Date Published: January 11, 2022
Comments Due:
Email Questions to:
Author(s)
Paul Watrobski (NIST), Murugiah Souppaya (NIST), Joshua Klosterman (MITRE), William Barker (Dakota Consulting)
Announcement
The National Cybersecurity Center of Excellence (NCCoE) has prepared Draft NISTIR 8349 for public comment.
Securing a network is a complex task made more challenging when Internet of Things (IoT) devices are connected to it. NISTIR 8349 demonstrates how to use device characterization techniques and the supporting open source tool MUD-PD to describe the communication requirements of IoT devices in support of the Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) project. Manufacturers and network administrators can use the techniques and tools described in the report for capturing network communications from IoT devices, analyzing network captures, and generating MUD files to help ensure IoT devices perform as intended.
Your Input Matters
The NCCoE relies on developers, providers, and users of cybersecurity technology and information to provide input to our cybersecurity reports and guidance to produce useful and technically correct resources. We look forward to receiving your comments on this draft report.
You can also help shape and contribute to this project by joining the loT Community of Interest by sending an email to iot-ddos-nccoe@nist.gov detailing your interest.
NOTE: A call for patent claims is included on page iv of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.
This report describes an approach to capturing and documenting the network communication behavior of Internet of Things (IoT) devices. From this information, manufacturers, network administrators, and others can create and use files based on the Manufacturer Usage Description (MUD) specification to manage access to and from those IoT devices. The report also describes the current state of implementation of the approach and proposals for future development.
This report describes an approach to capturing and documenting the network communication behavior of Internet of Things (IoT) devices. From this information, manufacturers, network administrators, and others can create and use files based on the Manufacturer Usage Description (MUD) specification to...
See full abstract
This report describes an approach to capturing and documenting the network communication behavior of Internet of Things (IoT) devices. From this information, manufacturers, network administrators, and others can create and use files based on the Manufacturer Usage Description (MUD) specification to manage access to and from those IoT devices. The report also describes the current state of implementation of the approach and proposals for future development.
Hide full abstract
Keywords
access control; device characterization; Internet of Things (IoT); Manufacturer Usage Description (MUD); network communications
Control Families
None selected
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
