{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,13]],"date-time":"2026-10-13T22:49:16Z","timestamp":1791931756031,"version":"4.3.4"},"reference-count":57,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2025,7,17]],"date-time":"2025-07-17T00:00:00Z","timestamp":1752710400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,7,17]],"date-time":"2025-07-17T00:00:00Z","timestamp":1752710400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,8]]},"DOI":"10.1007\/s10207-025-01099-9","type":"journal-article","created":{"date-parts":[[2025,7,17]],"date-time":"2025-07-17T15:52:33Z","timestamp":1752767553000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["Enhancing software-defined perimeters with integrated identity solutions and threat detection for robust zero trust security"],"prefix":"10.1007","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3733-3805","authenticated-orcid":false,"given":"Antonio","family":"Paya","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2037-8548","authenticated-orcid":false,"family":"Vicente-Garc\u00eda","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3570-4043","authenticated-orcid":false,"given":"Alberto","family":"G\u00f3mez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,7,17]]},"reference":[{"key":"1099_CR1","doi-asserted-by":"crossref","unstructured":"Bubukayr, M.A.S., Almaiah, M.A.: Cybersecurity concerns in smart-phones and applications: A survey. In 2021 International Conference on Information Technology (ICIT), pages 725\u2013731. IEEE, (2021)","DOI":"10.1109\/ICIT52682.2021.9491691"},{"key":"1099_CR2","doi-asserted-by":"crossref","unstructured":"Roaa, A.N., Almaiah, M.A.: Cyber security threats in cloud: Literature review. In 2021 International Conference on Information Technology (ICIT), pages 779\u2013786. IEEE, (2021)","DOI":"10.1109\/ICIT52682.2021.9491638"},{"key":"1099_CR3","doi-asserted-by":"crossref","unstructured":"Karimi, M., Krishnamurthy, P.: Software defined ambit of data integrity for the internet of things. In 2021 IEEE\/ACM 21st International Symposium on Cluster, Cloud and Internet Computing (CCGrid), pages 737\u2013745. IEEE, (2021)","DOI":"10.1109\/CCGrid51090.2021.00089"},{"issue":"5","key":"1099_CR4","doi-asserted-by":"publisher","first-page":"226","DOI":"10.1109\/MNET.2019.1800324","volume":"33","author":"A Moubayed","year":"2019","unstructured":"Moubayed, A., Refaey, A., Shami, A.: Software-defined perimeter (sdp): State of the art secure solution for modern networks. IEEE Network 33(5), 226\u2013233 (2019)","journal-title":"IEEE Network"},{"key":"1099_CR5","first-page":"1","volume":"27","author":"J Kindervag","year":"2010","unstructured":"Kindervag, J., et al.: Build security into your networks dna: The zero trust network architecture. Forrester Research Inc 27, 1\u201316 (2010)","journal-title":"Forrester Research Inc"},{"key":"1099_CR6","unstructured":"Koilpillai, J., Murray, N.A.: Software defined perimeter (sdp) and zero trust. Cloud Security Alliance (CSA), (2020)"},{"key":"1099_CR7","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-207","volume-title":"Zero trust architecture","author":"S Rose","year":"2020","unstructured":"Rose, S., Borchert, O., Mitchell, S., Connelly, S.: Zero trust architecture. Technical report, National Institute of Standards and Technology (2020)"},{"key":"1099_CR8","doi-asserted-by":"publisher","unstructured":"Kumar, P., Moubayed, A., Refaey, A., Shami, A., Koilpillai, J.: Performance analysis of sdp for secure internal enterprises. In 2019 IEEE Wireless Communications and Networking Conference (WCNC), pages 1\u20136, (2019). https:\/\/doi.org\/10.1109\/WCNC.2019.8885784","DOI":"10.1109\/WCNC.2019.8885784"},{"key":"1099_CR9","doi-asserted-by":"crossref","unstructured":"Salitin, M.A., Zolait, A.H.: The role of user entity behavior analytics to detect network attacks in real time. In 2018 international conference on innovation and intelligence for informatics, computing, and technologies (3ICT), pages 1\u20135. IEEE, (2018)","DOI":"10.1109\/3ICT.2018.8855782"},{"issue":"1","key":"1099_CR10","first-page":"63","volume":"31","author":"M Rash","year":"2006","unstructured":"Rash, M.: Single packet authorization with fwknop. login: The USENIX Magazine 31(1), 63\u201369 (2006)","journal-title":"login: The USENIX Magazine"},{"key":"1099_CR11","doi-asserted-by":"crossref","unstructured":"Krmelj, G.R., Pan\u010dur, M., Grohar, M., Ciglari\u010d, M.: Openspa - an open and extensible protocol for single packet authorization. In Proceedings of the Central European Cybersecurity Conference 2018, pages 1\u20136, (2018)","DOI":"10.1145\/3277570.3277574"},{"key":"1099_CR12","unstructured":"Network Insight. Zero trust: Single packet authorization | passive authorization. http:\/\/bit.ly\/3tiUSip, Accessed: 2023-07-06 (2023)"},{"key":"1099_CR13","unstructured":"Degraaf, R., Aycock, J., Jacobson, M.: Improved port knocking with strong authentication. In 21st Annual Computer Security Applications Conference (ACSAC\u201905), pages 10\u2013pp. IEEE, (2005)"},{"key":"1099_CR14","unstructured":"Horne, D., Nair, S.: Introducing zero trust by design: Principles and practice beyond the zero trust hype. Advances in Security, Networks, and Internet of Things, pages 512\u2013525, (2021)"},{"key":"1099_CR15","first-page":"47","volume-title":"Mutual authentication with tls","author":"P Siriwardena","year":"2014","unstructured":"Siriwardena, P.: Mutual authentication with tls, pp. 47\u201358. Advanced API Security, Springer (2014)"},{"key":"1099_CR16","doi-asserted-by":"publisher","first-page":"626","DOI":"10.1016\/j.procs.2024.05.148","volume":"237","author":"M Matias","year":"2024","unstructured":"Matias, M., Ferreira, E., Mateus-Coelho, N., Ribeiro, O., Ferreira, L.: Evaluating effectiveness and security in microservices architecture. Procedia Computer Science 237, 626\u2013636 (2024)","journal-title":"Procedia Computer Science"},{"key":"1099_CR17","first-page":"195","volume-title":"Zero trust networks, the concepts, the strategies, and the reality","author":"D Haddon","year":"2021","unstructured":"Haddon, D.: Zero trust networks, the concepts, the strategies, and the reality, pp. 195\u2013216. Strategy, Leadership, and AI in the Cyber Ecosystem, Elsevier (2021)"},{"key":"1099_CR18","doi-asserted-by":"publisher","first-page":"170","DOI":"10.1016\/j.procs.2016.03.117","volume":"79","author":"DH Sharma","year":"2016","unstructured":"Sharma, D.H., Dhote, C., Potey, M.M.: . Identity and access management as security-as-a-service from clouds. Procedia Computer Science 79, 170\u2013174 (2016)","journal-title":"Procedia Computer Science"},{"issue":"1","key":"1099_CR19","first-page":"85","volume":"12","author":"J Pookandy","year":"2021","unstructured":"Pookandy, J.: Multi-factor authentication and identity management in cloud crm with best practices for strengthening access controls. International Journal of Information Technology & Management Information System (IJITMIS) 12(1), 85\u201396 (2021)","journal-title":"International Journal of Information Technology & Management Information System (IJITMIS)"},{"key":"1099_CR20","doi-asserted-by":"crossref","unstructured":"Olabanji, S.O., Olaniyi, O.O., Adigwe, C.S., Okunleye, O.J, Oladoyinbo, T.O.: Ai for identity and access management (iam) in the cloud: Exploring the potential of artificial intelligence to improve user authentication, authorization, and access control within cloud-based systems. Authorization, and Access Control within Cloud-Based Systems (January 25, 2024), (2024)","DOI":"10.2139\/ssrn.4706726"},{"issue":"5","key":"1099_CR21","doi-asserted-by":"publisher","first-page":"5112","DOI":"10.1007\/s10207-023-00682-2","volume":"22","author":"OH Abdulganiyu","year":"2023","unstructured":"Abdulganiyu, O.H., Taha, A.T., Saheed, Y.K.: A systematic literature review for network intrusion detection system (ids). Int. J. Inf. Secur. 22(5), 5112\u20131162 (2023)","journal-title":"Int. J. Inf. Secur."},{"issue":"4","key":"1099_CR22","first-page":"444","volume":"7","author":"SM Othman","year":"2018","unstructured":"Othman, S.M., Alsohybe, N.T., Ba-Alwi, F.M., Zahary, A.T.: Survey on intrusion detection system types. International Journal of Cyber-Security and Digital Forensics 7(4), 444\u2013463 (2018)","journal-title":"International Journal of Cyber-Security and Digital Forensics"},{"issue":"7","key":"1099_CR23","doi-asserted-by":"publisher","first-page":"23","DOI":"10.5120\/20758-3163","volume":"118","author":"A Pharate","year":"2015","unstructured":"Pharate, A., Bhat, H., Shilimkar, V., Mhetre, N.: Classification of intrusion detection system. International Journal of Computer Applications 118(7), 23\u201326 (2015)","journal-title":"International Journal of Computer Applications"},{"issue":"1","key":"1099_CR24","first-page":"6639714","volume":"2021","author":"S Einy","year":"2021","unstructured":"Einy, S., Oz, C., Navaei, Y.D.: The anomaly-and signature-based ids for network security using hybrid inference systems. Math. Probl. Eng. 2021(1), 6639714 (2021)","journal-title":"Math. Probl. Eng."},{"key":"1099_CR25","doi-asserted-by":"crossref","unstructured":"Shaik, A.S., Shaik, A.: Ai enhanced cyber security methods for anomaly detection. In International Conference on Machine Intelligence, Tools, and Applications, pages 348\u2013359. Springer, (2024)","DOI":"10.1007\/978-3-031-65392-6_30"},{"key":"1099_CR26","doi-asserted-by":"crossref","unstructured":"Khan, M.Z.A., Khan, M.M., Arshad, J.: Anomaly detection and enterprise security using user and entity behavior analytics (ueba). In 2022 3rd International Conference on Innovations in Computer Science & Software Engineering (ICONICS), pages 1\u20139. IEEE, (2022)","DOI":"10.1109\/ICONICS56716.2022.10100596"},{"key":"1099_CR27","unstructured":"DoD Enterprise. Department of defense global information grid architectural vision. Department of Defense Global Information Grid Architectural Vision, (2007)"},{"key":"1099_CR28","unstructured":"Information Technology\u00a0Laboratory Computer Security\u00a0Division. Security Content Automation Protocol: Csrc. https:\/\/csrc.nist.gov\/projects\/security-content-automation-protocol, 2024. Accessed: 2024-06-21"},{"key":"1099_CR29","first-page":"161","volume":"7","author":"M Lane","year":"2010","unstructured":"Lane, M., Marie, M.: The adoption of single sign-on and multifactor authentication in organisations-a critical evaluation using toe framework. Information in Motion 7, 161 (2010)","journal-title":"Information in Motion"},{"key":"1099_CR30","unstructured":"Kuperberg, M., Klemens,R.: Integration of self-sovereign identity into conventional software using established iam protocols: a survey. (2022)"},{"key":"1099_CR31","unstructured":"Viso\u010dnik, V.: Comparison of JWT and OAuth 2.0 for authorisation and authentication in rest services. PhD thesis, Univerza v Mariboru, Fakulteta za elektrotehniko, ra\u010dunalni\u0161tvo in informatiko, (2018)"},{"key":"1099_CR32","doi-asserted-by":"crossref","unstructured":"Syynimaa, N.: Exploring azure active directory attack surface: Enumerating authentication methods with open-source intelligence tools. In International Conference on Enterprise Information Systems. SCITEPRESS Science And Technology Publications, (2022)","DOI":"10.5220\/0011077100003179"},{"key":"1099_CR33","doi-asserted-by":"publisher","first-page":"636","DOI":"10.1016\/j.procs.2020.03.330","volume":"167","author":"A Thakkar","year":"2020","unstructured":"Thakkar, A., Lohiya, R.: A review of the advancement in intrusion detection datasets. Procedia Computer Science 167, 636\u2013645 (2020)","journal-title":"Procedia Computer Science"},{"key":"1099_CR34","doi-asserted-by":"publisher","first-page":"22351","DOI":"10.1109\/ACCESS.2021.3056614","volume":"9","author":"ZK Maseer","year":"2021","unstructured":"Maseer, Z.K., Yusof, R., Bahaman, N., Mostafa, S.A., Foozy, C.: Benchmarking of machine learning for anomaly based intrusion detection systems in the cicids2017 dataset. IEEE access 9, 22351\u201322370 (2021)","journal-title":"IEEE access"},{"key":"1099_CR35","doi-asserted-by":"publisher","first-page":"205","DOI":"10.1016\/j.procs.2022.03.029","volume":"201","author":"EA Emad","year":"2022","unstructured":"Emad, E.A., Otoom, A.F.: Intrusion detection systems using supervised machine learning techniques: A survey. Procedia Computer Science 201, 205\u2013212 (2022)","journal-title":"Procedia Computer Science"},{"key":"1099_CR36","doi-asserted-by":"crossref","unstructured":"Huang, L., Joseph, A.D., Nelson, B., Rubinstein, B.IP., Tygar, J.D.: Adversarial machine learning. In Proceedings of the 4th ACM workshop on Security and artificial intelligence, pages 43\u201358, (2011)","DOI":"10.1145\/2046684.2046692"},{"key":"1099_CR37","unstructured":"De Cristofaro,E.: An overview of privacy in machine learning.(2020) arXiv preprint arXiv:2005.08679"},{"key":"1099_CR38","unstructured":"Nicolae, M.I., Sinn, M., Tran, M.N., Buesser, B., Rawat, A., Wistuba, M., Zantedeschi, V., N., Baracaldo, Chen, B., Ludwig, H., Molloy, I., Edwards, B.: Adversarial robustness toolbox v1.2.0. CoRR, 1807.01069, (2018). URL https:\/\/arxiv.org\/pdf\/1807.01069"},{"key":"1099_CR39","unstructured":"Kou, C., Lee, H.K., Chang, E.C., Ng, T.K.: Enhancing transformation-based defenses using a distribution classifier.(2019) arXiv preprint arXiv:1906.00258"},{"key":"1099_CR40","doi-asserted-by":"crossref","unstructured":"Wang, Y., Sun, T., Li, S., Yuan, X., Ni, W., Hossain, E., Poor, H.V.: Adversarial attacks and defenses in machine learning-powered networks: A contemporary survey.(2023) arXiv preprint arXiv:2303.06302","DOI":"10.1109\/COMST.2023.3319492"},{"key":"1099_CR41","doi-asserted-by":"crossref","unstructured":"Zizzo, G., Hankin, C., Maffeis, S., JonesK.: Adversarial machine learning beyond the image domain. In Proceedings of the 56th Annual Design Automation Conference 2019, pages 1\u20134, (2019)","DOI":"10.1145\/3316781.3323470"},{"key":"1099_CR42","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103546","volume":"136","author":"A Paya","year":"2024","unstructured":"Paya, A., Arroni, S., Garc\u00eda-D\u00edaz, V., G\u00f3mez, A.: Apollon: a robust defense system against adversarial machine learning attacks in intrusion detection systems. Computers & Security 136, 103546 (2024)","journal-title":"Computers & Security"},{"key":"1099_CR43","doi-asserted-by":"crossref","unstructured":"Kumar, R., Kumar, P., Kumar, A., Franklin, A.A., Jolfaei, A.: Blockchain and deep learning for cyber threat-hunting in software-defined industrial iot. In 2022 IEEE International Conference on Communications Workshops (ICC Workshops), pages 776\u2013781. IEEE, (2022)","DOI":"10.1109\/ICCWorkshops53468.2022.9814706"},{"issue":"23","key":"1099_CR44","doi-asserted-by":"publisher","first-page":"3982","DOI":"10.3390\/electronics11233982","volume":"11","author":"RF Olanrewaju","year":"2022","unstructured":"Olanrewaju, R.F., Khan, B., Kiah, M., Abdullah, N.A., Goh, K.W.: Decentralized blockchain network for resisting side-channel attacks in mobility-based iot. Electronics 11(23), 3982 (2022)","journal-title":"Electronics"},{"key":"1099_CR45","doi-asserted-by":"crossref","unstructured":"Kumar, P., Kumar, R., Kumar, A., Franklin, A.A., Jolfaei, A.: Blockchain and deep learning empowered secure data sharing framework for softwarized uavs. In 2022 IEEE International Conference on Communications Workshops (ICC Workshops), pages 770\u2013775. IEEE, (2022)","DOI":"10.1109\/ICCWorkshops53468.2022.9814485"},{"issue":"11","key":"1099_CR46","doi-asserted-by":"publisher","first-page":"544","DOI":"10.3390\/info13110544","volume":"13","author":"BI Ul Khan","year":"2022","unstructured":"Ul Khan, B.I., Anwar, F., Bt Rahman, F., Olanrewaju, R.F., Goh, K.W., Janin, Z., Rahman, M.A.: Sgm: Strategic game model for resisting node misbehaviour in iot-cloud ecosystem. Information 13(11), 544 (2022)","journal-title":"Information"},{"key":"1099_CR47","doi-asserted-by":"publisher","first-page":"98481","DOI":"10.1109\/ACCESS.2020.2997711","volume":"8","author":"BI Ul Khan","year":"2020","unstructured":"Ul Khan, B.I., Anwar, F., Olanrewaju, R.F., Pampori, B.R., Mir, R.N.: A novel multi-agent and multilayered game formulation for intrusion detection in internet of things (iot). IEEE Access 8, 98481\u201398490 (2020)","journal-title":"IEEE Access"},{"key":"1099_CR48","unstructured":"Koilpillai, J.: Software defined perimeter (sdp) a primer for cios. Waverley Labs LLC, 276, (2017)"},{"key":"1099_CR49","unstructured":"Twingate. Zero trust: Single packet authorization | passive authorization. https:\/\/www.twingate.com\/landing\/best-sdp, (2024). Accessed: 2024-09-16"},{"key":"1099_CR50","unstructured":"Cisco. Software-defined access. https:\/\/www.cisco.com\/c\/en\/us\/solutions\/enterprise-networks\/software-defined-access\/index.html, (2024). Accessed: 2024-09-16"},{"key":"1099_CR51","unstructured":"Perimeter81. Perimeter81 software-defined perimeter. https:\/\/www.perimeter81.com\/es\/software-defined-perimeter, (2024). Accessed: 2024-09-16"},{"key":"1099_CR52","unstructured":"Cato Networks. Optimized and secure remote access. https:\/\/www.catonetworks.com\/es\/cato-sase-cloud\/optimized-and-secure-remote-access\/,(2024). Accessed: 2024-09-16"},{"key":"1099_CR53","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10207-024-00863-7","volume":"23","author":"A Paya","year":"2024","unstructured":"Paya, A., Garc\u00eda-D\u00edaz, V., G\u00f3mez, A.: Securesdp: a novel software-defined perimeter implementation for enhanced network security and scalability. Int. J. Inf. Secur. 23, 1\u201316 (2024)","journal-title":"Int. J. Inf. Secur."},{"key":"1099_CR54","doi-asserted-by":"publisher","unstructured":"Sharafaldin, I., Lashkari, A.H., Hakak, S., Ghorbani, A.A.: Developing realistic distributed denial of service (ddos) attack dataset and taxonomy. In 2019 International Carnahan Conference on Security Technology (ICCST), pages 1\u20138, (2019) https:\/\/doi.org\/10.1109\/CCST.2019.8888419","DOI":"10.1109\/CCST.2019.8888419"},{"key":"1099_CR55","doi-asserted-by":"crossref","unstructured":"Chen, P.Y., Zhang, H., Sharma, Y., Yi, J., Hsieh, C.J.: Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In Proceedings of the 10th ACM workshop on artificial intelligence and security, pages 15\u201326, (2017)","DOI":"10.1145\/3128572.3140448"},{"key":"1099_CR56","doi-asserted-by":"crossref","unstructured":"Chen, J., Jordan, M.I., Wainwright, M.J.: Hopskipjumpattack: A query-efficient decision-based attack, (2020)","DOI":"10.1109\/SP40000.2020.00045"},{"key":"1099_CR57","doi-asserted-by":"crossref","unstructured":"Usama, M., Asim, M., Latif, S., Qadir, J.: et al. Generative adversarial networks for launching and thwarting adversarial attacks on network intrusion detection systems. In 2019 15th international wireless communications & mobile computing conference (IWCMC), pages 78\u201383. IEEE, (2019)","DOI":"10.1109\/IWCMC.2019.8766353"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01099-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01099-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01099-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,5]],"date-time":"2025-09-05T11:33:44Z","timestamp":1757072024000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01099-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,7,17]]},"references-count":57,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2025,8]]}},"alternative-id":["1099"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01099-9","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,7,17]]},"assertion":[{"value":"17 July 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}},{"value":"This article is the authors\u2019 original work, has not received prior publication and is not under consideration for publication elsewhere.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics Approval"}},{"value":"The authors of this research paper are committed to promoting transparency, reproducibility, and open access to scientific data. In accordance with our research data policy, we provide detailed information regarding the availability and accessibility of the data used in this study.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Research Data Policy"}}],"article-number":"178"}}