This work adds CORECONF/YANG management as proposed in Open Alliance TC19, maps the SDN Controller and Agents one-to-one onto NIST's PE, PA, and PEP, and instantiates two YANG-based mechanisms: a network-access-control flow and a key-management scheme.
Abstract
Zonal in-vehicle networks ship Ethernet, MACsec, and TSN, but treat the network itself as trusted: once configured at the factory, there is no standardized runtime way to easily revoke access, rotate keys, or contain a compromised ECU. Zero Trust Architecture targets exactly that gap, yet existing automotive ZTA proposals bolt on dedicated infrastructure that duplicates the SDN management plane already required to enable SDVs. Thus, ZTA is not yet adopted in the automotive domain, and the question remains: can we do better? We answer this in two steps. Step 1 analyses what Open Alliance TC17~v1.0 MACsec/MKA with pre-shared CAKs already provides in terms of NIST SP~800-207 ZTA tenets. Step 2 adds CORECONF/YANG management as proposed in Open Alliance TC19, maps the SDN Controller and Agents one-to-one onto NIST's PE, PA, and PEP. We then instantiate this with two YANG-based mechanisms: a network-access-control flow and a key-management scheme. The result fully covers five and two partially of the seven tenets with no ZTA-specific infrastructure added.
The Open RAN paradigm splits the cellular architecture into disaggregated functions joined by openly specified interfaces, and adds programmable control through the RICs attached over the E2 interface. Those controllers, however, close their loops no faster than tens of milliseconds, leaving out inference-driven decisi...
Andrea Lacava, Angelo Feraudo, Michele Polese et al.· Proceedings of the 20th ACM...· 0 citations
The Border Gateway Protocol (BGP) lacks native mechanisms to verify that routes adhere to authorized paths. This makes the global infrastructure vulnerable to route leaks, which have caused several major Internet disruptions. Autonomous System Provider Authorization (ASPA) is an emerging technology, currently at Intern...
Mauro Farina, Martino Trevisan, Alberto Bartoli· Proceedings of the 2026 ACM...· 0 citations
In post-deployment environments with sparse or intermittent communication infrastructure, Delay Tolerant Networks (DTNs) play a critical role in maintaining connectivity through a store-carry-and-forward mechanism. To improve control and adaptability in such networks, the integration of Software-Defined Networking (SDN...
Hyeontae Joo, Taehoon Yoo, Kiseok Kim et al.· IEEE Transactions on Mobile...· 1 citation
Using a continuous verification mechanism as part of ZTA implementation can help reduce lateral movement incidents by as much as 72-90% and insider threats by 65%.
Moamin Hajo, Karam Hatim· Al-Noor Journal of Engineeri...· 0 citations
Distributed ledgers, privacy-preserving institutional networks, and conventional payment systems increasingly need to exchange authenticated messages and settle assets across heterogeneous trust domains. Existing interoperability systems typically optimize for one of three concerns: application-level abstraction, cross...
Atul Khekade, Ritesh Kakkad, Wanwiset Peerapatanapokin et al.· 0 citations
An AI-assisted, cross-layer security orchestration framework that integrates epoch-wise telemetry with ML-based risk estimation and formalizes mitigation as a Constrained Markov Decision Process (CMDP), and empirical evidence that adaptive mitigation can reduce security risk without sacrificing service guarantees is pr...
F. Philip-Kpae, A. Imoize, K. .. Okafor et al.· E3S Web of Conferences· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
