U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.


Secure websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to our website. Please do not share sensitive information with us.

This is an archive
(replace .gov by .rip)

White Paper (Draft)

Methodology for Characterizing Network Behavior of Internet of Things Devices

Date Published: April 1, 2020
Comments Due: May 1, 2020 (public comment period is CLOSED)
Email Questions to: mitigating-iot-ddos-nccoe@nist.gov


Paul Watrobski (MITRE), Joshua Klosterman (MITRE), William Barker (Dakota Consulting), Murugiah Souppaya (NIST)


This draft white paper from the National Cybersecurity Center of Excellence (NCCoE) demonstrates how to use device characterization techniques to describe the communication requirements of Internet of Things (IoT) devices in support of the manufacturer usage description (MUD) project. 

Securing a network is a complex task made all the more challenging when IoT devices are connected to it. This white paper delves into capturing network communications from IoT devices for analysis and generation of MUD files. Manufacturers and network administrators can use the proposed characterization techniques to describe the communication requirements of an IoT device, which can allow for the accurate management of network access to and from those devices. This can help to ensure that IoT devices perform as intended by the device manufacturers or owners.   

Companion Tool: NCCoE created a tool called MUD-PD for characterizing IoT devices, which is helpful in generating MUD files.



device characterization; Internet of Things; IoT; Manufacturer Usage Description; MUD; MUD-PD
Control Families

Identification and Authentication; System and Communications Protection


White Paper (DOI)

Supplemental Material:
Local Download (pdf)
Submit Comments (other)
Project homepage (other)

Document History:
04/01/20: White Paper (Draft)