{"id":"https://openalex.org/W6908682181","doi":"https://doi.org/10.26190/unsworks/3922","title":"IoT Behavioral Monitoring via Network Traffic Analysis","display_name":"IoT Behavioral Monitoring via Network Traffic Analysis","publication_year":2022,"publication_date":"2022-03-16","ids":{"openalex":"https://openalex.org/W6908682181","doi":"https://doi.org/10.26190/unsworks/3922"},"language":"en","primary_location":{"id":"pmh:oai:unsworks.library.unsw.edu.au:1959.4/65022","is_oa":true,"landing_page_url":"http://handle.unsw.edu.au/1959.4/65022","pdf_url":"http://handle.unsw.edu.au/1959.4/65022","source":{"id":"https://openalex.org/S4306401737","display_name":"UNSWorks (University of New South Wales, Sydney, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40053085","host_organization_name":"Australian Defence Force Academy","host_organization_lineage":["https://openalex.org/I40053085"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"http://purl.org/coar/resource_type/c_db06"},"type":"dissertation","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://handle.unsw.edu.au/1959.4/65022","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Sivanathan, Arunan","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Sivanathan, Arunan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.4424000084400177,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.4424000084400177,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.23330000042915344,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.0357000008225441,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6773999929428101},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5442000031471252},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.532800018787384},{"id":"https://openalex.org/keywords/home-automation","display_name":"Home automation","score":0.4498000144958496},{"id":"https://openalex.org/keywords/visibility","display_name":"Visibility","score":0.4000999927520752},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.3824000060558319},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.3312000036239624}],"concepts":[{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6773999929428101},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6478999853134155},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5479000210762024},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5442000031471252},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.532800018787384},{"id":"https://openalex.org/C507571656","wikidata":"https://www.wikidata.org/wiki/Q848436","display_name":"Home automation","level":2,"score":0.4498000144958496},{"id":"https://openalex.org/C123403432","wikidata":"https://www.wikidata.org/wiki/Q654068","display_name":"Visibility","level":2,"score":0.4000999927520752},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3824000060558319},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3312000036239624},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C115051666","wikidata":"https://www.wikidata.org/wiki/Q6522493","display_name":"Ranging","level":2,"score":0.28949999809265137},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.28040000796318054},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.25940001010894775}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:unsworks.library.unsw.edu.au:1959.4/65022","is_oa":true,"landing_page_url":"http://handle.unsw.edu.au/1959.4/65022","pdf_url":"http://handle.unsw.edu.au/1959.4/65022","source":{"id":"https://openalex.org/S4306401737","display_name":"UNSWorks (University of New South Wales, Sydney, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40053085","host_organization_name":"Australian Defence Force Academy","host_organization_lineage":["https://openalex.org/I40053085"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"http://purl.org/coar/resource_type/c_db06"},{"id":"doi:10.26190/unsworks/3922","is_oa":true,"landing_page_url":"https://doi.org/10.26190/unsworks/3922","pdf_url":null,"source":{"id":"https://openalex.org/S4377196481","display_name":"UNSWorks (UNSW Sydney)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I31746571","host_organization_name":"UNSW Sydney","host_organization_lineage":["https://openalex.org/I31746571"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Dissertation"}],"best_oa_location":{"id":"pmh:oai:unsworks.library.unsw.edu.au:1959.4/65022","is_oa":true,"landing_page_url":"http://handle.unsw.edu.au/1959.4/65022","pdf_url":"http://handle.unsw.edu.au/1959.4/65022","source":{"id":"https://openalex.org/S4306401737","display_name":"UNSWorks (University of New South Wales, Sydney, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40053085","host_organization_name":"Australian Defence Force Academy","host_organization_lineage":["https://openalex.org/I40053085"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"http://purl.org/coar/resource_type/c_db06"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W6908682181.pdf","grobid_xml":"https://content.openalex.org/works/W6908682181.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,62],"Internet":[1],"of":[2,27,67,82,92,100,121,133,149,189,217,239,265,298,311],"Things":[3],"(IoT)":[4],"is":[5,110,118],"being":[6,22],"hailed":[7],"as":[8,195],"the":[9,42,80,119,129,186,223,233,237,263,296,312],"next":[10],"wave":[11],"revolutionizing":[12],"our":[13,48,122,177,266,319],"society.":[14],"Smart":[15],"homes,":[16],"enterprises,":[17],"and":[18,35,47,53,65,138,144,161,173,184,198,213,256,260,284,328,330],"cities":[19],"are":[20,96],"increasingly":[21],"equipped":[23],"with":[24,58,210,225,337],"a":[25,203,288],"plethora":[26],"IoTs,":[28,134],"ranging":[29],"from":[30,114],"smart-lights":[31],"to":[32,44,75,79,124,127,168,271,304],"smoke":[33],"alarms":[34],"security":[36,54,72,159],"cameras.":[37],"While":[38],"IoT":[39,68,76,88,102,108,136,157,190,220,251,280,300,335],"networks":[40],"have":[41],"potential":[43],"benefit":[45],"society":[46],"lives,":[49],"they":[50],"create":[51],"privacy":[52],"challenges":[55],"not":[56,97],"seen":[57],"traditional":[59],"IT":[60],"networks.":[61,77],"unprecedented":[63],"scale":[64],"heterogeneity":[66],"devices":[69,191,221,301,336],"make":[70],"today's":[71],"measures":[73],"inapplicable":[74],"Due":[78],"lack":[81],"tools":[83],"for":[84,278],"real-time":[85,215],"visibility":[86],"into":[87],"network":[89,130,187],"activity,":[90],"operators":[91],"such":[93,194],"smart":[94],"environments":[95],"often":[98],"aware":[99],"their":[101,141],"assets,":[103],"let":[104],"alone":[105],"whether":[106],"each":[107],"device":[109,252],"functioning":[111],"properly":[112],"safe":[113],"cyber-attacks.":[115,150],"This":[116],"thesis":[117,154],"culmination":[120],"efforts":[123],"develop":[125,202],"techniques":[126],"profile":[128],"behavioral":[131,174,273],"pattern":[132],"automate":[135],"identification":[137],"classification,":[139],"deduce":[140],"operating":[142],"context,":[143],"detect":[145,272,323],"anomalous":[146],"behavior":[147,188],"indicative":[148],"We":[151,201,314],"begin":[152],"this":[153],"by":[155,235],"surveying":[156],"market-segments,":[158],"risks,":[160],"stakeholder":[162],"roles,":[163],"while":[164,248],"reviewing":[165],"current":[166],"approaches":[167],"vulnerability":[169],"assessments,":[170],"intrusion":[171],"detection,":[172],"monitoring.":[175],"For":[176],"first":[178],"contribution,":[179],"we":[180],"collect":[181],"traffic":[182],"traces":[183],"characterize":[185],"via":[192,316],"attributes":[193,212],"activity":[196],"cycles":[197],"signaling":[199],"patterns.":[200],"robust":[204],"machine":[205,268],"learning-based":[206],"inference":[207,291],"engine":[208,292],"trained":[209],"these":[211],"demonstrate":[214,262,315],"classification":[216,234],"28":[218],"off-the-shelf":[219],"in":[222,333],"lab":[224],"over":[226,338],"99%":[227],"accuracy.":[228,340],"Our":[229,282],"second":[230],"contribution":[231,286],"enhances":[232],"reducing":[236],"cost":[238],"attribute":[240],"extraction":[241],"(via":[242],"flow-level":[243],"telemetry":[244],"at":[245],"multiple":[246],"timescales)":[247],"also":[249],"identifying":[250],"states":[253],"(bootup,":[254],"user-interaction,":[255],"idle).":[257],"Prototype":[258],"implementation":[259],"evaluation":[261],"ability":[264],"supervised":[267],"learning":[269],"method":[270],"changes":[274,332],"(including":[275],"firmware":[276,331],"updates)":[277],"five":[279],"devices.":[281],"third":[283],"final":[285],"develops":[287],"modularized":[289],"unsupervised":[290],"that":[293,318],"dynamically":[294],"accommodates":[295],"addition":[297],"new":[299],"and/or":[302],"updates":[303],"existing":[305],"ones,":[306],"without":[307],"requiring":[308],"system-wide":[309],"retraining":[310],"model.":[313],"experiments":[317],"model":[320],"can":[321],"automatically":[322],"attacks":[324],"(e.g.:":[325],"direct,":[326],"spoofing,":[327],"reflection)":[329],"ten":[334],"94%":[339]},"counts_by_year":[],"updated_date":"2026-08-14T07:06:38.338062","created_date":"2025-10-10T00:00:00"}