This attack mechanism called a botnet which is illustrated in figure 01. The Botnet has Bot-Master, Command and Control Server, and many numbers of Bots. The Bot-Master is the mastermind behind the DDoS attack and it injects the malicious code to the IoT devices. These affected devices work as the army of the DDoS attack, and they are called as Bots.
The cheapest DDoS attack has malware which continuously accesses a web page of the victim's server. A better attack is to continuously download the contents of the /icons directory, which usually represents a few megabytes, and places a greater load on the network.
SYN flood, ACK flood and SYN/ACK amplification are the most effective, but require a more complex setup, including a spoofed source address, and spoofed destination addresses for reflectors, such as DNS servers, which always reply with more data than they receive.
Incidentally, the things you call bots, we call zombies, and they're not only IoT devices, but usually include hijacked home PC's and high-end servers in data centres.
Hope this helps.
DDoS attacks use an army of zombie devices called a botnet. These botnets generally consist of compromised IoT devices, websites, and computers. When a DDoS attack is launched, the botnet will attack the target and deplete the application resources.
I think the possible attacks of DDoS in IoT are the followings:
1) the hackers inject the Malware code (Trojan, Rootkit, etc) into IoT gateway which will be the zombie
2) The remote IoT devices (could be hacker) is used as botnet controller
3) Each command triggered by the IoT gateway will be fully controlled by the hacker
4) Sensors and actuators are controlled by hacker command
Quantifying cloud misbehavior:
https://ieeexplore.ieee.org/abstract/document/9335812
This paper lists the origin of malicious traffic on the Internet in depth.
- Badges
- Science topic
- Similar topics
- Social Psychology
- Attitude