{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,6]],"date-time":"2026-03-06T19:04:00Z","timestamp":1772823840429,"version":"3.50.1"},"reference-count":33,"publisher":"MDPI AG","issue":"7","license":[{"start":{"date-parts":[[2020,3,27]],"date-time":"2020-03-27T00:00:00Z","timestamp":1585267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program","doi-asserted-by":"publisher","award":["2018YFB0803402"],"award-info":[{"award-number":["2018YFB0803402"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004480","name":"Natural Science Foundation of Shanxi Province","doi-asserted-by":"publisher","award":["201701D111002"],"award-info":[{"award-number":["201701D111002"]}],"id":[{"id":"10.13039\/501100004480","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013317","name":"Key Research and Development Program of Shanxi Province","doi-asserted-by":"publisher","award":["201903D121121"],"award-info":[{"award-number":["201903D121121"]}],"id":[{"id":"10.13039\/501100013317","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Internet of Things (IoT) devices connected to the Internet are exploding, which poses a significant threat for their management and security protection. IoT device identification is a prerequisite for discovering, monitoring, and protecting these devices. Although we can identify the device type easily through grabbing protocol banner information, both brand and model of different types of device are various and diverse. We should therefore utilize multi-protocol probes to improve the fineness of device identification and obtain the corresponding brand and model. However, it is still a challenge to balance between the multi-protocol probe overhead and the identification fineness. To solve this problem, we proposed a time-efficient multi-protocol probe scheme for fine-grain devices identification. We first adopted the concept of reinforcement learning to model the banner-based device identification process into a Markov decision process (MDP). Through the value iteration algorithm, an optimal multi-protocol probe sequence is generated for a type-known IoT device, and then the optimal multi-protocol probes sequence segment is extracted based on the gain threshold of identification accuracy. We took 132,835 webcams as the sample data to experiment. The experimental results showed that our optimal multi-protocol probes sequence segment could reduce the identification time of webcams\u2019 brand and model by 50.76% and achieve the identification accuracy of 90.5% and 92.3% respectively. In addition, we demonstrated that our time-efficient optimal multi-protocol probe scheme could also significantly improve the identification efficiency of other IoT devices, such as routers and printers.<\/jats:p>","DOI":"10.3390\/s20071863","type":"journal-article","created":{"date-parts":[[2020,4,1]],"date-time":"2020-04-01T03:44:13Z","timestamp":1585712653000},"page":"1863","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["A Time-efficient Multi-Protocol Probe Scheme for Fine-grain IoT Device Identification"],"prefix":"10.3390","volume":"20","author":[{"given":"Dan","family":"Yu","sequence":"first","affiliation":[{"name":"College of Information and Computer, Taiyuan University of Technology, Taiyuan 030024, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peiyang","family":"Li","sequence":"additional","affiliation":[{"name":"College of Information and Computer, Taiyuan University of Technology, Taiyuan 030024, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongle","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Information and Computer, Taiyuan University of Technology, Taiyuan 030024, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yao","family":"Ma","sequence":"additional","affiliation":[{"name":"College of Information and Computer, Taiyuan University of Technology, Taiyuan 030024, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junjie","family":"Chen","sequence":"additional","affiliation":[{"name":"College of Information and Computer, Taiyuan University of Technology, Taiyuan 030024, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,3,27]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Huang, M., Liu, A., Xiong, N., Wang, T., and Vasilakos, A. (2020). An Effective Service-Oriented Networking Management Architecture for 5G-Enabled Internet of Things. Comput. Netw., 107208.","DOI":"10.1016\/j.comnet.2020.107208"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1142","DOI":"10.1016\/j.future.2017.07.022","article-title":"Knowledge-aware Proactive Nodes Selection approach for energy management in Internet of Things","volume":"92","author":"Liu","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_3","unstructured":"(2020, February 06). Internet of Things number of connected devices worldwide from 2015 to 2025. Available online: https:\/\/www.statista.com\/statistics\/471264\/iot-number-of-connected-devices-worldwide\/."},{"key":"ref_4","unstructured":"(2020, February 06). VPNFilter Malware Still Has Its Sights Set On Your Router. Available online: https:\/\/www.nextgov.com\/."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1109\/MNET.2017.1700034","article-title":"A Framework for Searching Internet-Wide Devices","volume":"31","author":"Li","year":"2017","journal-title":"IEEE Netw."},{"key":"ref_6","unstructured":"Xuan, F., Qiang, L., Haining, W., and Limin, S. (2016;, January 8\u201311). Characterizing industrial control system devices on the Internet. Proceedings of the 2016 IEEE 24th International Conference on Network Protocols (ICNP), Singapore."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"251","DOI":"10.1016\/j.comnet.2019.05.004","article-title":"VNE-TD: A virtual network embedding algorithm based on temporal-difference learning","volume":"161","author":"Wang","year":"2019","journal-title":"Comput. Netw."},{"key":"ref_8","first-page":"317","article-title":"A Low-Latency Communication Scheme for Mobile Wireless Sensor Control Systems","volume":"49","author":"Huang","year":"2019","journal-title":"IEEE Trans."},{"key":"ref_9","unstructured":"(2020, February 06). p0f v3 (version 3.09b). Available online: http:\/\/lcamtuf.coredump.cx\/p0f3\/."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Siswanto, A., Syukur, A., Kadir, E.A. (2019, January 12\u201314). Network Traffic Monitoring and Analysis Using Packet Sniffer. Proceedings of the 2019 International Conference on Advanced Communication Technologies and Networking (CommNet), Rabat, Morocco.","DOI":"10.1109\/COMMNET.2019.8742369"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"197","DOI":"10.1007\/s11416-008-0107-z","article-title":"SinFP, unification of active and passive operating system fingerprinting","volume":"6","author":"Auffret","year":"2010","journal-title":"J. Comput. Virology."},{"key":"ref_12","unstructured":"(2020, February 06). Xprobe2\u2014A remote active operating system fingerprinting tool. Available online: https:\/\/linux.die.net\/man\/1\/xprobe2."},{"key":"ref_13","unstructured":"Lyon, G.F. (2009). Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning, Insecure."},{"key":"ref_14","unstructured":"Feng, X., Li, Q., Wang, H., and Sun, L. (2018, January 15\u201317). Acquisitional Rule-based Engine for Discovering Internet-of-Thing Devices. Proceedings of the 27th USENIX Security, Baltimore, MD, USA."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Li, Q., Feng, X., Wang, R., Li, Z., and Sun, L. (2018, January 16\u201319). Towards Fine-grained Fingerprinting of Firmware in Online Embedded Devices. Proceedings of the IEEE INFOCOM 2018\u2014IEEE Conference on Computer Communications, Honolulu, HI, USA.","DOI":"10.1109\/INFOCOM.2018.8486326"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Li, Q., Feng, X., Zhi, L., Wang, H., and Sun, L. (2016, January 8\u201311). GUIDE: Graphical user interface fingerprints physical devices. Proceedings of the 2016 IEEE 24th International Conference on Network Protocols (ICNP), Singapore.","DOI":"10.1109\/ICNP.2016.7784468"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Shaikh, F., Bou-Harb, E., Crichigno, J., and Ghani, N. (2018, January 25\u201329). A Machine Learning Model for Classifying Unsolicited IoT Devices by Observing Network Telescopes. Proceedings of the 2018 14th International Wireless Communications & Mobile Computing Conference (IWCMC), Limassol, Cyprus.","DOI":"10.1109\/IWCMC.2018.8450404"},{"key":"ref_18","unstructured":"(2020, February 06). Shodan search engine. Available online: https:\/\/www.shodan.io."},{"key":"ref_19","unstructured":"(2020, February 06). ZoomEye. Available online: https:\/\/www.zoomeye.org."},{"key":"ref_20","unstructured":"(2020, February 06). Censys. Available online: https:\/\/censys.io\/."},{"key":"ref_21","unstructured":"(2020, March 26). ModScan: A SCADA MODBUS Network Scanner. Available online: https:\/\/docplayer.net\/9149440-Modscan-a-scada-modbus-network-scanner-mark-bristow-mark-bristow-gmail-com.html."},{"key":"ref_22","unstructured":"(2020, February 06). Tool for scan PLC devices over s7comm or modbus protocols. Available online: https:\/\/code.google.com\/archive\/p\/plcs-can\/."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"475","DOI":"10.1016\/j.future.2018.09.017","article-title":"Design of secure key management and user authentication scheme for fog computing services","volume":"91","author":"Wazid","year":"2019","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_24","unstructured":"(2020, March 17). Scrapy. Available online: https:\/\/scrapy.org\/."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"4522","DOI":"10.1109\/TNNLS.2017.2755501","article-title":"Stability Analysis of Optimal Adaptive Control under Value Iteration Using a Stabilizing Initial Policy","volume":"29","author":"Heydari","year":"2018","journal-title":"IEEE Trans. Neural Netw. Learn. Syst"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1016\/j.automatica.2017.06.015","article-title":"Drift counteraction optimal control for deterministic systems and enhancing convergence of value iteration","volume":"83","author":"Zidek","year":"2017","journal-title":"Automatica"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Sun, G., Xu, Z., Yu, H., Chen, X., Chang, V., and Vasilakos, A.V. (2019). Low-latency and resource-efficient service function chaining orchestration in network function virtualization. IEEE Internet Things J., 1.","DOI":"10.1109\/JIOT.2019.2937110"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Sun, G., Zhou, R., Sun, J., Yu, H., and Vasilakos, A.V. (2020). Energy-Efficient Provisioning for Service Function Chains to Support Delay-Sensitive Applications in Network Function Virtualization. IEEE Internet Things J., 1.","DOI":"10.1109\/JIOT.2020.2970995"},{"key":"ref_29","unstructured":"Durumeric, Z., Wustrow, E., and Halderman, J.A. (2013, January 14\u201316). ZMap: Fast Internet-wide Scanning and Its Security Applications. Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA."},{"key":"ref_30","unstructured":"(2020, February 06). Zgrab2. Available online: https:\/\/github.com\/zmap\/zgrab2."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Hamad, S.A., Zhang, W.E., Sheng, Q.Z., and Nepal, S. (2019, January 5\u20138). IoT Device Identification via Network-Flow Based Fingerprinting and Learning. Proceedings of the 2019 18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications\/13th IEEE International Conference On Big Data Science And Engineering (TrustCom\/BigDataSE), Rotorua, New Zealand.","DOI":"10.1109\/TrustCom\/BigDataSE.2019.00023"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Aksoy, A., and Gunes, M.H. (2019, January 20\u201324). Automated IoT Device Identification using Network Traffic. Proceedings of the ICC 2019\u20142019 IEEE International Conference on Communications (ICC), Shanghai, China.","DOI":"10.1109\/ICC.2019.8761559"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Feng, X., Li, Q., Han, Q., Zhu, H., Liu, Y., Cui, J., and Sun, L. (2016, January 1\u20134). Active Profiling of Physical Devices at Internet Scale. Proceedings of the 2016 25th International Conference on Computer Communication and Networks (ICCCN), Waikoloa, HI, USA.","DOI":"10.1109\/ICCCN.2016.7568486"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/7\/1863\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T09:12:23Z","timestamp":1760173943000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/20\/7\/1863"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,3,27]]},"references-count":33,"journal-issue":{"issue":"7","published-online":{"date-parts":[[2020,4]]}},"alternative-id":["s20071863"],"URL":"https:\/\/doi.org\/10.3390\/s20071863","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,3,27]]}}}