Zero Trust Engine for IoT Environments
Amal Alshehri, Cihan Tunc · 2023
Internet of Things (IoT) has been the enabling technology for using sensors and actuators to collect data, simple processing it, and taking some actions as well as communication. Hence, IoT has been commonly used in every parts of our daily lives; e.g., smart locks, smart fridges, and smart cars. However, IoT devices have brought different vulnerabilities to the cybersecurity world. This is because these smart devices do not have enough computation capabilities or have limited memory to perform complex algorithms. Consequently, these devices cannot be entirely trusted and we need to manage their activities with a focus on security. Therefore, in our work, we plan to implement the zero-trust architecture (ZTA) concept for IoT based environments. The ZTA concept was established by the National Institute of Standards and Technology (NIST) with the idea of ensuring every asset in the network is always verified and authenticated by continually monitoring the network. This work attempts to provide a continuous evaluation of the IoT device’s state within the network. The evaluation will provide us with a proactive mechanism for cyber threats.