The Analysis of Abnormal Behavior of the System Local Segment on the Basis of Statistical Data Obtained from the Network Infrastructure Monitoring

The wireless network of low-power devices of Smart home and Internet of Things is considered. The signs of unauthorized access are defined. The analysis of the characteristics of systems based on wireless technologies obtained from the experiment results of passive monitoring and active polling of device forming the network infrastructure is conducted. The state-analyzing model based on the identity, quantity, frequency and temporal characteristics is presented. Evaluation of the information security state is focused on analyzing of the system normal functioning profile excluding the search of signatures and characteristics of anomalies under different kinds of attacks. The accumulation of data for decision-making is carried out by comparison of the statistical information of service message from the terminal nodes in passive and active modes. The proposed model can be used to determine the technical characteristics of the devices of wireless ad-hoc networks and to make recommendations concerning the information security state analysis.