Research Graphiot
Research Graphiot
1. Introduction: The proliferation of IoT devices has led to concerns regarding security,
device classification, and data handling efficiency. Traditional methods require complex
feature engineering and struggle with the ever-evolving nature of IoT environments. This
paper proposes a hybrid approach that integrates GraphIoT with Gen-AI to address these
challenges.
• GraphIoT transforms IoT device identification into a graph classification problem,
using Graph Neural Networks (GNNs) to analyze traffic data.
• Graph technology enhances IoT data storage and retrieval, offering a scalable and
real-time data management system.
• Generative AI (Gen-AI) augments GraphIoT’s capabilities by learning new device
patterns, detecting anomalies, and generating synthetic IoT traffic for enhanced
security training.
2. Background:
2.1 GraphIoT GraphIoT is a lightweight IoT device detection method that utilizes
graph classifiers to identify device types. It constructs an IoT Device Traffic Graph
Representation (IoT-DTGR) using lightweight flow information such as packet
length, direction, and timestamp. This representation captures the comprehensive
view of IoT device flows, preserving features in bidirectional IoT Device-Gateway
interactions. By transforming the device detection problem into a graph
classification problem, GraphIoT employs Graph Neural Networks (GNNs) that
consider both node and edge features, as well as subgraph structures in IoT-
DTGRs, to classify graphs and identify device types.
3.2 Graph Neural Network (GNN) Classifier Employ GNNs to classify IoT-DTGRs,
identifying device types based on graph structures and features.
3.4 Graph Database Integration Utilize graph databases to store IoT-DTGRs and
related metadata, enabling efficient data retrieval and real-time analysis.
4.1 Dataset Collection: Gather real-world IoT traffic data from various device types
to construct IoT-DTGRs.
4.2 Model Training: Train the GNN classifier on the IoT-DTGRs, incorporating the
Gen-AI module to enhance feature learning and anomaly detection capabilities.