Access Control Enforcement in IoT: state of the art and open challenges in the Zero Trust era
Access Control Enforcement in IoT: state of the art and open challenges in the Zero Trust era
复制标题
物联网中的访问控制实施：零信任时代的最新技术和开放挑战
DOI：
--
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Engin Deniz Tümer
中科院分区：
文献类型：
--
作者：
Pietro Colombo;E. Ferrari;Engin Deniz Tümer
零信任（ZT）是一种当今在不同领域中得到应用的安全范例。最能从ZT中受益的领域之一是以物联网（IoT）为代表，物联网设备不断产生大量的个人和敏感数据，近年来，物联网设备已成为多次安全攻击的目标。在本文中，我们确定了一组访问控制要求，预计将有助于在物联网领域采用 ZT。通过分析物联网生态系统中当前采用的最先进的访问控制方法，我们发现缺乏能够满足所有已确定要求的解决方案。因此，我们讨论该领域仍需要解决的重大开放挑战。
Zero Trust (ZT) is a security paradigm which is nowadays finding application in different domains. One of the domain that can most benefit from ZT is represented by Internet of Things (IoT), where huge quantity of personal and sensitive data are continuously generated by IoT devices, which, in the recent years, have been the target of several security attacks. In this paper, we identify a set of access control requirements which are expected to enable the adoption of ZT in the IoT domain. Through the analysis of state of the art access control approaches currently employed in IoT ecosystems, we observe the lack of solutions capable of addressing all the identified requirements. We therefore discuss significant open challenges that still need to be addressed in this area.