Detecting IoT zombie attacks on web servers

摘要

Internet of Things (IoT) devices pose a serious threat to the web as poorly configured or faulty devices can be used for massive Distributed Denial of Service attacks. High jacked IoT devices that act like real users are a particular problem that present significant difficulties for traditional detection methods. An adaptive, real time scoring system for detecting such attacks is proposed that does not punish profitable flash crowds as do current methods. This system employs an energy efficient architecture and thus web server system power usage is reduced.