Hi Poonam
Thanks. The concern here is that the device could choose to identify as something else through a set of false communications. It is indeed an interesting area of research. I am not saying there is nothing to be done, but it is something that requires careful consideration as we aim toward automating policy. I fear in particular that the cloud makes this quite a bit harder, and IOT manufacturer use of their own DNS infrastructure will make it yet more difficult, because we are all using the same cloud infra.
Eliot
Dear Elliot,
Thank you for your very important question. In the current setting, our router verifies packets using devices' MAC addresses; it means the router has a list of mac addresses of all IoT devices. For another work, we used certificate-based authentication between the router and device MUD server, something similar: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-authenticate-downstream-device
We used off-the-self IoT devices so its not easy to integrate many TEE based solutions.
Best regards,
Poonam
On Thu, Mar 19, 2020 at 12:47 PM Eliot Lear <lear@ofcourseimright.com> wrote:
Very interesting work!
A cautionary question:
If I wanted to pretend to be one of these devices on your network, how hard would it be?
Eliot
On 19.03.20 12:56, Poonam Yadav wrote:
Thanks for sharing!
We have analysed similar pattern in many IoT devices and presented periodicity in IoT traffic as FFT (fig 4 - of IoTDI paper attached for reference) and some initial results here in this report:and full paper is here:
Best regards,
On Thu, Mar 19, 2020 at 10:31 AM Mirjam Kuehne <mir@ripe.net> wrote:
Dear colleagues,
IoT devices often perform activities on a periodic basis. Thymen Wabeke
of SIDN Labs shares his analysis of periodic network traffic from IoT
lightbulbs. Read it on RIPE Labs at:
https://labs.ripe.net/Members/thymen_wabeke/visualisations-of-periodic-iot-traffic
Kind regards,
Mirjam Kühne
RIPE NCC
_______________________________________________
iot-wg mailing list
iot-wg@ripe.net
https://lists.ripe.net/mailman/listinfo/iot-wg
_______________________________________________ iot-wg mailing list iot-wg@ripe.net https://lists.ripe.net/mailman/listinfo/iot-wg