Zero trust architecture for industrial IoT : applying zero trust security principles in industrial networks
Year: 2025
Type: dissertation
Abstract: This thesis applies Zero Trust Architecture (ZTA) to Industrial Internet of Things (IIoT) environment using an open-source, lightweight stack suitable for SMEs. A design-science methodology guided the implementation of a containerized prototype with keycloak for identity and access management, Open Policy Agent (OPA) as the policy decision point, and Envoy proxy as the enforcement point, orchestrated via Docker Compose and validated against two flask microservices. A python client exercised end-to-end flows, confirming deny-by-default behavior and role-based access using OIDC JWTs, with auditability via Envoy/OPA/Service logs. Despite challenges (compose startup dependencies, OPA config separation, JWT validation), the system proved stable and reproductible. Future work includes Kubernetes deployment, real-time visualization/metrics, dynamic policy delivery (OPA Bundles/GitOps), SIEM integration, and IIoT digital-twin extensions.
Source: Theseus (Ammattikorkeakoulujen)
Author: Nformi, Kingsly Nofu
Institution: LAB University of Applied Sciences
Language: English
Topic: Access Control and Trust
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: green
OpenAlex ID: W7115816596