Skip to main content

A standard process to quarantine and restore IoT Devices

Document Type Expired Internet-Draft (individual)
Expired & archived
Authors Michael Richardson , Jacques Latour
Last updated 2021-05-06 (Latest revision 2020-11-02)
RFC stream (None)
Intended RFC status (None)
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


The Manufacturer Usage Description (MUD) is a tool to describe the limited access that a single function device such as an Internet of Things device might need. The enforcement of the access control lists described protects the device from attacks from the Internet, and protects the Internets from compromised devices. This document details a process which occurs when a device is detected to have violated the stated policy. The goal of these steps is to ensure that the device is correctly removed from operation, fixed, and if possible, restored to safe operation. This document does not define any new protocols, but provides context in which a number of existing protocols are to be used together.


Michael Richardson
Jacques Latour

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)