查看文章

This paper discusses the design of a standardized network security policy enforcement architecture for IoT devices. We show that the network behavior of many consumer IoT devices tends to be predictable, and thus simple to profile and constrain. We propose an automated approach to derive network security policies for devices without requiring vendor cooperation or changes to devices or cloud infrastructure. We also describe a scalable and effective multi-layered policy enforcement architecture that limits the impact of IoT device compromise.