Open Access

A Comprehensive Architecture for Enhancing IoT Security Through Zero Trust Principles

https://doi.org/10.55640/ijmcsit-v03i09-09

PDF

Chinedu Emmanuel Okafor ¹ ,

⁴ Department of Computer Science, Westbridge University of Technology, Abuja, Nigeria

Abstract

The rapid proliferation of Internet of Things (IoT) devices has substantially expanded digital connectivity across industrial, healthcare, enterprise, energy, and consumer environments while simultaneously increasing cybersecurity exposure. Conventional perimeter-oriented security models are increasingly inadequate for IoT ecosystems characterized by heterogeneous devices, distributed communication, dynamic network boundaries, constrained resources, and diverse trust relationships. This paper presents a comprehensive architectural perspective for strengthening IoT security through Zero Trust principles. The study adopts a structured qualitative review methodology based exclusively on the selected literature concerning Zero Trust Architecture (ZTA), IoT security, micro-segmentation, artificial intelligence, blockchain, cloud security, and cyber-physical systems. The analysis identifies continuous verification, least-privilege access, identity-centric control, network segmentation, contextual authentication, and continuous monitoring as core architectural capabilities. Particular emphasis is placed on integrating Zero Trust mechanisms with IoT-specific operational requirements and cyber-physical environments. The reviewed literature indicates that Zero Trust can reduce implicit trust and limit lateral movement, but effective implementation requires intelligent policy enforcement, interoperability, resource-aware controls, and continuous risk assessment. The resulting architecture provides a conceptual framework for aligning device identity, authentication, authorization, segmentation, monitoring, and adaptive response within a unified security model. The study concludes that Zero Trust should be implemented as a continuous security architecture rather than as a single authentication mechanism.

Keywords

Internet of Things, Zero Trust Architecture, IoT Security, Cybersecurity

References

Alagappan, A., Venkatachary, S. K., & Andrews, L. J. B. (2022). Augmenting Zero Trust Network Architecture to enhance security in virtual power plants.Energy Reports,8, 1309-1320.

Anderson, J., Huang, Q., Cheng, L., & Hu, H. (2022, October). BYOZ: Protecting BYOD through zero trust network security. In2022 IEEE International Conference on Networking,Architecture and Storage (NAS)(pp. 1-8). IEEE.

Chen, B., Qiao, S., Zhao, J., Liu, D., Shi, X., Lyu, M., ... & Zhai, Y. (2020). A security awareness and protection system for 5G smart healthcare based on zero-trust architecture.IEEE internet of things journal,8(13), 10248-10263.

Colomb, Y., White, P., Islam, R., & Alsadoon, A. (2022). Applying Zero Trust Architecture and Probability-Based Authentication to Preserve Security and Privacy of Data in the Cloud. InEmerging Trends in Cybersecurity Applications(pp. 137-169). Cham: Springer International Publishing.

Daah, C., Qureshi, A., Awan, I., & Konur, S. (2024). Enhancing zero trust models in the financial industry through blockchain integration: A proposed framework.Electronics,13(5), 865.

Feng, X., & Hu, S. (2023). Cyber-physical zero trust architecture for industrial cyber-physical systems.IEEE Transactions on Industrial Cyber-Physical Systems,1, 394-405.

He, Y., Huang, D., Chen, L., Ni, Y., & Ma, X. (2022). A survey on zero trust architecture: Challenges and future trends.Wireless Communications and Mobile Computing,2022(1), 6476274.

Hosney, E. S., Halim, I. T. A., & Yousef, A. H. (2022, March). An artificial intelligence approach for deploying zero trust architecture (zta). In2022 5th International Conference on Computing and Informatics (ICCI)(pp. 343-350). IEEE.

Joo, S. H., Kim, J. M., Kwon, D. H., & Shin, Y. T. (2023). Strengthening Enterprise Security through the Adoption of Zero Trust Architecture-A Focus on Micro-segmentation Approach.Convergence Security Journal,23(3), 3-11.

Khan, M. J. (2023). Zero trust architecture: Redefining network security paradigms in the digital age.World Journal of Advanced Research and Reviews,19(3), 105-116.

Li, S., Iqbal, M., & Saxena, N. (2022). Future industry internet of things with zero-trust security.Information Systems Frontiers, 1-14.

Lone, A. N., Mustajab, S., & Alam, M. (2023). A comprehensive study on cybersecurity challenges and opportunities in the IoT world.Security and Privacy,6(6), e318.

Muhammad, T., Munir, M. T., Munir, M. Z., & Zafar, M. W. (2022). Integrative cybersecurity: merging zero trust, layered defense, and global standards for a resilient digital future.International Journal of Computer Science and Technology,6(4), 99-135

Most read articles by the same author(s)

1 2 3 4 5 > >>

International Journal of Modern Computer Science and IT Innovations

A Comprehensive Architecture for Enhancing IoT Security Through Zero Trust Principles

Abstract

Keywords

References

Most read articles by the same author(s)

Similar Articles