[iot-wg] "The Internet of Threats: Fighting FUD with MUD"

Peter Steinhäuser <ps at embedd.com> wrote:
    >> I'd say a lot depends upon whether or not ISPs will put out an RFP
    >> that asks for an IoT firewall based upon MUD in future products.
    >> Maybe some one here would like to test the waters with an RFI.

    > What I’ve seen with ISPs is that - unfortunately - they are mostly
    > concerned about cost. We had several cases where ISPs chose inferior
    > solutions which cost them more money in the long run. But somebody in
    > the purchase department got a raise. As long as the ISPs do not
    > understand the cost that can result from hacked IoT devices I doubt
    > will ask for something that doesn’t bring them additional revenue.

    > Another issue are the ODMs. The software development here is rarely
    > focused on longevity - it’s important to get the products out of the
    > doors with minimum effort. So even if an ISP is requiring an IoT
    > firewall they will build something that works somehow. Maybe providing
    > an OpenWRT package as reference might help...

The point of an RFI is to push the ODM vendors to notice a reference package.

At this point, we are living on the expensive Omnia Turris device, hoping
that it will move quickly to stock openwrt 18.06 (or 19.xx in January),
rather than the custom (and difficult to use) build system it uses now.
This ecosystem issue is what is keeping us from getting to a reference
package situation.

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr at sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 487 bytes
Desc: not available
URL: </ripe/mail/archives/iot-wg/attachments/20181023/80f3ccd9/attachment.sig>