Analyzing Consumer IoT Traffic from Security and Privacy Perspectives: a Comprehensive Survey
Not on the map. Why?
Abstract (arXiv)
The Consumer Internet of Things (CIoT), a notable segment within the IoT domain, involves the integration of IoT technology into consumer electronics and devices, such as smart homes and smart wearables. Compared to traditional IoT fields, CIoT differs notably in target users, product types, and design approaches. While offering convenience to users, it also raises new security and privacy concerns. Network traffic analysis, a widely used technique in the security community, has been extensively applied to investigate these concerns about CIoT. Compared to traditional network traffic analysis in fields like mobile apps and websites, CIoT introduces unique characteristics that pose new challenges and research opportunities. Researchers have made significant contributions in this area. To aid researchers in understanding the application of traffic analysis tools for assessing CIoT security and privacy risks, this survey reviews 310 publications on traffic analysis within the CIoT security and privacy domain from January 2018 to June 2024, focusing on three research questions. Our work: 1) outlines the CIoT traffic analysis process and highlights its differences from general network traffic analysis. 2) summarizes and classifies existing research into four categories according to its application objectives: device fingerprinting, user activity inference, malicious traffic detection, and measurement. 3) explores emerging challenges and potential future research directions based on each step of the CIoT traffic analysis process. This will provide new insights to the community and guide the industry towards safer product designs.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 40 of its 211 references that are in the map. First posted on arXiv 24 Mar 2024.
Builds on
40 of 211 references.
References · 40
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,211
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2015A Critical Review of Recurrent Neural Networks for Sequence Learningcited by 223
- 2018Towards the Development of Realistic Botnet Dataset in the Internet of Things for Network Forensic Analytics: Bot-IoT Datasetcited by 98
- 2018D"IoT: A Federated Self-learning Anomaly Detection System for IoTcited by 89
- 2018N-BaIoT: Network-based Detection of IoT Botnet Attacks Using Deep Autoencoderscited by 67
- 2016IoT Sentinel: Automated Device-Type Identification for Security Enforcement in IoTcited by 30
- 2020New Directions in Automated Traffic Analysiscited by 26
- 2020Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectorscited by 25
- 2020A Survey on Device Behavior Fingerprinting: Data Sources, Techniques, Application Scenarios, and Datasetscited by 15
- 2018Peek-a-Boo: I see your smart home activities, even encrypted!cited by 8
- 2022Tracking, Profiling, and Ad Targeting in the Alexa Echo Smart Speaker Ecosystemcited by 7
28 more
- 2017A Smart Home is No Castle: Privacy Vulnerabilities of Encrypted IoT Trafficcited by 6
- 2019Your Smart Home Can't Keep a Secret: Towards Automated Fingerprinting of IoT Traffic with Neural Networkscited by 6
- 2020A Haystack Full of Needles: Scalable Detection of IoT Devices in the Wildcited by 6
- 2020Timely Detection and Mitigation of Stealthy DDoS Attacks via IoT Networkscited by 5
- 2021Blocking without Breaking: Identification and Mitigation of Non-Essential IoT Trafficcited by 5
- 2018Identification of Wearable Devices with Bluetoothcited by 4
- 2020IoTGaze: IoT Security Enforcement via Wireless Context Analysiscited by 4
- 2021IoTDevID: A Behavior-Based Device Identification Method for the IoTcited by 4
- 2023Protected or Porous: A Comparative Analysis of Threat Detection Capability of IoT Safeguardscited by 4
- 2018Keeping the Smart Home Private with Smart(er) IoT Traffic Shapingcited by 3
- 2019IoT Inspector: Crowdsourcing Labeled Network Traffic from Smart Home Devices at Scalecited by 3
- 2020Traffic Refinery: Cost-Aware Data Representation for Machine Learning on Network Trafficcited by 3
- 2022IoTGAN: GAN Powered Camouflage Against Machine Learning Based IoT Device Identificationcited by 3
- 2017Spying on the Smart Home: Privacy Attacks and Defenses on Encrypted IoT Trafficcited by 2
- 2018Security and Privacy Analyses of Internet of Things Children's Toyscited by 2
- 2019Securing Fog-to-Things Environment Using Intrusion Detection System Based On Ensemble Learningcited by 2
- 2019IoT or NoT: Identifying IoT Devices in a ShortTime Scalecited by 2
- 2020Botnet Detection Using Recurrent Variational Autoencodercited by 2
- 2020I Always Feel Like Somebody's Sensing Me! A Framework to Detect, Identify, and Localize Clandestine Wireless Sensorscited by 2
- 2020Cost-aware Feature Selection for IoT Device Classificationcited by 2
- 2021ZLeaks: Passive Inference Attacks on Zigbee based Smart Homescited by 2
- 2018Automatic Device Classification from Network Traffic Streams of Internet of Thingscited by 1
- 2019Real-time Analysis of Privacy-(un)aware IoT Applicationscited by 1
- 2020A Survey on Analyzing Encrypted Network Traffic of Mobile Devicescited by 1
- 2021IoTAthena: Unveiling IoT Device Activities from Network Trafficcited by 1
- 2021Network Traffic Shaping for Enhancing Privacy in IoT Systemscited by 1
- 2022MPInspector: A Systematic and Automatic Approach for Evaluating the Security of IoT Messaging Protocolscited by 1
- 2022Deep Dive into the IoT Backend Ecosystemcited by 1
Built on by
Not cited yet.