部署前MUD文件的交互、冲突和配置需求分析
On the Analysis of MUD-Files' Interactions, Conflicts, and Configuration Requirements Before Deployment
摘要：
制造商使用描述（MUD）是互联网工程任务组（IETF）标准，旨在通过为IoT设备创建开箱即用的访问控制列表来保护IoT设备和网络。该协议定义了一种概念上简单的方法，以根据设备制造商引入的规则实现基于隔离的防御机制。然而，在实践中，每个设备的访问控制列表在其MUD文件中定义，并且可能包含数百个访问控制规则。因此，读取和验证这些文件是一个挑战;确定多个物联网设备如何交互对开发人员来说是困难的，对消费者来说是不可行的。为了解决这个问题，我们引入了MUD-Visualizer来提供任何数量的MUD文件的可视化。MUD-Visualizer旨在使开发人员能够通过提供格式校正，将其与其他MUD文件集成并通过可视化识别冲突来生成正确的MUD文件。MUD-Visualizer是可扩展的，其核心任务是合并和说明多个设备的ACE;在局域网内外。MUD-Visualizer是公开的，可以在GitHub上找到。
英文摘要：
Manufacturer Usage Description (MUD) is an Internet Engineering Task Force (IETF) standard designed to protect IoT devices and networks by creating an out-of-the-box access control list for an IoT device. %The protocol defines a conceptually straightforward method to implement an isolation-based defensive mechanism based on the rules that are introduced by the manufacturer of the device. However, in practice, the access control list of each device is defined in its MUD-File and may contain possibly hundreds of access control rules. As a result, reading and validating these files is a challenge; and determining how multiple IoT devices interact is difficult for the developer and infeasible for the consumer. To address this we introduce the MUD-Visualizer to provide a visualization of any number of MUD-Files. MUD-Visualizer is designed to enable developers to produce correct MUD-Files by providing format correction, integrating them with other MUD-Files, and identifying conflicts through visualization. MUD-Visualizer is scalable and its core task is to merge and illustrate ACEs for multiple devices; both within and beyond the local area network. MUD-Visualizer is made publicly available and can be found on GitHub.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
