In recent years, the advancement of the Internet of Things (IoT) has significantly improved convenience; however, it has also increased security risks. Due to resource constraints, IoT devices have limited functionality, making it difficult to implement robust security measures. Additionally, users of home networks, one of the primary application areas of IoT, generally lack security expertise. Therefore, it is essential to develop a security system that meets the requirements of IoT devices while minimizing the burden on users. In this study, we propose a system that applies Manufacturer Usage Description (MUD) to home networks to define and control IoT device communication. This approach enables security measures to be implemented on IoT devices while reducing user burden. Furthermore, the proposed system monitors network traffic and isolates compromised devices upon detecting an attack, thereby minimizing potential damage. Through simulation based evaluations, we demonstrate that the proposed system effectively maintains security requirements.
References
[1]
Sinha, S. (2025) State of IoT 2025: Number of Connected IoT Devices Growing 14% to 21.1 Billion Globally. IOT ANALYTICS (on-line). https://iot-analytics.com/number-connected-iot-devices/
[2]
Touqeer, H., Zaman, S., Amin, R., Hussain, M., Al-Turjman, F. and Bilal, M. (2021) Smart Home Security: Challenges, Issues and Solutions at Different IoT Layers. TheJournalofSupercomputing, 77, 14053-14089. https://doi.org/10.1007/s11227-021-03825-1
[3]
Schiller, E., Aidoo, A., Fuhrer, J., Stahl, J., Ziörjen, M. and Stiller, B. (2022) Landscape of IoT Security. ComputerScienceReview, 44, Article ID: 100467. https://doi.org/10.1016/j.cosrev.2022.100467
[4]
Ferrara, P., Mandal, A.K., Cortesi, A. and Spoto, F. (2020) Static Analysis for Discovering IoT Vulnerabilities. InternationalJournalonSoftwareToolsforTechnologyTransfer, 23, 71-88. https://doi.org/10.1007/s10009-020-00592-x
[5]
Bessler, M., Sangster, P., Upadrashta, R. and O’Connor, T. (2024) Hardening the Internet of Things: Toward Designing Access Control for Resource Constrained IoT Devices. Proceedings of the 17th Cyber Security Experimentation and Test Workshop, Philadelphia, 13 August 2024, 1-7. https://doi.org/10.1145/3675741.3675744
[6]
Zheng, S., Apthorpe, N., Chetty, M. and Feamster, N. (2018) User Perceptions of Smart Home IoT Privacy. ProceedingsoftheACMonHuman-ComputerInteraction, 2, 1-20. https://doi.org/10.1145/3274469
[7]
Hammi, B., Zeadally, S., Khatoun, R. and Nebhen, J. (2022) Survey on Smart Homes: Vulnerabilities, Risks, and Countermeasures. Computers&Security, 117, Article ID: 102677. https://doi.org/10.1016/j.cose.2022.102677
[8]
Lear, E., Droms, R. and Romascanu, D. (2019) Manufacturer Usage Description Specification. Internet Engineering Task Force (IETF), RFC 8520.
[9]
Souppaya, M., Montgomery, D., Polk, T., etal. (2021) Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD). Special Publication (NIST SP) 1800-15, National Institute of Standards and Technology.
[10]
Ranganathan, M., Montgomery, D., Ilias, O. and Mimouni, E. (2019) Soft MUD: Implementing Manufacturer Usage Descriptions on OpenFlow SDN Switches. International Conference on Networks (ICN) 2019, Valencia, 25-29 March 2019, 49-54.
Waleed, A., Jamali, A.F. and Masood, A. (2022) Which Open-Source IDS? Snort, Suricata or Zeek. ComputerNetworks, 213, Article ID: 109116. https://doi.org/10.1016/j.comnet.2022.109116
[13]
Salman, O., Elhajj, I., Chehab, A. and Kayssi, A. (2017) Software Defined IoT Security Framework. 2017 Fourth International Conference on Software Defined Systems (SDS), Valencia, 8-11 May 2017, 75-80. https://doi.org/10.1109/sds.2017.7939144
[14]
Jang, H.C., Huang, C.W. and Yeh, F.K. (2016) Design a Bandwidth Allocation Framework for SDN Based Smart Home. 2016 IEEE 7th Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON), Vancouver, 13-15 October 2016, 1-6. https://doi.org/10.1109/iemcon.2016.7746320
