Skip to main content

PALASIK IoT Zero Trust Event Enforcement Framework

Project description

๐Ÿงฟ PALASIK

Policy-Aware Zero Trust Event Enforcement Framework for IoT & Edge

PyPI Python License Status


๐Ÿ” What is PALASIK?

PALASIK (Policy-Aware Lightweight Adaptive Security for IoT) adalah framework Python berbasis Zero Trust yang berfungsi sebagai security enforcement layer di edge / gateway IoT.

PALASIK tidak pernah menganggap event atau device itu tepercaya secara default.
Setiap event HARUS:

  1. Dievaluasi tingkat kepercayaannya (Trust Engine)
  2. Diputuskan secara eksplisit (Policy Engine)
  3. Baru diteruskan atau diblok (Enforcement Point)

Framework ini dirancang ringan, modular, dan extensible.


๐ŸŽฏ Use Case Utama

PALASIK cocok digunakan untuk:

  • IoT Gateway & Edge Computing
  • Security-aware event pipeline
  • Zero Trust IoT experimentation
  • Research & academic prototype
  • Lightweight industrial IoT security layer

โœจ Core Capabilities

  • ๐Ÿ” Trust Evaluation Engine
    Menilai event secara dinamis (behavior & context aware)

  • ๐Ÿ” Policy Enforcement (ALLOW / DENY)
    Enforcement point eksplisit (bukan implicit filtering)

  • ๐Ÿงฉ Plugin-based Architecture
    Logging, forwarding, alerting, extensible

  • ๐ŸŒ Adapters
    MQTT, HTTP, Webhook (extensible)

  • โš™๏ธ YAML / ENV Configuration

  • ๐Ÿ“ฆ Installable via PyPI


๐Ÿ“ฆ Installation

pip install palasik

Python >= 3.10 direkomendasikan.


๐Ÿš€ Quick Start

1๏ธโƒฃ Initialize Project

palasik init

Perintah ini akan membuat:

  1. config.yaml

  2. struktur dasar runtime PALASIK


2๏ธโƒฃ Run PALASIK Agent

palasik run

PALASIK akan:

  1. load konfigurasi

  2. start agent

  3. menunggu event dari adapter


3๏ธโƒฃ Example: MQTT Event

mosquitto_pub -t palasik/sensor/temp -m '{"value": 42}'

Alur yang terjadi:

  1. Event masuk via adapter

  2. Trust dievaluasi

  3. Policy diputuskan

  4. ALLOW โ†’ diteruskan

  5. DENY โ†’ diblok


๐Ÿง  How It Works (High Level)

Event โ†’ Trust Engine โ†’ Policy Engine โ†’ Enforcement
                         โ”‚
                         โ”œโ”€ ALLOW โ†’ Plugin / Adapter
                         โ””โ”€ DENY  โ†’ Blocked

PALASIK adalah decision layer, bukan sekadar message router.

๐Ÿ—‚ Project Structure

palasik/
โ”œโ”€โ”€ core/        # Agent, engine, context
โ”œโ”€โ”€ trust/       # Trust evaluators
โ”œโ”€โ”€ policy/      # Policy engines
โ”œโ”€โ”€ adapters/    # MQTT, HTTP, Webhook
โ”œโ”€โ”€ plugins/     # Extensible actions
โ”œโ”€โ”€ cli/         # palasik CLI
โ””โ”€โ”€ config/      # Config loader

โš™๏ธ Configuration

PALASIK menggunakan konfigurasi YAML + Environment Variable.

Contoh config.yaml

palasik:
  broker:
    host: localhost
    port: 1883
    topic: palasik/sensor/#

  policy:
    type: allow_deny
    threshold: 0.7

  plugins:
    enabled:
      - logger

Prioritas konfigurasi:

  1. Environment Variable

  2. YAML

  3. Default code

Detail lengkap: ๐Ÿ‘‰ docs/CONFIG.md


๐Ÿงช Testing

pytest

Semua komponen inti memiliki unit test.

๐Ÿ“š Documentation

Topik File
Architecture docs/ARCHITECTURE.md
Configuration docs/CONFIG.md
Trust Engine docs/raw/trust-engine.md
Policy Engine docs/raw/policy-engine.md
Research Docs docs/raw/

๐ŸŽ“ Research Context (Academic Track)

PALASIK berasal dari riset keamanan IoT berbasis Edge & Zero Trust dan tetap mempertahankan jalur akademik.

Jika kamu tertarik pada:

  1. skripsi / tesis

  2. paper / jurnal

  3. eksperimen trust & policy

๐Ÿ‘‰ lihat folder docs/raw/

๐Ÿค Contributing

Kontribusi sangat diterima, terutama:

trust model baru

policy logic

adapter tambahan

benchmark & dataset

dokumentasi & studi kasus

Panduan: ๐Ÿ‘‰ CONTRIBUTING.md


๐Ÿ“„ Citation

Jika menggunakan PALASIK dalam publikasi ilmiah, silakan sertakan sitasi:

๐Ÿ‘‰ citation.md


๐Ÿ“œ License

MIT License Bebas digunakan untuk riset dan pengembangan lanjutan.

๐Ÿ‘ค Maintainer

David Rinaldi IoT Security & Edge Computing ๐Ÿ”— https://github.com/notedavidrinaldi


๐Ÿšฆ Project Status

โœ… Core stable (v0.1.0)

๐Ÿ“ฆ Published on PyPI

๐Ÿงช Tested

๐Ÿ“˜ Research-ready

๐Ÿ”„ Actively improved


๐Ÿง  Final Note

PALASIK bukan sekadar project contoh. Ini adalah framework keputusan keamanan yang bisa berkembang ke:

  • Industrial IoT

  • Smart Infrastructure

  • Security research platform

Jika kamu ingin:

  • memakai โ†’ install & run

  • mengembangkan โ†’ plugin & adapter

  • meneliti โ†’ trust & policy

PALASIK sudah siap.

โญ Star repo ini jika relevan. ๐Ÿค Fork jika ingin eksperimen.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

palasik-0.1.3.tar.gz (15.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

palasik-0.1.3-py3-none-any.whl (20.7 kB view details)

Uploaded Python 3

File details

Details for the file palasik-0.1.3.tar.gz.

File metadata

  • Download URL: palasik-0.1.3.tar.gz
  • Upload date:
  • Size: 15.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for palasik-0.1.3.tar.gz
Algorithm Hash digest
SHA256 c222f4f5a6ad645356e46b01c137fd46b11552b34a0ab5e49db4af71192ea44e
MD5 a6fdf06ae1ec177fe861ea7b11c63f10
BLAKE2b-256 152caf753853f9633afbf82924ffbe9601a6b6e8bc5d6af76a3a1c83bbf9a3e4

See more details on using hashes here.

File details

Details for the file palasik-0.1.3-py3-none-any.whl.

File metadata

  • Download URL: palasik-0.1.3-py3-none-any.whl
  • Upload date:
  • Size: 20.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for palasik-0.1.3-py3-none-any.whl
Algorithm Hash digest
SHA256 1304f2b4cf1a1754ce6f8b596ef78d842dea2e0d3c481a6f5814b43ce948ae2e
MD5 e0ac52a36223daf409ec54dabebc1ec7
BLAKE2b-256 519161fd99b8d778a642c16bb0291305b4c1cbffa28d674676cbe6125e847188

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page