posted an update —

This script represents the trusted IoT device in our Zero Trust setup, the real heart monitor that should be allowed to send data to the hospital network. It continuously sends heartbeat and oxygen readings to the gateway’s /vitals-db endpoint every two seconds, along with a valid JWT token that verifies its identity. When I run it, I’m basically showing what normal, authorized traffic looks like in our system. The gateway checks the token, recognizes the device as legitimate, and logs an “Access Granted” event that appears as a green “Allowed” entry on the dashboard. It’s a simple but effective way to prove that trusted devices can communicate smoothly under the Zero Trust framework, while anything suspicious or unauthorized like the attacker script gets flagged or denied in real time.

Log in or sign up for Devpost to join the conversation.