ZFort: A scalable zero-trust approach for trust management and traffic engineering in SDN based IoTs
| dc.contributor.author | Ashraf, Usman | |
| dc.contributor.author | Yuen, Chau | |
| dc.contributor.author | Bhutta, Muhammad Nasir Mumtaz | |
| dc.contributor.author | Al-Naeem, Mohammed | |
| dc.date.accessioned | 2025-09-02T05:06:01Z | |
| dc.date.available | 2025-09-02T05:06:01Z | |
| dc.date.issued | 2024-12 | |
| dc.description | The Internet of Things (IoT) has revolutionized several industries such as mechanized production, healthcare surveillance and smart cities among others. IoT systems are made up of a large number of inter-connected small devices including environmental data collecting sensors, mission-critical actuators and gateways that bridge the gap between physical and digital worlds. IoTs offer exceptional functionality and efficiency. However, this interconnected environment also creates a wide and vulnerable target area for possible attacks. | |
| dc.description.abstract | The Internet of Things (IoT), is a promising solution, but faces critical security challenges in the backdrop of evolving and sophisticated threats. Traditional security models are not well-adopted to protecting these diverse and resource-constrained devices against evolving threats like Advanced Persistent Threats (APTs). We introduce ZFort, a zero-trust framework that prioritizes the security of critical nodes in IoT networks. ZFort dynamically evaluates the risk status of nodes based on node’s criticality and vulnerability scores derived from Common Vulnerabilities and Exposures (CVE) data ZFort dynamically assesses node risk based on criticality and vulnerability scores derived from Common Vulnerabilities and Exposures (CVE) data, and Common Vulnerability Scoring System (CVSS). ZFort uses a stochastic differential equation model for dynamic and continuous trust evaluation between nodes. Based on this evaluation, it dynamically adjusts security measures and routing decisions in real-time. Additionally, ZFort quickly isolates nodes that are likely compromised and prevents routing across them. ZFort uses Mixed Integer Linear Programming (MILP) and efficient heuristics, guaranteeing scalability and resource efficiency even in large networks and enhances the resilience and trustworthiness of key IoT infrastructure. Keywords: IoT, Critical nodes, Zero trust | |
| dc.identifier.citation | Ashraf, U., Al-Naeem, M., Bhutta, M. N. M., & Yuen, C. (2024). ZFort: A scalable zero-trust approach for trust management and traffic engineering in SDN based IoTs. Internet of Things, 28, 101419. | |
| dc.identifier.doi | https://doi.org/10.1016/j.iot.2024.101419 | |
| dc.identifier.uri | https://repository.adu.ac.ae/handle/1/7346 | |
| dc.language.iso | en | |
| dc.publisher | Elsevier | |
| dc.title | ZFort: A scalable zero-trust approach for trust management and traffic engineering in SDN based IoTs | |
| dc.type | Article |