Consumer Zero Trust: Towards a Principled Adaptation of Zero Trust for Consumer Networks
Summary
Consumer Internet of Things (IoT) networks, such as smart homes, increasingly contain valuable data and control important household functions. Efforts to build cybersecurity frameworks have focused on enterprise environments, and consumer security issues are not adequately addressed.
This paper investigates the fundamental differences between enterprise and consumer environments that need to be taken into account to adjust well-tested enterprise security frameworks like zero trust for a consumer network. Variations across four dimensions were identified: network participants, stakeholder means, stakeholder priorities, and the threat landscape.
Drawing from this analysis, a definition was proposed for consumer zero trust (CZT), as well as tenets intended to guide research toward a complete framework. This new definition is applied to a reference smart home environment to validate the tenets and inform future work that is needed to develop CZT into a truly robust framework for consumer IoT security.
This work provides researchers and developers with the first steps towards a foundation for improving privacy, security, and trust in unique consumer environments.
Conference: 18th International Symposium on Foundations & Practice of Security (FPS 2025)
Location: Brest, France
Date: November 25-27, 2025
Keywords
Smart Home, Internet of Things (IoT), Zero Trust, Security, Consumer Security
Links
References
| APA | Bush, M., McKay, D., & Mashatan, A. (2025). Consumer Zero Trust: Towards a Principled Adaptation of Zero Trust for Consumer Networks.聽Proceedings of the 18th International Symposium on Foundations & Practice of Security (FPS 2025)聽(pp. 134-149). Brest, France |
|---|---|
| BibTeX | @inproceedings{Bush2025consumer, |
| IEEE | M. Bush, D. McKay, and A. Mashatan, 鈥淐onsumer Zero Trust: Towards a Principled Adaptation of Zero Trust for Consumer Networks,鈥 in Proc. 18th International Symposium on Foundations & Practice of Security (FPS 2025), Brest, France, Nov. 25鈥27, 2025, pp. 134-149 |