학술논문

IoT Network Forensics based on Transport Layer
Document Type
Conference
Source
2023 IEEE Conference on Computer Applications (ICCA) Computer Applications (ICCA), 2023 IEEE Conference on. :312-317 Feb, 2023
Subject
Communication, Networking and Broadcast Technologies
Components, Circuits, Devices and Systems
Computing and Processing
Geoscience
Robotics and Control Systems
Signal Processing and Analysis
Protocols
Home automation
Smart cities
Forensics
Wireless personal area networks
Authentication
Network analyzers
IoT
Network Forensics
IoT Forensics
Denial of Service
TCP-SYN flood
Language
Abstract
The IoT is concerned in every part of the human beings such as medical care, education, smart cities, home automation, and many business fields. While the IoT gives a myriad of benefits, security remains the biggest issues for using of many IoT applications in various environments. The emergence of new technologies in various fields also pose challenges in the field of forensic researches. It is said that Device Level forensics, Network Level forensics, and Cloud Level forensics are the three types of IoT forensics levels. Among them, Network Level forensics shows all kinds of communication networks that connected to IoT devices over the Internet. In this study, detecting and analyzing TCP-SYN flooding attacks and UDP flooding attacks based on Transport Layer (one type of DoS attacks), network forensics investigation over the traffics are presented. Capturing TCP-SYN flooding attacks and UDP flooding attacks and analyzing them with IO graphs by using Wireshark Network Analysis Tool is also described in this paper.