|
Work item:
|
Q.MUD_IOT
|
|
Subject/title:
|
Framework for testing and monitoring IoT devices & networks using technical Requirements from Manufacturer Usage Description (MUD)
|
|
Status:
|
Under study
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
2026-Q1 (Medium priority)
|
|
Liaison:
|
SG20, SG17, SG20, SG17, IETF
|
|
Supporting members:
|
Ministry of Communications (India), C-DoT, Russian Federation, Bonch-Bruevich Saint-Petersburg State University of Telecommunications (SpbSUT), China Telecom
|
|
Summary:
|
IoT technology has permeated diverse sectors, facilitating automation, data-driven insights, and operational efficiencies. However, this widespread adoption has introduced challenges related to security vulnerabilities, interoperability complexities, and network performance optimization. The pervasive integration of IoT (Internet of Things) devices across industries underscores the pressing need for robust network infrastructures that prioritize reliability, interoperability, and security.
Manufacturer Usage Description (MUD), as specified in IETF RFC 8520, emerges as a foundational tool in fortifying IoT ecosystems, offering not only security enhancements but also significant benefits in addressing interoperability challenges and optimizing network performance.
The main objective of the IETF's Manufacturer Usage Description (MUD)Specification is to provide a means for end devices to signal to the network what sort of access and network functionality they require to properly function. MUD can offer a standardized approach for manufacturers to specify the necessary network communications for a IoT device to operate according to their manufacturers' intentions. IETF MUD framework requires standardized approach for generation of operational behavioural profile of IoT devices called MUD profilesand use of these profiles to secure their network and monitor the runtime behaviour of IoT devices. By implementing MUD, the network can automatically allow only the essential traffic required for the device to operate as intended, while blocking any unauthorized communication attempts.
This recommendation aims to establish a standardized testing frameworkfor testing and monitoring IoT devices & networks to ensure conformance with the IETF RFC 8520 (MUD). It consists of testing requirements, testing procedures and expected behaviour to verify an IoT device’s conformance to MUD Specification.Compliance with MUD is crucial and serves as a key requirement for IoT Security, thereby mitigating potential risks associated with unauthorized network access and cyber threats.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2024-05-20 16:06:31
|
|
Last update:
2024-05-20 16:10:07
|
|
