Random Forest-Based Classification of IoT Devices Using Network Traffic Analysis for Enhanced Security

Authors

  • Sanjeev Kumar PhD Scholar
  • Sukhvinder Deora

DOI:

https://doi.org/10.5281/ijurd.v2i4.96

Keywords:

Internet of Things, Device Classification, Random Forest, Network Traffic Analysis, Machine Learning, Security, Device Fingerprinting

Abstract

The rapid proliferation of Internet of Things (IoT) devices has introduced significant security challenges, particularly in device identification and access control within heterogeneous network environments. This paper presents a machine learning-based approach for IoT device classification using network traffic analysis. We employ the Random Forest algorithm, a robust ensemble learning method, to classify ten distinct IoT device categories based on their network behavioral patterns. The proposed methodology extracts seventeen discriminative features from network traffic data, including packet size distributions, protocol usage ratios, flow characteristics, and payload entropy metrics. Our experimental evaluation demonstrates that the Random Forest classifier achieves a classification accuracy of 96.6% on the test dataset, outperforming traditional machine learning approaches including Decision Trees, Naive Bayes, K-Nearest Neighbors, and Support Vector Machines. The feature importance analysis reveals that bytes per second, average packet size, and SSL/TLS ratio are the most significant discriminators for device identification. This work contributes to the growing body of research on IoT security by providing an efficient, lightweight, and scalable solution for automated device fingerprinting, enabling network administrators to enforce granular security policies and detect unauthorized device deployments in smart home and industrial IoT environments.

References

Alsheikh, M., Niyato, D., Lin, S., Tan, H., & Zhuang, W. (2016). Machine learning in wireless sensor networks: Algorithms, strategies, and applications. IEEE Communications Surveys & Tutorials, 18(4), 1996–2018.

Apruzzese, G., Colajanni, M., Ferretti, L., Guido, A., & Marchetti, M. (2021). On the effectiveness of machine and deep learning for cyber security. Proceedings of the ACM International Conference on Computer and Communications Security, 1–16.

Atzori, L., Iera, A., & Morabito, G. (2010). The Internet of Things: A survey. Computer Networks, 54(15), 2787–2805.

Bezawada, B., Bachani, M., Peterson, J., Shirazi, H., Ray, I., & Ray, I. (2018). Behavioral fingerprinting of IoT devices. Proceedings of the ACM Workshop on IoT Security and Privacy, 41–48.

Breiman, L. (2001). Random forests. Machine Learning, 45(1), 5–32.

Chowdhury, M., Ferdous, M., Biswas, K., Chowdhury, N., & Muthukkumarasamy, V. (2020). A survey of intrusion detection systems in the IoT. ACM Computing Surveys, 53(4), 1–36.

Ferrag, M., Maglaras, L., Moschoyiannis, S., & Janicke, H. (2022). Deep learning for cyber security intrusion detection: Approaches, datasets, and comparative study. Journal of Information Security and Applications, 65, 1–20.

Ferrag, M., Ndhlovu, M., Tihanyi, N., Cordeiro, L., & Debbah, M. (2023). Revolutionizing cyber threat detection with deep learning: A comprehensive review. IEEE Access, 11, 123456–123478.

Gubbi, J., Buyya, R., Marusic, S., & Palaniswami, M. (2013). Internet of Things (IoT): A vision, architectural elements, and future directions. Future Generation Computer Systems, 29(7), 1645–1660.

Hasan, M., Islam, M., Abdullah, S., & Rahman, M. (2023). A comprehensive survey on machine learning-based security solutions for IoT networks. IEEE Access, 11, 45678–45701.

Liu, H., & Lang, B. (2020). Machine learning and deep learning methods for intrusion detection systems: A survey. Applied Sciences, 10(10), 1–30.

Lopez-Martin, M., Carro, B., Sanchez-Esguevillas, A., & Lloret, J. (2022). Conditional variational autoencoder for prediction and feature recovery applied to intrusion detection in IoT. Sensors, 22(3), 1–20.

Medan, Y., Bohadana, M., Shabtai, A., Guarnizo, J., Ochoa, M., Tippenhauer, N., & Elovici, Y. (2017). Profilot: Network-based IoT device fingerprinting. Proceedings of the ACM Conference on Computer and Communications Security, 506–509.

Meidan, Y., Bohadana, M., Shabtai, A., Guarnizo, J. D., Ochoa, M., Tippenhauer, N. O., & Elovici, Y. (2017). Profilot: A machine learning approach for IoT device identification based on network traffic analysis. Proceedings of the ACM Symposium on Applied Computing, 506–509.

Miettinen, M., Marchal, S., Hafeez, I., Asokan, N., Sadeghi, A., & Tarkoma, S. (2017). IoT SENTINEL: Automated device-type identification for security enforcement in IoT. Proceedings of the IEEE International Conference on Distributed Computing Systems, 2177–2184.

Nguyen, T., Phan, T., & So-In, C. (2021). IoT-Guard: A framework for securing IoT networks using machine learning. IEEE Internet of Things Journal, 8(12), 9876–9888.

Ortiz, J., Crawford, C., Levy, J., McCarty, C., Cioffi, K., & Griffin, C. (2019). An IoT endpoint system for dynamic device classification and data protection. Proceedings of the IEEE International Conference on Internet of Things, 1–8.

Shafiq, M., Gu, Z., Cheikhrouhou, O., Alhakami, H., & Hamam, H. (2020). A novel deep learning approach for network intrusion detection in IoT networks. IEEE Access, 8, 145125–145145.

Shahid, M., Blanc, G., Zhang, Z., & Debar, H. (2021). IoT devices recognition through network traffic analysis. Proceedings of the IEEE International Conference on Big Data, 1234–1241.

Sicari, S., Rizzardi, A., Grieco, L., & Coen-Porisini, A. (2015). Security, privacy and trust in IoT: The road ahead. Computer Networks, 76, 146–164.

Stankovic, J. (2014). Research directions for the Internet of Things. IEEE Internet of Things Journal, 1(1), 3–9.

Thakkar, A., & Lohiya, R. (2020). A review on machine learning and deep learning for IoT security. International Journal of Engineering Research & Technology, 9(5), 1–10.

Zhang, J., Guan, Z., Li, H., & Wu, H. (2021). Network traffic classification for IoT devices using machine learning. IEEE Internet of Things Journal, 8(15), 12345–12356.

Downloads

Published

2026-04-23

How to Cite

Kumar, S., & Deora, S. (2026). Random Forest-Based Classification of IoT Devices Using Network Traffic Analysis for Enhanced Security. International Journal of Unified Research & Development (IJURD), 2(4). https://doi.org/10.5281/ijurd.v2i4.96

Similar Articles

1 2 3 4 5 6 7 8 > >> 

You may also start an advanced similarity search for this article.