A Trust Score Driven Zero Trust Architecture Model for Enhanced IoT Security
P. A. C. M. S. Pitumpe, Jeewanie Jayasinghe, N. N. A. Madushan, R. Saahith Ahamed, Kalupahana Liyanage Kushan Sudheera, Malka N. Halgamuge, Peter Han Joo Chong · 2025
The rapid expansion of Internet of Things (IoT) networks has introduced complex security challenges that tra-ditional perimeter-based security models struggle to address ef-fectively. These vulnerabilities necessitate innovative approaches to safeguard interconnected IoT ecosystems. While Zero Trust Architecture (ZTA) has shown promise in enhancing security for various networked environments, its application to IoT contexts remains limited. Current IoT security strategies often lack the dynamic, context-aware security measures required to combat sophisticated threats in highly distributed systems. We develop a novel trust score model integrated with ZTA principles for IoT networks. Our approach implements continuous authentication, least privilege access, and micro-segmentation within an IoT testbed. We expand security analysis through a trust scoring system, behavioral monitoring, and a zero trust policy engine. Our methodology includes enhancing a router with a software-defined perimeter to enforce ZTA principles and dynamic access controls based on device trust scores. This work provides crucial insights into the practical application of trust score-based ZTA in IoT environments. We contribute to the field by offering a scalable, efficient Zero Trust framework specifically adapted for IoT, along with concrete implementation guidelines. Our work advances IoT security practices by introducing a more dynamic, context-aware approach to threat mitigation, paving the way for more robust and adaptive security measures in the rapidly evolving IoT landscape.