Network security / Technical draft
IoT segmentation and the discovery problem.
The question
How can connected devices remain useful when the network gives them narrower permissions? Discovery and control can have different communication requirements, so the starting point is to distinguish them.
A useful approach
Map the required interactions by role rather than by a particular device address. Separate discovery from control and administration. Consider whether narrowly scoped mediation can preserve the required behaviour without opening broad communication paths.
What to evaluate
Check both expected behaviour and denial behaviour: a successful pairing is only one observation. Consider restarts, failed dependencies and what a device can initiate. This note describes an evaluation approach, not a published topology or a claim of completed results.