Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD)
Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD)
复制标题
保护小型企业和家庭物联网 (IoT) 设备：使用制造商使用描述 (MUD) 缓解基于网络的攻击
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Jaideep Singh
中科院分区：
文献类型：
--
作者：
Donna Dodson;D. Montgomery;Tim Polk;M. Ranganathan;Murugiah Souppaya;S. Johnson;Ashwini Kadam;Craig M. Pratt;D. Thakore;M. Walker;E. Lear;B. Weis;W. Barker;Dean Coclin;Avesta Hojjati;Clint A. Wilson;Tim Jones;Adnan Baykal;Drew F. Cohen;K. Yeich;Yemi Fashina;Parisa Grayeli;Joshua Harrington;Joshua Klosterman;B. Mulugeta;S. Symington;Jaideep Singh
27互联网工程任务组的制造商使用描述（MUD）规范的目标是28物联网（IoT）设备按照设备制造商的预期运行。这是通过为制造商提供标准方式来指示设备执行其预期功能所需的网络通信来实现的。当使用MUD时，网络将自动31允许IoT设备仅发送和接收其按预期执行所需的业务，并且32网络将禁止与设备的所有其他通信，从而增加设备对基于网络的攻击的弹性33。在这个项目中，NCCoE已经展示了确保当物联网设备连接到家庭或小型企业网络时，MUD可以用于自动允许35
27 The goal of the Internet Engineering Task Force’s Manufacturer Usage Description (MUD) specification is 28 for Internet of Things (IoT) devices to behave as intended by the manufacturers of the devices. This is 29 done by providing a standard way for manufacturers to indicate the network communications that a 30 device requires to perform its intended function. When MUD is used, the network will automatically 31 permit the IoT device to send and receive only the traffic it requires to perform as intended, and the 32 network will prohibit all other communication with the device, thereby increasing the device’s resilience 33 to network-based attacks. In this project, the NCCoE has demonstrated the ability to ensure that when 34 an IoT device connects to a home or small-business network, MUD can be used to automatically permit 35