With the rise and advancements of technology, digital security is facing unprecedented challenges. Traditional security measures, such as strong credentials and multi-factor authentication (MFA), are no longer sufficient to protect digital assets from attacks and unauthorized access or to effectively verify user authenticity. Zero trust architecture (ZTA) has emerged as a solution in response to these issues. Leading organizations, including Google, Forrester, Palo Alto, and CISCO, have initiated strategies to design their own deployable ZTAs to offer the perks of ZT to other organizations. It operates on various principles such as removing implicit trust, continuously authenticating users, and de-perimeterization. It provides a top-notch defense against various major cyberattacks on organizations. This study offers a comprehensive and multi-dimensional synthesis of ZTAs. It also examines the principles and implementation strategies of various ZTAs, comparing them using multiple parameters to highlight their strengths and weaknesses. In addition to the synthesis of ZTAs, the work demonstrates its practical value with sector-specific examples to make it more relevant for real-world applications. Through a detailed analysis, the study identified potential research gaps and areas in existing research that require further investigation. These insights can guide future developments in digital security. The findings aim to help organizations select and implement the most effective ZT strategies to enhance their cybersecurity posture.
RoseSBorchertOMitchellS, et al.NIST Special Publication 800-207, National Institute of Standards and Technology (NIST). 2020.
3.
WardRBeyerB. Beyondcorp: a new approach to enterprise security. ; login:: the Magaz USENIX & SAGE2014; 39: 6–11.
4.
VarmaR. Mcafee labs: combating aurora, 2010.
5.
KindervagJBalaourasS, et al.No more chewy centers: Introducing the zero trust model of information security. Forrester Research, Technical Report. 2010.
Office of Management and Budget (OMB). Moving the U.S. Government Toward Zero Trust Cybersecurity Principles (Memorandum M-22-09). Technical report, U.S. Government, 2022. https://www.whitehouse.gov/wp-content/uploads/2022/01/M-22-09.pdf. OMB Memorandum for Executive Departments and Agencies.
KumarSShankerRVermaS. Context aware dynamic permission model: a retrospect of privacy and security in android system. In: 2018 international conference on intelligent circuits and systems (ICICS), 2018, pp.324–329. IEEE.
15.
AbowdGDDeyAKBrownPJ, et al.Towards a better understanding of context and context-awareness. In: Handheld and Ubiquitous computing: first international symposium, HUC’99 Karlsruhe, Germany, September 27–29, 1999 Proceedings 1, 1999, pp.304–307. Springer.
16.
KhaliqSTariqZUAMasoodA. Role of user and entity behavior analytics in detecting insider attacks. In: 2020 International conference on cyber warfare and security (ICCWS), 2020, pp.1–6. IEEE.
17.
EdoOCAngDBillakotaP, et al.A zero trust architecture for health information systems. Health Technol (Berl)2024; 14: 189–199.
18.
ChuanTLvYQiZ, et al.An implementation method of zero-trust architecture. J Phys: Conf Ser2020; 1651: 012010.
19.
MehrajSBandayMT. Establishing a zero trust strategy in cloud computing environment. In: 2020 International conference on computer communication and informatics (ICCCI), 2020, pp.1–6. IEEE.
20.
PaulBRaoM. Zero-trust model for smart manufacturing industry. Appl Sci2022; 13: 221.
21.
HussainMPalSJadidiZ, et al.Federated zero trust architecture using artificial intelligence. IEEE Wirel Commun2024; 31: 30–35.
22.
TsaiMLeeSShiehSW. Strategy for implementing of zero trust architecture. IEEE Trans Reliab2024; 73: 93–100.
RahemanF. From standard policy-based zero trust to absolute zero trust (AZT): a quantum leap to Q-day security. J Comput Commun2024; 12: 252–282.
26.
D’SilvaDAmbawadeDD. Building a zero trust architecture using kubernetes. In: 2021 6th international conference for convergence in technology (I2CT), 2021, pp.1–8. IEEE.
27.
HatakeyamaKKotaniDOkabeY. Zero trust federation: sharing context under user control towards zero trust in identity federation. In: 2021 IEEE International conference on pervasive computing and communications workshops and other affiliated events (PerCom Workshops), 2021, pp.514–519. IEEE.
28.
AndersonJHuangQChengL, et al.BYOZ: protecting BYOD through zero trust network security. In: 2022 IEEE International conference on networking, architecture and storage (NAS), 2022, pp.1–8. IEEE.
29.
HongSXuLHuangJ, et al.Sysflow: toward a programmable zero trust framework for system security. IEEE Trans Inform Forens Sec2023; 18: 2794–2809.
30.
WangZYuXXueP, et al.Research on medical security system based on zero trust. Sensors2023; 23: 3774.
31.
NagarajanSMDevarajanGGThangakrishnanMS, et al.Artificial intelligence-based zero trust security approach for consumer industry. IEEE Trans Consumer Elect2024; 70: 5411–5418.
32.
DinIUKhanKHAlmogrenA, et al.Securing the metaverse: a blockchain-enabled zero-trust architecture for virtual environments. IEEE Access2024; 12: 92337–92347.
33.
LeeSHuhJHWooH. Security system design and verification for zero trust architecture. Electronics2025; 14: 643.
34.
AleisaMA. Blockchain-enabled zero trust architecture for privacy-preserving cybersecurity in IoT environments. IEEE Access2025; 13: 18660–18676.
35.
WangRLiCZhangK, et al.Zero-trust based dynamic access control for cloud computing. Cybersecurity2025; 8: 12.
36.
NazirAIqbalZMuhammadZ. ZTA: a novel zero trust framework for detection and prevention of malicious android applications. Wirel Networks2025; 31: 3187–3203.
37.
PokhrelSRLiGDossR, et al.Towards decentralized operationalization of zero trust architecture for next generation networks. IEEE J Select Areas Commun2025; 43: 1998–2010.
38.
ZhouXLiangWKevinI, et al.Decentralized federated graph learning with lightweight zero trust architecture for next-generation networking security. IEEE J Select Areas Commun2025; 43: 1908–1922.
39.
AsimMTariqNAwadAI, et al.SecT: a zero-trust framework for secure remote access in next-generation industrial networks. IEEE J Select Areas Commun2025; 43: 2293–2311.
40.
ShahzadMSinghMP. Continuous authentication and authorization for the internet of things. IEEE Internet Comput2017; 21: 86–90.
41.
ShahSWSyedNFShaghaghiA, et al.LCDA: lightweight continuous device-to-device authentication for a zero trust architecture (ZTA). Comput Sec2021; 108: 102351.
42.
MengLHuangDAnJ, et al.A continuous authentication protocol without trust authority for zero trust architecture. China Commun2022; 19: 198–213.
43.
AlshomraniSLiS. PUFDCA: a zero-trust-based IoT device continuous authentication protocol. Wireless Commun Mobile Comput2022; 2022: 6367579.
44.
EmbreyB. The top three factors driving zero trust adoption. Comput Fraud Sec2020; 2020: 13–15.
45.
TeerakanokSUeharaTInomataA. Migrating to zero trust architecture: reviews and challenges. Sec Commun Networks2021; 2021: 9947347.
46.
PeckJBeyerBBeskeC, et al.Migrating to beyondcorp: maintaining productivity while improving security. Login2017; 42: 1–7.
47.
PhiayuraPTeerakanokS. A comprehensive framework for migrating to zero trust architecture. IEEE Access2023; 11: 19487–19511.
DiezFPVasuACToucedaDS, et al.Modeling XACML security policies using graph databases. IT Prof2017; 19: 52–57.
50.
VanickisRJacobPDehghanzadehS, et al.Access control policy enforcement for zero-trust-networking. In: 2018 29th Irish signals and systems conference (ISSC), 2018, pp.1–6. IEEE.
51.
DimitrakosTDilshenerTKravtsovA, et al.Trust aware continuous authorization for zero trust in consumer internet of things. In: 2020 IEEE 19th international conference on trust, security and privacy in computing and communications (TrustCom), 2020, pp.1801–1812. IEEE.
52.
FatemianAZamaniBMasoumiM, et al.Automatic generation of XACML code using model-driven approach. In: 2021 11th International conference on computer engineering and knowledge (ICCKE), 2021, pp.206–211. IEEE.
53.
MohamedAAuerDHoferD, et al.Extended authorization policy for graph-structured data. SN Comput Sci2021; 2: 351.
54.
BatraSTyagiC. Comparative analysis of relational and graph databases. Int J Soft Comput Eng (IJSCE)2012; 2: 509–512.
55.
čerešňákRKvetM. Comparison of query performance in relational a non-relation databases. Trans Res Proc2019; 40: 170–177.
ZyoudBLutfiSL. The role of information security culture in zero trust adoption: insights from UAE organizations. IEEE Access2024; 12: 72420–72444.
59.
DaahCQureshiAAwanI. Zero trust model implementation considerations in financial institutions: a proposed framework. In: 2023 10th International Conference on Future Internet of Things and Cloud (FiCloud), 2023, pp.71–77. IEEE.
60.
DaahCQureshiAAwanI, et al.Enhancing zero trust models in the financial industry through blockchain integration: a proposed framework. Electronics2024; 13: 865.
AlsuwaidiNAlharmoodiNAl HamadiH. The transformative impact of zero-trust architecture on healthcare security. In: 2024 2nd International conference on cyber resilience (ICCR), 2024, pp.1–8. IEEE.
63.
ChenBQiaoSZhaoJ, et al.A security awareness and protection system for 5G smart healthcare based on zero-trust architecture. IEEE Int Things J2020; 8: 10248–10263.
64.
TylerDVianaT. Trust no one? a framework for assisting healthcare organisations in transitioning to a zero-trust network architecture. Appl Sci2021; 11: 7499.
65.
DharSBoseI. Securing IoT devices using zero trust and blockchain. J Organ Comput Elect Commerce2021; 31: 18–34.
66.
LiSIqbalMSaxenaN. Future industry internet of things with zero-trust security. Inform Syst Front2022; 1–14.
67.
FengYZhongZSunX, et al.Blockchain enabled zero trust based authentication scheme for railway communication networks. J Cloud Comput2023; 12: 62.
68.
do AmaralTMSGondimJJC. Integrating zero trust in the cyber supply chain security. In: 2021 Workshop on communication networks and power systems (WCNPS), 2021, pp.1–6. IEEE.
69.
CollierZASarkisJ. The zero trust supply chain: managing supply chain risk in the absence of trust. Int J Prod Res2021; 59: 3430–3445.
70.
TuyishimeERaduFCotfasP, et al.Online laboratory access control with zero trust approach: twingate use case. In: 2024 16th International conference on electronics, computers and artificial intelligence (ECAI), 2024, pp.1–7. IEEE.
AdahmanZMalikAWAnwarZ. An analysis of zero-trust architecture and its cost-effectiveness for organizational security. Comput Sec2022; 122: 102911.
75.
RamamoorthiLSSarkarD. Single sign-on: a solution approach to address inefficiencies during sign-out process. IEEE Access2020; 8: 195675.
76.
Salles-LoustauGGarciaLJoshiK, et al.Don’t just BYOD, bring-your-own-app too! protection via virtual micro security perimeters. In: 2016 46th Annual IEEE/IFIP international conference on dependable systems and networks (DSN), 2016, pp.526–537. IEEE.
77.
DasSRoutJMishraM. Blockchain technology: applications and open issues. In: 2022 International conference on communication, computing and internet of things (IC3IoT), 2022, pp.1–6, IEEE.
78.
RoutJMishraMDasS, et al.“Blockchain based multimedia content authentication using ethereum: transformation towards decentralized framework.” In: International conference on microwave, optical, and communication engineering (ICMOCE), 2025, pp.1–5.
79.
LiuYHaoXRenW, et al.A blockchain-based decentralized, fair and authenticated information sharing scheme in zero trust internet-of-things. IEEE Trans Comput2022; 72: 501–512.
80.
RiveraJJDMuhammadASongWC. Securing digital identity in the zero trust architecture: a blockchain approach to privacy-focused multi-factor authentication. IEEE Open J Commun Soc2024.
81.
HaagSEckhardtA. Shadow IT. Bus Inform Syst Eng2017; 59: 469–473.
82.
TabrizchiHKuchaki RafsanjaniM. A survey on security challenges in cloud computing: issues, threats, and solutions. J Supercomput2020; 76: 9493–9532.
83.
MeehanRA. The need to optimize the electronic health record: usability issues in legacy systems can compromise patient safety. In: Healthinf, 2020, pp.609–613.
84.
CsikorLSzalayMRétváriG, et al.Transition to SDN is HARMLESS: hybrid architecture for migrating legacy ethernet switches to SDN. IEEE ACM Trans Netw2020; 28: 275–288.
85.
ZolotukhinMHämäläinenTKotilainenP. Intelligent solutions for attack mitigation in zero-trust environments. In: Cyber security: critical infrastructure protection, 2022. pp. 403–417. Cham, Switzerland: Springer.
86.
LiSIqbalMSaxenaN. Future industry internet of things with zero-trust security. Inform Syst Front2024; 26: 1653–1666.
OkikaNNwatuzieGAOlarinoyeHS, et al.Assessing the vulnerability of traditional and post-quantum cryptographic systems through penetration testing and strengthening cyber defenses with zero trust security in the era of quantum computing. Int J Innovat Sci Res Technol2025; 10: 1240–1258.
