  The growing use of IoT devices in organizations has increased the number of
attack vectors available to attackers due to the less secure nature of the
devices. The widely adopted bring your own device (BYOD) policy which allows an
employee to bring any IoT device into the workplace and attach it to an
organization's network also increases the risk of attacks. In order to address
this threat, organizations often implement security policies in which only the
connection of white-listed IoT devices is permitted. To monitor adherence to
such policies and protect their networks, organizations must be able to
identify the IoT devices connected to their networks and, more specifically, to
identify connected IoT devices that are not on the white-list (unknown
devices). In this study, we applied deep learning on network traffic to
automatically identify IoT devices connected to the network. In contrast to
previous work, our approach does not require that complex feature engineering
be applied on the network traffic, since we represent the communication
behavior of IoT devices using small images built from the IoT devices network
traffic payloads. In our experiments, we trained a multiclass classifier on a
publicly available dataset, successfully identifying 10 different IoT devices
and the traffic of smartphones and computers, with over 99% accuracy. We also
trained multiclass classifiers to detect unauthorized IoT devices connected to
the network, achieving over 99% overall average detection accuracy.
