Proposal of Smart Segmentation Framework for preventing threats from spreading in IoT

With the expansion of IoT infrastructure and related services, security incidents exploiting vulnerabilities in IoT devices are increasing. In particular, IoT devices are relatively vulnerable to security due to their resource-constrained nature and have recently become the target of attacks by hackers. The most representative is the spread of malware such as Mirai, which creates a massive IoT botnet and then causes distributed denial of service attacks, and its variants and new malicious codes are continuously increasing. One of the ways to mitigate distributed denial of service attacks is to render the creation of massive IoT botnets difficult by preventing the spread of malicious code that issues the attacks. This paper proposes a smart segmentation framework that controls the network access through segment units configured with various devices attributes, network information and service types to prevent the spread of threats within the IoT networks.