Scholarlink

<p>Due to the rapid proliferation of Internet of Things (IoT) devices, IoT network management become a challenging problem. To address the issue, the industry is becoming more interested in the Manufacturer Usage Description (MUD) approach for defining IoT device behavior. MUD systematically captures the communication patterns of an IoT device and locks down its behavior in the form of a MUD profile. However, there is a chance that the attacker can use the MUD Uniform Resource Locator (URL) to connect to the switch and perform a malicious activity (i.e., a volumetric attack). To overcome the problem, we propose MUDScan, a framework designed to verify devices before connecting them to the switch via MUD URLs using a challenge-response mechanism. Additionally, certificate pinning ensures the device connects only to the correct MUD server. Initially, the solution verifies that a device uses a challenge-response mechanism before allowing it to connect to the switch. After MUDScan validates the device, the programmable switch implements certificate pinning to validate the authenticity of the MUD server. This process entails matching the Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate attributes with predefined flow rules within the switch. The solution has been evaluated using a simulation environment in a Mininet emulator. The proposed system exhibits Central Processing Unit (CPU) utilization of 28% and 25% for the challenge-response mechanism and the certificate spinning, respectively. MUDScan can be implemented on a real IoT network to protect it from adversaries.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Mudscan: Double authentication based secure control mechanism for MUD enable IoT networks

  • 期刊论文

  • 发表日期：

    2025年4月3日

查看全文
  • Suvrima Datta,
  • Venkanna U.,
  • Mallikharjuna Rao K

摘要

Due to the rapid proliferation of Internet of Things (IoT) devices, IoT network management become a challenging problem. To address the issue, the industry is becoming more interested in the Manufacturer Usage Description (MUD) approach for defining IoT device behavior. MUD systematically captures the communication patterns of an IoT device and locks down its behavior in the form of a MUD profile. However, there is a chance that the attacker can use the MUD Uniform Resource Locator (URL) to connect to the switch and perform a malicious activity (i.e., a volumetric attack). To overcome the problem, we propose MUDScan, a framework designed to verify devices before connecting them to the switch via MUD URLs using a challenge-response mechanism. Additionally, certificate pinning ensures the device connects only to the correct MUD server. Initially, the solution verifies that a device uses a challenge-response mechanism before allowing it to connect to the switch. After MUDScan validates the device, the programmable switch implements certificate pinning to validate the authenticity of the MUD server. This process entails matching the Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate attributes with predefined flow rules within the switch. The solution has been evaluated using a simulation environment in a Mininet emulator. The proposed system exhibits Central Processing Unit (CPU) utilization of 28% and 25% for the challenge-response mechanism and the certificate spinning, respectively. MUDScan can be implemented on a real IoT network to protect it from adversaries.