Skip to main content

PALASIK IoT Zero Trust Event Enforcement Framework

Project description

๐Ÿงฟ PALASIK

Policy-Aware Zero Trust Event Enforcement Framework for IoT & Edge

PyPI Python License Status


๐Ÿ” What is PALASIK?

PALASIK (Policy-Aware Lightweight Adaptive Security for IoT) adalah framework Python berbasis Zero Trust yang berfungsi sebagai security enforcement layer di edge / gateway IoT.

PALASIK tidak pernah menganggap event atau device itu tepercaya secara default.
Setiap event HARUS:

  1. Dievaluasi tingkat kepercayaannya (Trust Engine)
  2. Diputuskan secara eksplisit (Policy Engine)
  3. Baru diteruskan atau diblok (Enforcement Point)

Framework ini dirancang ringan, modular, dan extensible.


๐ŸŽฏ Use Case Utama

PALASIK cocok digunakan untuk:

  • IoT Gateway & Edge Computing
  • Security-aware event pipeline
  • Zero Trust IoT experimentation
  • Research & academic prototype
  • Lightweight industrial IoT security layer

โœจ Core Capabilities

  • ๐Ÿ” Trust Evaluation Engine
    Menilai event secara dinamis (behavior & context aware)

  • ๐Ÿ” Policy Enforcement (ALLOW / DENY)
    Enforcement point eksplisit (bukan implicit filtering)

  • ๐Ÿงฉ Plugin-based Architecture
    Logging, forwarding, alerting, extensible

  • ๐ŸŒ Adapters
    MQTT, HTTP, Webhook (extensible)

  • โš™๏ธ YAML / ENV Configuration

  • ๐Ÿ“ฆ Installable via PyPI


๐Ÿ“ฆ Installation

pip install palasik

Python >= 3.10 direkomendasikan.


๐Ÿš€ Quick Start

1๏ธโƒฃ Initialize Project

palasik init

Perintah ini akan membuat:

  1. config.yaml

  2. struktur dasar runtime PALASIK


2๏ธโƒฃ Run PALASIK Agent

palasik run

PALASIK akan:

  1. load konfigurasi

  2. start agent

  3. menunggu event dari adapter


3๏ธโƒฃ Example: MQTT Event

mosquitto_pub -t palasik/sensor/temp -m '{"value": 42}'

Alur yang terjadi:

  1. Event masuk via adapter

  2. Trust dievaluasi

  3. Policy diputuskan

  4. ALLOW โ†’ diteruskan

  5. DENY โ†’ diblok


๐Ÿง  How It Works (High Level)

Event โ†’ Trust Engine โ†’ Policy Engine โ†’ Enforcement
                         โ”‚
                         โ”œโ”€ ALLOW โ†’ Plugin / Adapter
                         โ””โ”€ DENY  โ†’ Blocked

PALASIK adalah decision layer, bukan sekadar message router.

๐Ÿ—‚ Project Structure

palasik/
โ”œโ”€โ”€ core/        # Agent, engine, context
โ”œโ”€โ”€ trust/       # Trust evaluators
โ”œโ”€โ”€ policy/      # Policy engines
โ”œโ”€โ”€ adapters/    # MQTT, HTTP, Webhook
โ”œโ”€โ”€ plugins/     # Extensible actions
โ”œโ”€โ”€ cli/         # palasik CLI
โ””โ”€โ”€ config/      # Config loader

โš™๏ธ Configuration

PALASIK menggunakan konfigurasi YAML + Environment Variable.

Contoh config.yaml

palasik:
  broker:
    host: localhost
    port: 1883
    topic: palasik/sensor/#

  policy:
    type: allow_deny
    threshold: 0.7

  plugins:
    enabled:
      - logger

Prioritas konfigurasi:

  1. Environment Variable

  2. YAML

  3. Default code

Detail lengkap: ๐Ÿ‘‰ docs/CONFIG.md


๐Ÿงช Testing

pytest

Semua komponen inti memiliki unit test.

๐Ÿ“š Documentation

Topik File
Architecture docs/ARCHITECTURE.md
Configuration docs/CONFIG.md
Trust Engine docs/raw/trust-engine.md
Policy Engine docs/raw/policy-engine.md
Research Docs docs/raw/

๐ŸŽ“ Research Context (Academic Track)

PALASIK berasal dari riset keamanan IoT berbasis Edge & Zero Trust dan tetap mempertahankan jalur akademik.

Jika kamu tertarik pada:

  1. skripsi / tesis

  2. paper / jurnal

  3. eksperimen trust & policy

๐Ÿ‘‰ lihat folder docs/raw/

๐Ÿค Contributing

Kontribusi sangat diterima, terutama:

trust model baru

policy logic

adapter tambahan

benchmark & dataset

dokumentasi & studi kasus

Panduan: ๐Ÿ‘‰ CONTRIBUTING.md


๐Ÿ“„ Citation

Jika menggunakan PALASIK dalam publikasi ilmiah, silakan sertakan sitasi:

๐Ÿ‘‰ citation.md


๐Ÿ“œ License

MIT License Bebas digunakan untuk riset dan pengembangan lanjutan.

๐Ÿ‘ค Maintainer

David Rinaldi IoT Security & Edge Computing ๐Ÿ”— https://github.com/notedavidrinaldi


๐Ÿšฆ Project Status

โœ… Core stable (v0.1.0)

๐Ÿ“ฆ Published on PyPI

๐Ÿงช Tested

๐Ÿ“˜ Research-ready

๐Ÿ”„ Actively improved


๐Ÿง  Final Note

PALASIK bukan sekadar project contoh. Ini adalah framework keputusan keamanan yang bisa berkembang ke:

  • Industrial IoT

  • Smart Infrastructure

  • Security research platform

Jika kamu ingin:

  • memakai โ†’ install & run

  • mengembangkan โ†’ plugin & adapter

  • meneliti โ†’ trust & policy

PALASIK sudah siap.

โญ Star repo ini jika relevan. ๐Ÿค Fork jika ingin eksperimen.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

palasik-0.1.1.tar.gz (15.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

palasik-0.1.1-py3-none-any.whl (20.6 kB view details)

Uploaded Python 3

File details

Details for the file palasik-0.1.1.tar.gz.

File metadata

  • Download URL: palasik-0.1.1.tar.gz
  • Upload date:
  • Size: 15.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for palasik-0.1.1.tar.gz
Algorithm Hash digest
SHA256 6b39df5d2c7a7816b19692d5f1cf4fb133dc56d9ec6a355d844d1199cce4f480
MD5 798b16c11bfcf3996cd9a101cdde9167
BLAKE2b-256 feb7025c94c45350e1a14581fbfad6f54158c3076424f2c6435925b3f7812ad7

See more details on using hashes here.

File details

Details for the file palasik-0.1.1-py3-none-any.whl.

File metadata

  • Download URL: palasik-0.1.1-py3-none-any.whl
  • Upload date:
  • Size: 20.6 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.12.3

File hashes

Hashes for palasik-0.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 ff5285b3bce4225eca4b21ccdd4cc1c8e2d1f2422f6fd8cfd536109ef458a8cb
MD5 45bb8aadfea1005424a290ea00bafa4b
BLAKE2b-256 729d5e65db5bd1a779268ae750100f892ef5a29f3366bcaeafe643e09ab3116b

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page