Practical Use of the MUD Specification to Support Access Control in the IoT
summary
Shows how the National Cybersecurity Center of Excellence’s proof‑of‑concept implementations of the IETF Manufacturer Usage Description (MUD) specification (RFC 8520) are applied to enforce access control for IoT devices. Covers practical implementation details, lessons learned, and issues encountered when deploying MUD-based controls in network environments.
AI-written summary · about
chapters (11)
- 0:00Start
- 3:05Introduction
- 6:53Reference Architecture
- 11:42Lab Architecture
- 15:00Logical Architecture - Build 1
- 15:31Connect Device
- 16:18a/2: Send MUD URL to MUD Manager
- 20:09IP address assigned
- 20:51Test communication
- 24:416: Threat found and local und MUD
- 25:279: Threat MUD file and signature file requested, verified, and applied on router
related talks
32mDesign Flaws and Deployment Chaos in Cloud-based IoT Access Control Policies
30mSupply Chain Security for IoT Devices
10mIoT: End of Shorter Days
19mProviding appropriate trust for IoT devices
21mSecuring IoT's Trust Boundaries: Navigating Complexity with NCSC Patterns
17mIoT Archaeology: Dig Security Lessons
31mIoT Bug Hunting: From Shells to Responsible Disclosure
22mSecuring IoT for Life: Navigating the Challenge of Constant Change