The Impact of Zero Trust Architecture on Enterprise Cybersecurity
Main Article Content
Abstract
Enterprise cybersecurity is now crucial in safeguarding digital services, apps, data, networks, and devices against ever-changing cyber threats. This review examines major enterprise cybersecurity roles, applications, architectures, and emerging intelligent defense techniques. It discusses signature- and behavior-based threat detection, highlighting the speed of signature matching while noting its limitations against unknown and modified attacks. Enterprise security architecture is reviewed through key components such as the Internet, demilitarized zone, firewalls, and organizational security policies. Major applications include network security, endpoint detection and response, security risk assessment, compliance, encryption, and cloud security risk management. The review further examines Zero Trust Architecture (ZTA), emphasizing Zero Trust Network Access, policy-based access control, cloud-based ZTNA, IoT security, and healthcare applications. Identity and Access Management is considered through identity lifecycle management, access governance, and role-based access control. Finally, state-of-the-art AI/ML techniques are analyzed, including machine learning, deep learning, transformer models, graph neural networks, federated learning, explainable AI, adversarial machine learning, and generative AI. Their applications in intrusion detection, anomaly detection, malware classification, behavioral analysis, and Industrial IoT threat intelligence demonstrate their potential to strengthen adaptive, proactive, resilient, and intelligent modern enterprise cybersecurity systems.
Downloads
Article Details
Section
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under a Creative Commons Attribution 4.0 International (CC BY 4.0) License. Authors retain the copyright of their work and grant the Journal of Global Research in Multidisciplinary Studies (JGRMS) the right of first publication. This license permits unrestricted use, distribution, adaptation, and reproduction in any medium or format, provided the original author(s), source, and publication are properly credited. Users may copy, redistribute, remix, transform, and build upon the published material for any purpose, including commercial use, in accordance with the terms of the CC BY 4.0 License.
How to Cite
References
[1] J. Kaur and K. R. Ramkumar, “The recent trends in cyber security: A review,” J. King Saud Univ. - Comput. Inf. Sci., vol. 34, no. 8, pp. 5766–5781, Sep. 2022, doi: 10.1016/j.jksuci.2021.01.018. DOI: https://doi.org/10.1016/j.jksuci.2021.01.018
[2] P. L. Jaiswal, R. Vishvakarma, and S. Jacob, “From Automation Panic to Workforce Resilience: A Governance Framework for Enterprise AI Transformation,” IARJSET, vol. 13, no. 5, pp. 463–485, May, May 2026, doi: 10.17148/IARJSET.2026.13562. DOI: https://doi.org/10.17148/IARJSET.2026.13562
[3] S. C. Pallaprolu, R. Sankineni, M. Thevar, G. Karabatis, and J. Wang, “Zero-day attack identification in streaming data using semantics and Spark,” in 2017 IEEE International Congress on Big Data (BigData Congress), Honolulu, HI, USA: IEEE, 2017, pp. 121–128, June. doi: 10.1109/BigDataCongress.2017.25.
[4] W. Tounsi and H. Rais, “A survey on technical threat intelligence in the age of sophisticated cyber attacks,” Comput. Secur., vol. 72, pp. 212–233, Jan. 2018, doi: 10.1016/j.cose.2017.09.001. DOI: https://doi.org/10.1016/j.cose.2017.09.001
[5] H. Chaudhary, A. Detroja, P. Prajapati, and P. Shah, “A review of various challenges in cybersecurity using Artificial Intelligence,” in 2020 3rd International Conference on Intelligent Sustainable Systems (ICISS), IEEE, Dec. 2020, pp. 829–836. doi: 10.1109/ICISS49785.2020.9316003. DOI: https://doi.org/10.1109/ICISS49785.2020.9316003
[6] S. Kumara and M. Shah, “Securing national connectivity infrastructure through identity resilience: implications for zero trust,” Futur. Technol. Open Access J., vol. 5, no. 3, pp. 276–286, August, 2026, doi: 10.55670/fpll.futech.5.3.24. DOI: https://doi.org/10.55670/fpll.futech.5.3.24
[7] S. M. J, A. S. N, and R. M, “Zero trust architecture in modern computer networks,” World J. Adv. Res. Rev., vol. 7, no. 3, pp. 347–356, Sep. 2020, doi: 10.30574/wjarr.2020.7.3.0280. DOI: https://doi.org/10.30574/wjarr.2020.7.3.0280
[8] S. Remella et al., “Intelligent Cost Governance in Cloud Supply Chains,” in 2025 1st International Conference on Advancement in Futuristic Technologies (ICAFT), Belagavi, India: IEEE, 2025, pp. 1–7, December. doi: 10.1109/ICAFT66710.2025.11452715. DOI: https://doi.org/10.1109/ICAFT66710.2025.11452715
[9] E. William, “From Perimeter Defense To Zero Trust: Evolving Cybersecurity for a Changing World,” 2022.
[10] S. Singh, “Advancing Network Security in 5G: Leveraging the 5G-NIDD Dataset for Intrusion Detection and Mitigation,” in 2025 IEEE 12th International Conference on Cyber Security and Cloud Computing (CSCloud), New York City, NY, USA: IEEE, 2025, pp. 1–6, November, December. doi: 10.1109/CSCloud66326.2025.00055. DOI: https://doi.org/10.1109/CSCloud66326.2025.00055
[11] V. Rohilla, K. Rohilla, P. Kumar, and N. Jain, “Intrusion Detection in Network Traffic Using Feature Selection and Optuna-Based Machine Learning Optimization,” in 2026 3rd International Conference on Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE), Chennai, India: IEEE, 2026, pp. 1–6, April. doi: 10.1109/RMKMATE69073.2026.11518834. DOI: https://doi.org/10.1109/RMKMATE69073.2026.11518834
[12] R. K. Kanneganti, “Security and Compliance Issues in Cloud-Based Deployments of Content and Workflow Management Systems,” Eastasouth J. Inf. Syst. Comput. Sci., vol. 2, no. 01, pp. 131–138, Aug. 2024, doi: 10.58812/esiscs.v2i01.1122. DOI: https://doi.org/10.58812/esiscs.v2i01.1122
[13] U. Narra, F. Di Troia, V. A. Corrado, T. H. Austin, and M. Stamp, “Clustering versus SVM for malware detection,” J. Comput. Virol. Hacking Tech., vol. 12, no. 4, pp. 213–224, Nov. 2016, doi: 10.1007/s11416-015-0253-z. DOI: https://doi.org/10.1007/s11416-015-0253-z
[14] S. M. Bidoki, S. Jalili, and A. Tajoddin, “PbMMD: A novel policy based multi-process malware detection,” Eng. Appl. Artif. Intell., vol. 60, pp. 57–70, Apr. 2017, doi: 10.1016/j.engappai.2016.12.008. DOI: https://doi.org/10.1016/j.engappai.2016.12.008
[15] W. H. Murray, “Enterprise Security Architecture,” Inf. Syst. Secur., vol. 6, no. 4, pp. 1–12, Dec. 1998, doi: 10.1201/1086/43299.6.4.19980101/30998.8. DOI: https://doi.org/10.1201/1086/43299.6.4.19980101/30998.8
[16] R. Von Solms and J. Van Niekerk, “From information security to cyber security,” Comput. Secur., 2013, doi: 10.1016/j.cose.2013.04.004. DOI: https://doi.org/10.1016/j.cose.2013.04.004
[17] P. L. Pradhan, “An Overview of EDR Serviceability for Security Information and Event Management (SIEM),” J. Inf. Assur. Secur., vol. 21, no. 2, pp. 52–88, Jul. 2026, doi: 10.2478/ias-2026-0004. DOI: https://doi.org/10.2478/ias-2026-0004
[18] B. G. Raggad, “Security Risk Management,” in Information Security Management, CRC Press, 2010, pp. 317–390. doi: 10.1201/9781439882634-13. DOI: https://doi.org/10.1201/9781439882634-13
[19] J. Boeken, “From compliance to security, responsibility beyond law,” Comput. Law Secur. Rev., vol. 52, p. 105926, Apr. 2024, doi: 10.1016/j.clsr.2023.105926. DOI: https://doi.org/10.1016/j.clsr.2023.105926
[20] D. Ajiga, P. A. Okeleke, S. O. Folorunsho, and C. Ezeigweneme, “Designing Cybersecurity Measures for Enterprise Software Applications to Protect Data Integrity,” Comput. Sci. IT Res. J., vol. 5, no. 8, pp. 1920–1941, Aug. 2024, doi: 10.51594/csitrj.v5i8.1451. DOI: https://doi.org/10.51594/csitrj.v5i8.1451
[21] T. K. Damenu and C. Balakrishna, “Cloud Security Risk Management: A Critical Review,” in 2015 9th International Conference on Next Generation Mobile Applications, Services and Technologies, IEEE, Sep. 2015, pp. 370–375. doi: 10.1109/NGMAST.2015.25. DOI: https://doi.org/10.1109/NGMAST.2015.25
[22] M. Vai et al., “Zero Trust Architecture Approach for Developing Mission Critical Embedded Systems,” in 2023 IEEE High Performance Extreme Computing Conference (HPEC), IEEE, Sep. 2023, pp. 1–5. doi: 10.1109/HPEC58863.2023.10363531. DOI: https://doi.org/10.1109/HPEC58863.2023.10363531
[23] F. A. Qazi, “Study of Zero Trust Architecture for Applications and Network Security,” in 2022 IEEE 19th International Conference on Smart Communities: Improving Quality of Life Using ICT, IoT and AI (HONET), 2022, pp. 111–116. doi: 10.1109/HONET56683.2022.10019186. DOI: https://doi.org/10.1109/HONET56683.2022.10019186
[24] N. F. Syed, S. W. Shah, A. Shaghaghi, A. Anwar, Z. Baig, and R. Doss, “Zero Trust Architecture (ZTA): A Comprehensive Survey,” 2022. doi: 10.1109/ACCESS.2022.3174679. DOI: https://doi.org/10.1109/ACCESS.2022.3174679
[25] S. Sarkar, G. Choudhary, S. K. Shandilya, A. Hussain, and H. Kim, “Security of Zero Trust Networks in Cloud Computing: A Comparative Review,” 2022. doi: 10.3390/su141811213. DOI: https://doi.org/10.3390/su141811213
[26] S. Mushtaq, M. Mohsin, and M. M. Mushtaq, “A Systematic Literature Review on the Implementation and Challenges of Zero Trust Architecture Across Domains,” Sensors, vol. 25, no. 19, pp. 1–25, 2025, doi: 10.3390/s25196118. DOI: https://doi.org/10.3390/s25196118
[27] N. Asthana, “Identity and Access Management (IAM) Expertise and Organizational Success Stories,” J. Inf. Syst. Eng. Manag., vol. 11, no. 2s, pp. 153–166, Feb. 2026, doi: 10.52783/jisem.v11i2s.14359. DOI: https://doi.org/10.52783/jisem.v11i2s.14359
[28] S. Samtani, H. Chen, M. Kantarcioglu, and B. Thuraisingham, “Explainable Artificial Intelligence for Cyber Threat Intelligence (XAI-CTI),” IEEE Trans. Dependable Secur. Comput., vol. 19, no. 4, pp. 2149–2150, Jul. 2022, doi: 10.1109/TDSC.2022.3168187. DOI: https://doi.org/10.1109/TDSC.2022.3168187
[29] Sharjil Iqbal, “NETWORK ATTACK DETECTION BY GROUP SEARCH OPTIMIZATION USING CONVOLUTIONAL DEEP LEARNING MODEL,” Int. J. Eng. Res. Sci. Technol., vol. 22, no. 1, pp. 579–585, February, Feb. 2026, doi: 10.62643/ijerst.2026.v22.n1.pp579-585. DOI: https://doi.org/10.62643/ijerst.2026.v22.n1.pp579-585
[30] S. C. Pallaprolu, “Zero-day Attack Identification in Streaming Data: Nearest Neighbor Heuristics and Dynamic Semantic Network Generation in the Spark Eco-system,” University of Maryland, Baltimore County, 2017. DOI: https://doi.org/10.1109/BigDataCongress.2017.25
[31] C.-Y. Chen et al., “IEEE Access Special Section Editorial: Artificial Intelligence in Cybersecurity,” IEEE Access, vol. 8, pp. 163329–163333, 2020, doi: 10.1109/ACCESS.2020.3021604. DOI: https://doi.org/10.1109/ACCESS.2020.3021604
[32] M. M. Nair, A. Deshmukh, and A. K. Tyagi, “Artificial Intelligence for Cyber Security,” in Automated Secure Computing for Next‐Generation Systems, Wiley, 2024, pp. 83–114. doi: 10.1002/9781394213948.ch5. DOI: https://doi.org/10.1002/9781394213948.ch5
[33] I. Bibi, A. Akhunzada, and N. Kumar, “Deep AI-Powered Cyber Threat Analysis in IIoT,” IEEE Internet Things J., vol. 10, no. 9, pp. 7749–7760, May 2023, doi: 10.1109/JIOT.2022.3229722. DOI: https://doi.org/10.1109/JIOT.2022.3229722
[34] R. K. Kotapati, “AI-Driven Zero Trust and PAM Architectures for Accessible, Inclusive, and Equitable Cybersecurity in Global Enterprise Environments,” in 2026 5th International Conference on Computer Networks, Big Data and IoT (ICCBI), IEEE, Jun. 2026, pp. 1136–1141. doi: 10.1109/ICCBI68589.2026.11619744. DOI: https://doi.org/10.1109/ICCBI68589.2026.11619744
[35] R. K, S. Sulthana, R. P. Krishna, S. G. Naik, and Kavya, “Redefining Trust Boundaries: A Holistic Synthesis of Zero-Trust Architecture Across Emerging Ecosystems,” in 2026 IEEE International Conference on Emerging Synergy Science and Technology (ICESST), IEEE, Apr. 2026, pp. 1–5. doi: 10.1109/ICESST69086.2026.11582862. DOI: https://doi.org/10.1109/ICESST69086.2026.11582862
[36] S. Qiu and C. Li, “A Supply Chain Finance Access Scheme Under Zero Trust Architecture and Blockchain Technology,” in 2025 21st International Conference on Natural Computation, Fuzzy Systems and Knowledge Discovery (ICNC-FSKD), IEEE, Jul. 2025, pp. 1–9. doi: 10.1109/ICNC-FSKD67701.2025.11198090. DOI: https://doi.org/10.1109/ICNC-FSKD67701.2025.11198090
[37] A. H. A. Alwyn, A. A. M. Adrian, and P. Deepalakshmi, “Create Cloud-Based Access Control Rules Cybersecurity: Applications of AI-Driven Policies and Zero Trust Architecture,” in 2025 International Conference on Electronics and Computing, Communication Networking Automation Technologies (ICEC2NT), IEEE, Sep. 2025, pp. 1–6. doi: 10.1109/ICEC2NT65402.2025.11380090. DOI: https://doi.org/10.1109/ICEC2NT65402.2025.11380090
[38] T. Sarkorn and K. Chimmanee, “Review on Zero Trust Architecture Apply In Enterprise Next Generation Firewall,” in 2024 8th International Conference on Information Technology (InCIT), IEEE, Nov. 2024, pp. 255–260. doi: 10.1109/InCIT63192.2024.10810611. DOI: https://doi.org/10.1109/InCIT63192.2024.10810611
[39] S. Al-Tamimi, Q. A. Al-Haija, and K. Alrawashdeh, “Zero-Trust Architecture for Securing Internet of Things (IoT) Networks: A Review,” in 2024 5th International Conference on Communications, Information, Electronic and Energy Systems (CIEES), IEEE, Nov. 2024, pp. 1–6. doi: 10.1109/CIEES62939.2024.10811176. DOI: https://doi.org/10.1109/CIEES62939.2024.10811176
[40] K. Che and S. Sheng, “Cloud Native Network Security Architecture Strategy under Zero Trust Scenario,” in 2023 IEEE 7th Information Technology and Mechatronics Engineering Conference (ITOEC), IEEE, Sep. 2023, pp. 867–871. doi: 10.1109/ITOEC57671.2023.10291357. DOI: https://doi.org/10.1109/ITOEC57671.2023.10291357