Realizing Open and Decentralized Marketplace for Exchanging Data of Expected IoT Behaviors

TL;DR

This paper proposes a secure, open, and decentralized marketplace for sharing IoT device behavior data using blockchain technology, enhancing cybersecurity and trust among stakeholders.

Contribution

It introduces a blockchain-based marketplace for IoT behavior data, with a smart contract and a prototype implementation demonstrating practical feasibility.

Findings

Effective sharing of MUD files on Ethereum blockchain

Low-cost implementation under a hundred dollars

Prototype demonstrates practical functionality

Abstract

With rising concerns about the security of IoT devices, network operators need better ways to handle potential risks. Luckily, IoT devices show consistent patterns in how they communicate. But despite previous efforts, it remains unclear how knowledge of these patterns can be made available. As data marketplaces become popular in different domains, this paper1 proposes creating a special marketplace focused on IoT cybersecurity. The goal is to openly share knowledge about IoT devices' behavior, using structured data formats like Manufacturer Usage Description (MUD) files. To make this work, we employ technologies like blockchain and smart contracts to build a practical and secure foundation for sharing and accessing important information about how IoT devices should behave on the network. Our contributions are two-fold. (1) We identify the essential features of an effective marketplace for sharing data related to the expected behaviors of IoT devices. We develop a smart contract on the Ethereum blockchain with five concrete functions; and, (2) We implement a prototype of our marketplace in a private chain environment-our codes are publicly released. We demonstrate how effectively our marketplace functions through experiments involving MUD files from consumer IoT devices. Our marketplace enables suppliers and consumers to share MUD data on the Ethereum blockchain for under a hundred dollars, promoting accessibility and participation.