Skip to Main content Skip to Navigation
Conference papers

Passive Inference of User Actions through IoT Gateway Encrypted Traffic Analysis

Pierre-Marie Junges 1 Jerome Francois 1 Olivier Festor 1
1 RESIST - Resilience and Elasticity for Security and ScalabiliTy of dynamic networked systems
Inria Nancy - Grand Est, LORIA - NSS - Department of Networks, Systems and Services
Abstract : Internet of Things (IoT) devices become widely used and their control is often provided through a cloud-based web service that interacts with an IoT gateway, in particular for individual users and home automation. In this paper, we propose a technique to infer private user information, i.e., actions performed, by considering a vantage point outside the end-user local IoT network. By learning the relationships between the user actions and the traffic sent by the web service to the gateway, we have been able to establish elementary signatures, one for each possible action, which can be then composed to discover compound actions in encrypted traffic. We evaluated the efficiency of our approach on one IoT gateway interacting with up to 16 IoT devices and showed that a passive attacker can infer user activities with an accuracy above 90%.
Document type :
Conference papers
Complete list of metadata

Cited literature [17 references]  Display  Hide  Download
Contributor : Jérôme François <>
Submitted on : Thursday, October 24, 2019 - 2:50:10 PM
Last modification on : Monday, November 30, 2020 - 10:26:04 PM
Long-term archiving on: : Saturday, January 25, 2020 - 4:10:00 PM


Files produced by the author(s)


  • HAL Id : hal-02331783, version 1



Pierre-Marie Junges, Jerome Francois, Olivier Festor. Passive Inference of User Actions through IoT Gateway Encrypted Traffic Analysis. IM 2019 - The 16th IFIP/IEEE Symposium on Integrated Network and Service Management, Apr 2019, Washington DC, United States. ⟨hal-02331783⟩



Record views


Files downloads