{"id":"https://openalex.org/W2891585364","doi":"https://doi.org/10.1109/mcom.2018.1700685","title":"Internet of Malicious Things: Correlating Active and Passive Measurements for Inferring and Characterizing Internet-Scale Unsolicited IoT Devices","display_name":"Internet of Malicious Things: Correlating Active and Passive Measurements for Inferring and Characterizing Internet-Scale Unsolicited IoT Devices","publication_year":2018,"publication_date":"2018-09-01","ids":{"openalex":"https://openalex.org/W2891585364","doi":"https://doi.org/10.1109/mcom.2018.1700685","mag":"2891585364"},"language":"en","primary_location":{"id":"doi:10.1109/mcom.2018.1700685","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mcom.2018.1700685","pdf_url":null,"source":{"id":"https://openalex.org/S158797327","display_name":"IEEE Communications Magazine","issn_l":"0163-6804","issn":["0163-6804","1558-1896"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Communications Magazine","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090941366","display_name":"Mohd. Farooq Shaikh","orcid":"https://orcid.org/0000-0001-9865-6224"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Farooq Shaikh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039079298","display_name":"Elias Bou\u2010Harb","orcid":"https://orcid.org/0000-0001-8040-4635"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Elias Bou-Harb","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054854811","display_name":"Nataliia Neshenko","orcid":"https://orcid.org/0000-0002-8404-3475"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nataliia Neshenko","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074700596","display_name":"Andrea P. Wright","orcid":"https://orcid.org/0000-0001-9359-9187"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andrea P. Wright","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5022742519","display_name":"Nasir Ghani","orcid":"https://orcid.org/0000-0002-9475-7439"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nasir Ghani","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.1505,"has_fulltext":false,"cited_by_count":47,"citation_normalized_percentile":{"value":0.94438987,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"56","issue":"9","first_page":"170","last_page":"177"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7969125509262085},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.765131950378418},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6473701000213623},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6065947413444519},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.579585611820221},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.3453635573387146},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.21374332904815674}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7969125509262085},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.765131950378418},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6473701000213623},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6065947413444519},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.579585611820221},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.3453635573387146},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.21374332904815674}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/mcom.2018.1700685","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mcom.2018.1700685","pdf_url":null,"source":{"id":"https://openalex.org/S158797327","display_name":"IEEE Communications Magazine","issn_l":"0163-6804","issn":["0163-6804","1558-1896"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Communications Magazine","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6299999952316284}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1969595988","https://openalex.org/W1983442091","https://openalex.org/W2119812052","https://openalex.org/W2123070675","https://openalex.org/W2343978497","https://openalex.org/W2354520588","https://openalex.org/W2358552375","https://openalex.org/W2613352518","https://openalex.org/W2613843087","https://openalex.org/W6678042037","https://openalex.org/W6706876442","https://openalex.org/W7038140440"],"related_works":["https://openalex.org/W1979706594","https://openalex.org/W3159690896","https://openalex.org/W2945572725","https://openalex.org/W1989286518","https://openalex.org/W2124456408","https://openalex.org/W4230824443","https://openalex.org/W2921012173","https://openalex.org/W2758517546","https://openalex.org/W3134680667","https://openalex.org/W2804396347"],"abstract_inverted_index":{"Advancements":[0],"in":[1,27,92,151,183,220,258,286,296,351],"computing,":[2],"communication,":[3],"and":[4,14,25,42,63,95,109,119,144,168,197,264,306,337],"sensing":[5],"technologies":[6],"are":[7,22,175,339],"making":[8],"it":[9,98],"possible":[10],"to":[11,39,46,59,85,200,228,253,277,341,353,355],"embed,":[12],"control,":[13],"gather":[15],"vital":[16],"information":[17],"from":[18],"tiny":[19],"devices":[20,78,128,173,257,328],"that":[21,106,174,282],"being":[23],"deployed":[24,177,285],"utilized":[26],"practically":[28],"every":[29],"aspect":[30],"of":[31,66,76,89,116,122,137,158,161,170,217,225,235,242,299,319,325],"our":[32,47,61,67],"modernized":[33],"society.":[34],"From":[35],"smart":[36,265],"home":[37,266],"appliances":[38],"municipal":[40],"water":[41],"electric":[43],"industrial":[44],"facilities":[45],"everyday":[48],"work":[49,208,321],"environments,":[50],"the":[51,73,80,102,114,120,134,152,155,164,179,215,223,232,236,297,304,323,334],"next":[52,135],"Internet":[53,246,331],"frontier,":[54],"dubbed":[55],"IoT,":[56,300],"is":[57,83,181],"promising":[58],"revolutionize":[60],"lives":[62],"tackle":[64],"some":[65],"nations'":[68],"most":[69],"pressing":[70],"challenges.":[71],"While":[72,147],"seamless":[74],"interconnection":[75],"IoT":[77,162,172,205,237,256,288,308,349,356],"with":[79,222,245],"physical":[81],"realm":[82],"envisioned":[84],"bring":[86],"a":[87,159,210],"plethora":[88],"critical":[90,123,262],"improvements":[91],"many":[93],"aspects":[94],"diverse":[96,259],"domains,":[97],"will":[99,107,129],"undoubtedly":[100],"pave":[101],"way":[103],"for":[104,344],"attackers":[105],"target":[108],"exploit":[110],"such":[111,126,326],"devices,":[112,163,350],"threatening":[113],"integrity":[115],"their":[117,140,274],"data":[118,294,311],"reliability":[121],"infrastructure.":[124],"Further,":[125],"compromised":[127,255,327,348],"undeniably":[130],"be":[131,284,342],"leveraged":[132],"as":[133],"generation":[136],"botnets,":[138],"given":[139],"increased":[141],"processing":[142],"capabilities":[143],"abundant":[145],"bandwidth.":[146],"several":[148],"demonstrations":[149],"exist":[150],"literature":[153],"describing":[154],"exploitation":[156],"procedures":[157],"number":[160],"up-to-date":[165],"inference,":[166],"characterization,":[167],"analysis":[169],"unsolicited":[171,203],"currently":[176],"\"in":[178],"wild\"":[180],"still":[182],"its":[184],"infancy.":[185],"In":[186],"this":[187,191,269,320],"article,":[188],"we":[189,250,271,301],"address":[190],"imperative":[192],"task":[193],"by":[194],"leveraging":[195],"active":[196,226],"passive":[198,218],"measurements":[199,219,227],"report":[201],"on":[202,231,329],"Internet-scale":[204,233],"devices.":[206],"This":[207],"describes":[209],"first":[211],"step":[212],"toward":[213],"exploring":[214],"utilization":[216],"combination":[221],"results":[224,241],"shed":[229],"light":[230],"insecurities":[234],"paradigm.":[238],"By":[239],"correlating":[240],"Internet-wide":[243],"scanning":[244],"background":[247],"radiation":[248],"traffic,":[249],"disclose":[251],"close":[252],"14,000":[254],"sectors,":[260],"including":[261],"infrastructure":[263],"appliances.":[267],"To":[268,290],"end,":[270],"also":[272],"analyze":[273],"generated":[275,335],"traffic":[276],"create":[278],"effective":[279],"mitigation":[280],"signatures":[281],"could":[283],"local":[287],"realms.":[289],"support":[291],"largescale":[292],"empirical":[293],"analytics":[295],"context":[298],"make":[302],"available":[303],"inferred":[305],"extracted":[307],"malicious":[309],"raw":[310],"through":[312],"an":[313,330],"authenticated":[314],"front-end":[315],"service.":[316],"The":[317],"outcomes":[318],"confirm":[322],"existence":[324],"scale,":[332],"while":[333],"inferences":[336],"insights":[338],"postulated":[340],"employed":[343],"inferring":[345],"other":[346],"similarly":[347],"addition":[352],"contributing":[354],"cyber":[357],"security":[358],"situational":[359],"awareness.":[360]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
