Standardizing IoT Network Security Policy Enforcement
David Barrera, Ian Molloy, Heqing Huang · 2018
This paper discusses the design of a standardized network security policy enforcement architecture for IoT devices.We show that the network behavior of many consumer IoT devices tends to be predictable, and thus simple to profile and constrain.We propose an automated approach to derive network security policies for devices without requiring vendor cooperation or changes to devices or cloud infrastructure.We also describe a scalable and effective multi-layered policy enforcement architecture that limits the impact of IoT device compromise.