Systems and methods for detecting vulnerabilities in internet-of-things (iot) devices

Abstract

Disclosed herein are systems and method for detecting vulnerabilities in devices within a network. In one exemplary aspect, a method includes: intercepting a plurality of packets in a network with a plurality of devices; identifying a subset of packets corresponding to a first device of the network; extracting and embedding a plurality of features representing device behavior from the subset of packets into an input vector; executing a machine learning algorithm that receives the input vector and outputs a device type of the first device, wherein the machine learning algorithm is trained using a training dataset including network traffic information labelled with device types and a list of attributes of each respective device type; performing, for the first device, a security scan specific to the device type; and in response to detecting a vulnerability based on the security scan, generating a vulnerability assessment report for the first device.