Download
Pa PDF
View the slides