MCMartin ChristenTechnology & Advisory
← Lab notes

Network security / Technical draft

IoT segmentation and the discovery problem.

The question

How can connected devices remain useful when the network gives them narrower permissions? Discovery and control can have different communication requirements, so the starting point is to distinguish them.

A useful approach

Map the required interactions by role rather than by a particular device address. Separate discovery from control and administration. Consider whether narrowly scoped mediation can preserve the required behaviour without opening broad communication paths.

What to evaluate

Check both expected behaviour and denial behaviour: a successful pairing is only one observation. Consider restarts, failed dependencies and what a device can initiate. This note describes an evaluation approach, not a published topology or a claim of completed results.