6533b835fe1ef96bd129ea84

RESEARCH PRODUCT

A Clustering approach for profiling LoRaWAN IoT devices

Domenico GarlisiFrancesca CuomoAlessio MartinoJacopo Maria Valtorta

subject

050101 languages & linguisticsIoTComputer scienceIoT; LoRa; LoRaWAN; machine learning; k-means; anomaly detection; cluster analysisk-means02 engineering and technologyLoRaSilhouette0202 electrical engineering electronic engineering information engineeringProfiling (information science)Wireless0501 psychology and cognitive sciencesCluster analysisbusiness.industryNetwork packetSettore ING-INF/03 - Telecomunicazioni05 social sciencesk-means clusteringanomaly detectionLoRaWANmachine learning020201 artificial intelligence & image processingAnomaly detectionInternet of ThingsbusinessComputer networkcluster analysis

description

Internet of Things (IoT) devices are starting to play a predominant role in our everyday life. Application systems like Amazon Echo and Google Home allow IoT devices to answer human requests, or trigger some alarms and perform suitable actions. In this scenario, any data information, related device and human interaction are stored in databases and can be used for future analysis and improve the system functionality. Also, IoT information related to the network level (wireless or wired) may be stored in databases and can be processed to improve the technology operation and to detect network anomalies. Acquired data can be also used for profiling operation, in order to group devices according to their characteristics. LoRaWAN (Long Range Wide Area Network) is one of the emerging IoT technologies in today’s world, it is a protocol based on LoRa modulation. In this work, we propose a methodology to process LoRaWAN packets and perform profiling of the IoT devices. Specifically, we use the k-means algorithm to group devices according to their radio and network behaviour. We tested our approach on a real LoRaWAN network where the entire captured traffic is stored in a proprietary database. Our analysis, performed on 286, 753 packets with 765 devices involved, leads to remarkable clustering performance according to validation indices such as the Silhouette and the Davies-Bouldin indices. Further, with the help of field-experts, we were able to analyze clusters’ contents, revealing results both in line with the current network behaviour and alerts on malfunctioning devices, remarking the reliability of the proposed approach.

10.1007/978-3-030-34255-5_5http://hdl.handle.net/11573/1339125