From Source Code to Network Profile: Automated and Traceable MUD Profile Generation for IoT Devices
[Kryptografia i bezpieczeństwo] Autorzy: Alessandro Lotto, Abdulla R. A. Almenhali, Savio Sciancalepore i 2 więcej
The Manufacturer Usage Description (MUD) standard allows IoT manufacturers to define expected network behaviors in a MUD file. This file can be translated into enforceable access-control policies, restricting compromised devices to operate solely through manufacturer-defined communication patterns. However, practical adoption of MUD depends on profiles that are accurate, complete, and maintainable. Existing approaches use traffic-based automation but require device deployment and prolonged monitoring, capturing only behavior exercised during observation. Rare, failure-triggered, or configuration-dependent communications may remain absent, producing incomplete policies that disrupt legitimate operation and offer limited insight into the software components responsible for each rule. We present AutoMUD, a source-code-driven tool that generates traceable MUD profiles for IoT devices from t…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo