## 6 Enhancing Digital Twins with MUD Profiles
We also analyzed the application of our approach in the context of industrial scenarios, and carried out an exhaustive evaluation. As a future work, we plan to extend MUD profiles with a more fine-grained approach by considering specific security aspects to drive devices' communications. These aspects will be enforced through an extended SDN-NFV architecture to dynamically deploy the required functionality according to such profiles. All of the authors conceived and designed the proposed architecture. [PERSON] and [PERSON] provided input on the bootstrapping and MUD obtaining phases, whereas [PERSON] and [PERSON] provided

Figure 7: MUD complete process performance. input on the MUD translation and enforcement phases. [PERSON] and [PERSON] carried out the performance evaluation. [PERSON] led the research line. All of the authors contributed to writing the paper. This work has been partially funded in part by the Spanish Ministry of Economy and Competitiveness and the ERDF funds cofinantiation through the PERSEIDES project under GrantITN2017-86885-R and in part by the European Commission through the CyberSec4 Europe H2020-830929 and the H2020-780139 SerIoT projects. The research has been also supported by a postdoctoral INCIBE grant within the \"Ayudas para la Excelencia de los Equipos de Investigacion Avanzada en Ciberseguridad\" Program, with code INCIBEI-2015-27363 and by the FPU-16/0305 research contract of the Ministry of Education and Professional Training of Spain. The authors declare no conflict of interest. The following abbreviations are used in this manuscript:

6 LoWPANIPv6 over Low power Wireless Personal Area Networks

ACLAccess Control List

APIApplication Programming Interface

CoAPConstrained Application Protocol

DHCPDynamic Host Configuration Protocol

DNSDomain Name System

DoSDenial Of Service

ECDSAElliptic Curve Digital Signature Algorithm

ETSIEuropean Telecommunications Standards Institute

IETFInternet Engineering Task Force

IPv6 Internet Protocol version 6

IoTInternet of Things

JSONJavaScript Object Notation

LLDPLink Layer Discovery Protocol

MUDManufacturer Usage Description

NISTNational Institute of Standard and Technology

NTBDNational Thing Behavior Database

PSKPre-Shared Key

RESTRepresentational State Transfer

SDNSoftware Defined Network

UDPUser Datagram Protocol

URIUniform Resource Identifier

URLUniform Resource Locator

YANGYet Another Next Generation

## References

* _[PERSON]_ (2016) [PERSON] _Industry 4.0--The Industrial Internet of Things_, 1 st ed. ; Apress: New York, NY, USA, 2016. * _European Commission_ (2015) European Commission. Digitising European Industry. In _Digital Single Market_; European Commission: Brussels, Belgium, 2015. Available online: [[https://ec.europa.eu/digital-single-market/en/policies/digitising-european-industry](https://ec.europa.eu/digital-single-market/en/policies/digitising-european-industry)]([https://ec.europa.eu/digital-single-market/en/policies/digitising-european-industry](https://ec.europa.eu/digital-single-market/en/policies/digitising-european-industry)) (accessed on 13 April 2015). * _[PERSON]_ (2015) [PERSON]; [PERSON]; [PERSON] Security and privacy challenges in industrial Internet of Things. In Proceedings of the 2015 52 nd ACM/EDAC/IEEE Design Automation Conference, San Francisco, CA, USA, 8-12 June 2015; pp. 1-6. doi:10.1145/2744769.2747942. [CrossRef]
* _[PERSON]_ (2017) [PERSON]; [PERSON]; [PERSON]; [PERSON] DDoS in the IoT: Mirai and Other Botnets. _Computer_**2017**, _50_, 80-84. doi:10.1109/MC.2017.201. [CrossRef]
* _Lear_ (2019) [PERSON]; [PERSON]; [PERSON] Manufacturer Usage Description Specification (RFC 8520), Internet Engineering Task Force, 2019. Available online: [[https://tools.ietf.org/html/rfc8520](https://tools.ietf.org/html/rfc8520)]([https://tools.ietf.org/html/rfc8520](https://tools.ietf.org/html/rfc8520)) (accessed on 24 October 2019). * _National Institute of Standards and Technology_ (2019) National Institute of Standards and Technology.