Towards a conversational agent for threat detection in the internet of things.

McDermott, Christopher D.; Jeannelle, Bastien; Isaacs, John P.

Abstract

A conversational agent to detect anomalous traffic in consumer IoT networks is presented. The agent accepts two inputs in the form of user speech received by Amazon Alexa enabled devices, and classified IDS logs stored in a DynamoDB Table. Aural analysis is used to query the database of network traffic, and respond accordingly. In doing so, this paper presents a solution to the problem of making consumers situationally aware when their IoT devices are infected, and anomalous traffic has been detected. The proposed conversational agent addresses the issue of how to present network information to non-technical users, for better comprehension, and improves awareness of threats derived from the mirai botnet malware.

Citation

MCDERMOTT, C.D., JEANNELLE, B. and ISAACS, J.P. 2019. Towards a conversational agent for threat detection in the internet of things. In Proceedings of the 2019 International Cyber science on cyber situational awareness, data analytics and assessment (Cyber SA): pioneering research and innovation in cyber situational awareness, 3-4 June 2019, Oxford, UK. Piscataway: IEEE [online], chapter 6. Available from: https://doi.org/10.1109/CyberSA.2019.8899580

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2019 International Cyber science on cyber situational awareness, data analytics and assessment (Cyber SA): pioneering research and innovation in cyber situational awareness
• Start Date: Jun 3, 2019
• End Date: Jun 4, 2019
• Acceptance Date: Mar 26, 2019
• Online Publication Date: Nov 14, 2019
• Publication Date: Nov 14, 2019
• Deposit Date: Nov 21, 2019
• Publicly Available Date: Nov 21, 2019
• Publisher: Institute of Electrical and Electronics Engineers (IEEE)
• Peer Reviewed: Peer Reviewed
• Chapter Number: Chapter 6
• DOI: https://doi.org/10.1109/CyberSA.2019.8899580
• Keywords: Situational awareness; Intrusion detection; Botnet; DDoS; Amazon echo; Alexa; Virtual assistant; Conversational agent
• Public URL: https://rgu-repository.worktribe.com/output/782853