Classifying Botnet Attack on Internet of Things Device Using Random Forest

International Conference on SMART CITY Innovation 2018

Irfan^1 ; Wildani, I.M.^1 ; Yulita, I.N.^1

Universitas Padjadjaran, Jalan Raya Bandung Sumedang KM 21, Hegarmanah, Jatinangor, Sumedang, West-Java

45363, Indonesia^1

关键词: Data traffic;    F measure;    Internet of Things (IOT);    K-nearest neighbors;    Naive bayes;    Normal condition;    Random forests;   

Others  :  https://iopscience.iop.org/article/10.1088/1755-1315/248/1/012002/pdf
DOI  :  10.1088/1755-1315/248/1/012002

来源: IOP

【 摘 要 】

We live in Industry 4.0 where Internet of Things (IoT) is a new developing environment. A lot of researcher is trying to develop this new technology. As this technology is starting to become big, people try to attack the system of this technology. Luckily, a dataset contains of unattacked environment and attacked environment exist. The purpose of this research is to classify the incoming data in the IoT, contain a malware or not. In this research, we under sample the dataset because the datasets contain imbalance class. After that, we classify the sample using Random Forest. We use Naive Bayes, K-Nearest Neighbor and Decision Tree too as a comparison. The dataset that has been used in this research are from UCI Machine Learning Depository's Website. The dataset shows the data traffic from the IoT Device in a normal condition and attacked by Mirai or Bashlite. Random Forest gets greatest accuracy with 99.99% value with Precision, Recall, and F-Measure get 100% value. The score is followed by Decision Tree with 99.98% accuracy, KNN with 99.94% accuracy and Naive Bayes with 99.00% accuracy.