🤖 AI Summary
This study addresses the lack of unified standards for integrating Internet of Things (IoT) devices into Zero Trust architectures, a gap that has led to widespread discrepancies between nominal compliance and actual implementation, thereby disconnecting policy from practice. By systematically analyzing non-academic industrial sources—including whitepapers, technical reports, and vendor solutions—and comparing real-world deployment cases, this work identifies instances of superficial compliance and clarifies the core barriers and evolutionary trends in aligning IoT with Zero Trust principles. The research distills actionable, empirically grounded practices tailored to real-world constraints, offering a clear pathway and evidential foundation for future standardization efforts and academic inquiry in this domain.
📝 Abstract
The Zero-trust (ZT) model is an increasingly popular model that relies on the idea that no trust should be granted to any entity (network, persons, devices) by default. ZT model is gaining attention from both research and practice, with various levels of adequation between research developed and real-life applications. NIST provided a standard to fulfill requirements of ZT architecture of network core but many practical aspects remain unspecified, some of them requiring solving first research challenges in order to be implemented efficiently. An example of such an unspecified field is the integration of IoT/Smart Peripheral Devices (SPD). Various reasons explain this gap: specificities of such resources (possibly lower energy/computation power), their lifecycle, and their use, strongly depending on the use of the whole platform IoT devices are part of. Moreover, additional difficulty to have a good understanding is induced by the fact that both Zero Trust and IoT are identified as promising trends in cybersecurity: many vendors/researchers tag their solutions as IoT integration into the ZT model, with little to no effective compliance to ZT model or standard. Industry is providing many practice-oriented literature, that has to be compared to academic work and standards, in order to consolidate the current state of knowledge and solutions offered to realize this integration. In this paper, we conduct a literature review of non-academic publications, in order to consolidate current knowledge, trends, and future challenges for the industrial integration of IoT devices in ZT architecture.