# A Study on Improving M2M Network Security through Abnormal Traffic Control
## 2 M2M Intelligent Network Background  
The M2M intelligent network environment is shown in Figure 1, which evolved into a concept that interacts with all the data in the real and virtual world by being applied to a network structure beyond wireless communication [14,15]. The M2M intelligent network is a network environment of object space that forms intelligent relationships such as sensing, networking, information exchange and processing without any user intervention between distributed elements including objects and services. In the era of the M2M intelligent network, the privacy issue caused by data exchange of various devices, as well as the vulnerability in numerous industries such as automobiles and medical care, may threaten life [6,16]. Figure 1: Configuration of the M2M intelligent network environment. The biggest issue of security arising is the migration through numerous data routes. In the case of embedded smart devices that have been in use for a long time, structural defects and cyber-attacks using security vulnerabilities can cause enormous confusion and issues in the market environment and major infrastructure. The wide range of attacks targeting all industries and areas of life will increase the chances of malicious hackers pursuing a wide range of targets, from manufacturing to power grids, automobiles, medical devices, and home appliances. There may be a situation in which personal medical information is leaked by a hacker, and national infrastructures, such as networks, power systems and traffic signals, could be brought to a complete stop, or rendered uncontrollable [6; 17; 18]. In 2009, computer programmer [PERSON] launched Shodan, a computer search engine with a graphical user interface that identifies internet-facing devices [19]. In particular, the emergence of a Shodan site that can detect M2M intelligent networks to locate its connection to the network increases the security threats [6; 20; 21; 22]. As shown in Table 1, Shodan has detected the connected devices and collected the data more than 40 networks, such as servers, web cams, IP CCTV, network printers, and routers [19; 22; 23]. Shodan retrieves OpenSSL patch version information from M2M intelligent networks and through the heartbleed of this version, it is confirmed that the system is defenseless from information stealing/attacking and service denying/attacking etc. [24; 25; 26]. The ability to identify devices that monitor and control critical infrastructure assets has raised major security concerns. A CNN article [27] claims that Shodan is \"the scarieset search engine on the internet\". The Open Web Application Security Project (OWASP) announced the top ten critical web application security risks. The ten largest vulnerabilities can be viewed as security vulnerability items that underpin the internet security threats of industry-specific objects such as lack of encryption, weak physical security of object internet devices, and leakage of personal information [28]. A type of network attack that can occur in the M2M intelligent network environment is a Distributed Reflection Denial of Service (DRDoS) attack, which is more advanced than the DDoS attack [29; 30]. GitHub.com posted an official engineering blog post on 1 March 2018, explaining the background of a DDoS attack that occurred on February 28 th. In a report dated 1 January, the US ZDNet reported that a massive 1.1 Tbps of DDoS attacks on GitHub.com targeting one of the world's largest service providers [31; 32; 33; 34; 35]. According to GitHub, a large DDoS attack occurred with over a thousand automated systems, including tens of thousands of unique endpoints. The size of DDoS attacks is expected to grow further. In the case of M2M intelligent networks, it is difficult to cope with device security patches, which are not smooth, and it is hard to know if a device is infected.