Making Access Control Easy in IoT - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Making Access Control Easy in IoT

Vafa Andalibi
  • Fonction : Auteur
  • PersonId : 1239885
Jayati Dev
  • Fonction : Auteur
  • PersonId : 1239886
Donginn Kim
  • Fonction : Auteur
  • PersonId : 1239887
Eliot Lear
  • Fonction : Auteur
  • PersonId : 1239888
L. Jean Camp
  • Fonction : Auteur
  • PersonId : 1239889

Résumé

Secure installation of Internet of Things (IoT) devices requires configuring access control correctly for each device. In order to enable correct configuration Manufacturer Usage Description (MUD) has been developed by Internet Engineering Task Force (IETF) to automate the protection of IoT devices by micro-segmentation using dynamic access control lists. The protocol defines a conceptually straightforward method to implement access control upon installation by providing a list of every authorized access for each device. This access control list may contain a few rules or hundreds of rules for each device. As a result, validating these rules is a challenge. In order to make the MUD standard more usable for developers, system integrators, and network operators, we report on an interactive system called MUD-Visualizer that visualizes the files containing these access control rules. We show that, unlike manual analysis, the level of the knowledge and experience does not affect the accuracy of the analysis when MUD-Visualizer is used, indicating that the tool is effective for all participants in our study across knowledge and experience levels.
Fichier principal
Vignette du fichier
509924_1_En_11_Chapter.pdf (356.8 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04041063 , version 1 (22-03-2023)

Licence

Paternité

Identifiants

Citer

Vafa Andalibi, Jayati Dev, Donginn Kim, Eliot Lear, L. Jean Camp. Making Access Control Easy in IoT. 15th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2021, Virtual, United Kingdom. pp.127-137, ⟨10.1007/978-3-030-81111-2_11⟩. ⟨hal-04041063⟩
9 Consultations
1 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More