[Mud] Using MUD to enforce network traffic policies

Luca Deri <deri@ntop.org> Tue, 10 September 2019 07:09 UTC

From: Luca Deri <deri@ntop.org>
Content-Type: multipart/alternative; boundary="Apple-Mail=_FBDEC435-4813-4DD9-87E1-5698D18E4D8A"
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Message-Id: <D4677646-39C6-43DD-AA98-5D22412D3C87@ntop.org>
Date: Tue, 10 Sep 2019 09:08:55 +0200
To: Mud@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/mud/zQ2dhP4ioigI7cCILkRay9Es280>
Subject: [Mud] Using MUD to enforce network traffic policies
Precedence: list

Hi all,
I am the developer of an open source network traffic monitoring application named ntopng (https://github.com/ntop/ntopng). I have started to use MUD to enhance ntopng to planned for MUD enhancements to make it suitable not jus for IoT devices but also for generic devices as tablets and laptops. In my view MUD is a great starting point to create a “portable” device network behaviour that could be used in cybersecurity and traffic monitoring to spot unexpected traffic flows. I have written a short blog post https://www.ntop.org/ntopng/using-rfc8520-mud-to-enforce-hosts-traffic-policies-in-ntopng/ <https://www.ntop.org/ntopng/using-rfc8520-mud-to-enforce-hosts-traffic-policies-in-ntopng/> that explains this in detail and highlights the ongoing developments.

I would be glad to receive some feedback in particular related to MUD extensions that are IMHO necessary to make it more general than the original idea.

Regards Luca

[Mud] Using MUD to enforce network traffic polici… Luca Deri
Re: [Mud] Using MUD to enforce network traffic po… M. Ranganathan
Re: [Mud] Using MUD to enforce network traffic po… Luca Deri