MUD and OpenC2

I unfortunately cannot make the IC-SC meeting today due to a conflict.

I met today with the Cisco coauthor of MUD and we have agreed OpenC2 and MUD are complementary. Iâll try to write something up for FAQ.

MUD is mainly used for discovery â ie finding out where the SBOM is for a device. It currently returns a URL.

I agreed to work with him on adding an OpenC2 return option (ie the device says if you want the SBOM, send an âOpenC2 query features sbomâ command to the device).

How we do that is still TBD.

I am hopeful we can get him to participate in the SBOM PoC and we can prove the concept.

Duncan Sparrell

sFractal Consulting LLC

iPhone, iTypo, iApologize

I welcome VSRE emails. Learn more at http://vsre.info/

openc2-imple message