Verifying and Monitoring IoTs Network Behavior Using MUD Profiles

IoT devices are increasingly being implicated in cyber-attacks, raising community concern about the risks they pose to critical infrastructure, corporations, and citizens. In order reduce this risk, IETF is pushing vendors develop formal specifications of intended purpose their devices, form a Manufacturer Usage Description (MUD), so that network behavior any operating environment can be locked down verified rigorously. This article aims assist manufacturers developing verifying MUD profiles, while also helping adopters these ensure compatible with organizational policies track device using profile. Our first contribution tool takes traffic trace an arbitrary as input automatically generates profile for it. We contribute our open source, apply it 28 consumer highlight insights challenges encountered process. second semantic framework not only validates given consistency, but checks its compatibility policy. representative organizations selected demonstrate how effort needed acceptance testing. Finally, we show operators dynamically identify known profiles monitor behavioral changes network.