The Inner Circle

Hi All,

NIST just published NIST SP 1800-15, Cybersecurity Practice Guide Securing Small Business and Home IoT Devices: Mitigating Network-Based Attacks Using MUD

NIST's National Cybersecurity Center of Excellence (NCCoE) has published NIST Cybersecurity Practice Guide Special Publication (SP) 1800-15, Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD). IoT devices are often vulnerable to malicious actors who can exploit them directly and use them to conduct network-based attacks. SP 1800-15 describes for IoT product developers and implementers four different implementations that use MUD to automatically limit IoT devices to sending and receiving only the traffic that they require to perform their intended functions.
If you have questions or would like to join our Community of Interest, please email the project team at [email protected].

------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------

Thanks for sharing Michael.

It's a big read - 947 pages - a starting point/baseline for IoT device security.
With emphasis for developers ... read the manuals and follow DevSecOps security first.

--chris

------------------------------
Chris Evans
Trainer
Huddcaster
------------------------------

Original Message:
Sent: May 26, 2021 04:06:09 PM
From: Michael Roza
Subject: NIST SP 1800-15, Cybersecurity Practice Guide Securing Small Business and Home IoT Devices: Mitigating Network-Based Attacks Using MUD

Hi All,

NIST just published NIST SP 1800-15, Cybersecurity Practice Guide Securing Small Business and Home IoT Devices: Mitigating Network-Based Attacks Using MUD

NIST's National Cybersecurity Center of Excellence (NCCoE) has published NIST Cybersecurity Practice Guide Special Publication (SP) 1800-15, Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD). IoT devices are often vulnerable to malicious actors who can exploit them directly and use them to conduct network-based attacks. SP 1800-15 describes for IoT product developers and implementers four different implementations that use MUD to automatically limit IoT devices to sending and receiving only the traffic that they require to perform their intended functions.
If you have questions or would like to join our Community of Interest, please email the project team at [email protected].

------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------