MUDIS: MUD Inspection System

Anat Bremler-Barr; Bar Meyuhas; Ran Shister

doi:10.1109/NOMS54207.2022.9789891

MUDIS: MUD Inspection System

Anat Bremler-Barr, Bar Meyuhas, Ran Shister

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

The Manufacturer Usage Description (MUD) is an IETF white-list protection scheme that formalizes the authorized network behavior in a MUD file; this MUD file can then be used as a type of firewall mechanism.This demo introduces MUDIS, a MUD Inspection System that inspects the network behavior of devices, based on their formal description in the MUD file. We present several use-cases in which MUDIS is useful, including examining the impact of device location, the impact of a firmware update, the correlation of network behavior between different devices of the same manufacture, and more.MUDIS inspects two MUD files, clusters together and graph-ically visualizes identical, similar, and dissimilar rules. It then calculates a similarity score that measures the similarity between them both. It also generalizes the two MUD files where possible, such that the resulting generalized MUD covers all the permitted (white-list) network behavior for both MUDs.Our open-source MUDIS tool and proof-of-concept dataset are available for researchers and IoT manufacturers, allowing anyone to gain meaningful insights over the network behavior of IoT devices.

Original language	English
Title of host publication	Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022
Subtitle of host publication	Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022
Editors	Pal Varga, Lisandro Zambenedetti Granville, Alex Galis, Istvan Godor, Noura Limam, Prosper Chemouil, Jerome Francois, Marc-Oliver Pahl
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781665406017
DOIs	https://doi.org/10.1109/NOMS54207.2022.9789891
State	Published - 2022
Externally published	Yes
Event	2022 IEEE/IFIP Network Operations and Management Symposium, NOMS 2022 - Budapest, Hungary Duration: 25 Apr 2022 → 29 Apr 2022

Publication series

Name	Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022

Conference

Conference	2022 IEEE/IFIP Network Operations and Management Symposium, NOMS 2022
Country/Territory	Hungary
City	Budapest
Period	25/04/22 → 29/04/22

All Science Journal Classification (ASJC) codes

Management of Technology and Innovation
Artificial Intelligence
Computer Networks and Communications
Hardware and Architecture
Software
Information Systems and Management
Safety, Risk, Reliability and Quality

Access to Document

10.1109/NOMS54207.2022.9789891

Cite this

Bremler-Barr, A., Meyuhas, B., & Shister, R. (2022). MUDIS: MUD Inspection System. In P. Varga, L. Z. Granville, A. Galis, I. Godor, N. Limam, P. Chemouil, J. Francois, & M.-O. Pahl (Eds.), Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022 (Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/NOMS54207.2022.9789891

Bremler-Barr, Anat ; Meyuhas, Bar ; Shister, Ran. / MUDIS : MUD Inspection System. Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022. editor / Pal Varga ; Lisandro Zambenedetti Granville ; Alex Galis ; Istvan Godor ; Noura Limam ; Prosper Chemouil ; Jerome Francois ; Marc-Oliver Pahl. Institute of Electrical and Electronics Engineers Inc., 2022. (Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022).

@inproceedings{b3c3d2dd7eb54bb3b65d2f81bb55d361,

title = "MUDIS: MUD Inspection System",

abstract = "The Manufacturer Usage Description (MUD) is an IETF white-list protection scheme that formalizes the authorized network behavior in a MUD file; this MUD file can then be used as a type of firewall mechanism.This demo introduces MUDIS, a MUD Inspection System that inspects the network behavior of devices, based on their formal description in the MUD file. We present several use-cases in which MUDIS is useful, including examining the impact of device location, the impact of a firmware update, the correlation of network behavior between different devices of the same manufacture, and more.MUDIS inspects two MUD files, clusters together and graph-ically visualizes identical, similar, and dissimilar rules. It then calculates a similarity score that measures the similarity between them both. It also generalizes the two MUD files where possible, such that the resulting generalized MUD covers all the permitted (white-list) network behavior for both MUDs.Our open-source MUDIS tool and proof-of-concept dataset are available for researchers and IoT manufacturers, allowing anyone to gain meaningful insights over the network behavior of IoT devices.",

author = "Anat Bremler-Barr and Bar Meyuhas and Ran Shister",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; 2022 IEEE/IFIP Network Operations and Management Symposium, NOMS 2022 ; Conference date: 25-04-2022 Through 29-04-2022",

year = "2022",

doi = "10.1109/NOMS54207.2022.9789891",

language = "الإنجليزيّة",

series = "Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

editor = "Pal Varga and Granville, {Lisandro Zambenedetti} and Alex Galis and Istvan Godor and Noura Limam and Prosper Chemouil and Jerome Francois and Marc-Oliver Pahl",

booktitle = "Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022",

address = "الولايات المتّحدة",

}

Bremler-Barr, A, Meyuhas, B & Shister, R 2022, MUDIS: MUD Inspection System. in P Varga, LZ Granville, A Galis, I Godor, N Limam, P Chemouil, J Francois & M-O Pahl (eds), Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022. Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022, Institute of Electrical and Electronics Engineers Inc., 2022 IEEE/IFIP Network Operations and Management Symposium, NOMS 2022, Budapest, Hungary, 25/04/22. https://doi.org/10.1109/NOMS54207.2022.9789891

MUDIS: MUD Inspection System. / Bremler-Barr, Anat; Meyuhas, Bar; Shister, Ran.
Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022. ed. / Pal Varga; Lisandro Zambenedetti Granville; Alex Galis; Istvan Godor; Noura Limam; Prosper Chemouil; Jerome Francois; Marc-Oliver Pahl. Institute of Electrical and Electronics Engineers Inc., 2022. (Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - MUDIS

T2 - 2022 IEEE/IFIP Network Operations and Management Symposium, NOMS 2022

AU - Bremler-Barr, Anat

AU - Meyuhas, Bar

AU - Shister, Ran

PY - 2022

Y1 - 2022

N2 - The Manufacturer Usage Description (MUD) is an IETF white-list protection scheme that formalizes the authorized network behavior in a MUD file; this MUD file can then be used as a type of firewall mechanism.This demo introduces MUDIS, a MUD Inspection System that inspects the network behavior of devices, based on their formal description in the MUD file. We present several use-cases in which MUDIS is useful, including examining the impact of device location, the impact of a firmware update, the correlation of network behavior between different devices of the same manufacture, and more.MUDIS inspects two MUD files, clusters together and graph-ically visualizes identical, similar, and dissimilar rules. It then calculates a similarity score that measures the similarity between them both. It also generalizes the two MUD files where possible, such that the resulting generalized MUD covers all the permitted (white-list) network behavior for both MUDs.Our open-source MUDIS tool and proof-of-concept dataset are available for researchers and IoT manufacturers, allowing anyone to gain meaningful insights over the network behavior of IoT devices.

AB - The Manufacturer Usage Description (MUD) is an IETF white-list protection scheme that formalizes the authorized network behavior in a MUD file; this MUD file can then be used as a type of firewall mechanism.This demo introduces MUDIS, a MUD Inspection System that inspects the network behavior of devices, based on their formal description in the MUD file. We present several use-cases in which MUDIS is useful, including examining the impact of device location, the impact of a firmware update, the correlation of network behavior between different devices of the same manufacture, and more.MUDIS inspects two MUD files, clusters together and graph-ically visualizes identical, similar, and dissimilar rules. It then calculates a similarity score that measures the similarity between them both. It also generalizes the two MUD files where possible, such that the resulting generalized MUD covers all the permitted (white-list) network behavior for both MUDs.Our open-source MUDIS tool and proof-of-concept dataset are available for researchers and IoT manufacturers, allowing anyone to gain meaningful insights over the network behavior of IoT devices.

UR - http://www.scopus.com/inward/record.url?scp=85133153207&partnerID=8YFLogxK

U2 - 10.1109/NOMS54207.2022.9789891

DO - 10.1109/NOMS54207.2022.9789891

M3 - منشور من مؤتمر

T3 - Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022

BT - Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022

A2 - Varga, Pal

A2 - Granville, Lisandro Zambenedetti

A2 - Galis, Alex

A2 - Godor, Istvan

A2 - Limam, Noura

A2 - Chemouil, Prosper

A2 - Francois, Jerome

A2 - Pahl, Marc-Oliver

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 25 April 2022 through 29 April 2022

ER -

Bremler-Barr A, Meyuhas B, Shister R. MUDIS: MUD Inspection System. In Varga P, Granville LZ, Galis A, Godor I, Limam N, Chemouil P, Francois J, Pahl MO, editors, Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022. Institute of Electrical and Electronics Engineers Inc. 2022. (Proceedings of the IEEE/IFIP Network Operations and Management Symposium 2022: Network and Service Management in the Era of Cloudification, Softwarization and Artificial Intelligence, NOMS 2022). doi: 10.1109/NOMS54207.2022.9789891

MUDIS: MUD Inspection System

Abstract

Publication series

Conference

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this