There are two classes of features relevant to differentiating between normal and attack IoT traffic. These are stateless features, which are derived from flow-independent characteristics of individual packets and stateful features, which capture how network traffic changes over time. Applying domain knowledge about IoT device behaviors to feature engineering can enhance DoS detection performance. Real-time … Continue reading The Two Classes of Feature Engineering Important to Detecting Attack IoT Traffic