Network Traffic Characteristics of IoT Devices in Smart Homes

TL;DR

This study analyzes network traffic of IoT devices in smart homes to understand their behavior, aiding in the development of better security and performance algorithms by examining server connections, flow durations, and packet timings.

Contribution

It provides a detailed analysis of IoT network traffic characteristics in smart homes, filling a gap in existing research and supporting improved security and performance solutions.

Findings

IoT devices connect to diverse remote servers and ports.

Flow durations vary significantly across device types.

Packet inter-arrival times reveal behavioral patterns.

Abstract

Understanding network traffic characteristics of IoT devices plays a critical role in improving both the performance and security of IoT devices, including IoT device identification, classification, and anomaly detection. Although a number of existing research efforts have developed machine-learning based algorithms to help address the challenges in improving the security of IoT devices, none of them have provided detailed studies on the network traffic characteristics of IoT devices. In this paper we collect and analyze the network traffic generated in a typical smart homes environment consisting of a set of common IoT (and non-IoT) devices. We analyze the network traffic characteristics of IoT devices from three complementary aspects: remote network servers and port numbers that IoT devices connect to, flow-level traffic characteristics such as flow duration, and packet-level traffic characteristics such as packet inter-arrival time. Our study provides critical insights into the operational and behavioral characteristics of IoT devices, which can help develop more effective security and performance algorithms for IoT devices.