Cited by 230Network Security and Intrusion DetectionInternet of Things and AIIoT and Edge/Fog Computing

A Framework for Malicious Traffic Detection in IoT Healthcare Environment

Open access
Hussain, Faisal, Abbas, Syed Ghazanfar, Shah, Ghalib A., Pires, Ivan Miguel, Fayyaz, Ubaid U., Shahzad, Farrukh, Garcia, Nuno M., Zdravevski, Eftim·2021·Sensors

Abstract

The Internet of things (IoT) has emerged as a topic of intense interest among the research and industrial community as it has had a revolutionary impact on human life. The rapid growth of IoT technology has revolutionized human life by inaugurating the concept of smart devices, smart healthcare, smart industry, smart city, smart grid, among others. IoT devices’ security has become a serious concern nowadays, especially for the healthcare domain, where recent attacks exposed damaging IoT security vulnerabilities. Traditional network security solutions are well established. However, due to the resource constraint property of IoT devices and the distinct behavior of IoT protocols, the existing security mechanisms cannot be deployed directly for securing the IoT devices and network from the cyber-attacks. To enhance the level of security for IoT, researchers need IoT-specific tools, methods, and datasets. To address the mentioned problem, we provide a framework for developing IoT context-aware security solutions to detect malicious traffic in IoT use cases. The proposed framework consists of a newly created, open-source IoT data generator tool named IoT-Flock. The IoT-Flock tool allows researchers to develop an IoT use-case comprised of both normal and malicious IoT devices and generate traffic. Additionally, the proposed framework provides an open-source utility for converting the captured traffic generated by IoT-Flock into an IoT dataset. Using the proposed framework in this research, we first generated an IoT healthcare dataset which comprises both normal and IoT attack traffic. Afterwards, we applied different machine learning techniques to the generated dataset to detect the cyber-attacks and protect the healthcare system from cyber-attacks. The proposed framework will help in developing the context-aware IoT security solutions, especially for a sensitive use case like IoT healthcare environment.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.3390/s21093025

Cites

27 of 27 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 3

  1. [27]KDD Cup 1999 Data Available online: http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html (accessed on 4 February 2021)
  2. [28]NSL-KDD Dataset Available online: https://www.unb.ca/cic/datasets/nsl.html (accessed on 6 February 2021)
  3. [46]A-Framework-for-Malicious-Traffic-Detection-in-IoT-Healthcare-Environment Available online: https://github.com/ThingzDefense/A-Framework-for-Malicious-Traffic-Detection-in-IoT-Healthcare-Environment (accessed on 16 April 2021) PMC8123414 33925813

Cited by

Sorted by citations

Authors
Hussain, F., Abbas, S. G., Shah, G. A., Pires, I. M., Fayyaz, U. U., Shahzad, F., Garcia, N. M., & Zdravevski, E.
Affiliations
  • University of Engineering and Technology Lahore (PK)
  • University of Beira Interior (PT)
  • Instituto de Telecomunicações, Universidade da Beira Interior, 6200-001 Covilhã, Portugal
  • Ss. Cyril and Methodius University in Skopje (MK)
Corresponding author
  • Hussain, Faisal
  • Pires, Ivan Miguel
Venue
Sensors
Publisher
MDPI AG
Published
2021-04-26
Volume
21
Issue
9
Pages
3025
ISSN
1424-8220 (ISSN-L)
OpenAlex
W3159885303
Cited by
230
References
27
Citations by year
2026: 29 · 2025: 50 · 2024: 72 · 2023: 40 · 2022: 30 · 2021: 9
FWCI
16.93
Type
journal article
Language
en
Open access
Locations
  • Sensors (publishedVersion, cc-by)
  • PubMed Central (publishedVersion, cc-by)
  • PubMed (publishedVersion)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Funders
  • Ministerio de Economía y Competitividad (PT2020)
  • Fundação para a Ciência e a Tecnologia (UIDB/00742/2020, UIDB/50008, PT2020, UIDB/50008/2020, 50008)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
Keywords
malicious traffic detection, Internet of Things security, Internet of Medical Things, cyberattack detection, context-aware security, resource-constrained devices, machine learning for intrusion detection
MeSH terms
Internet of Things, Cities, Confidentiality, Delivery of Health Care, Humans, Computer Security

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review