{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T17:01:28Z","timestamp":1785862888222,"version":"3.56.0"},"reference-count":82,"publisher":"Tech Science Press","issue":"2","license":[{"start":{"date-parts":[[2025,2,23]],"date-time":"2025-02-23T00:00:00Z","timestamp":1740268800000},"content-version":"vor","delay-in-days":53,"URL":"https:\/\/doi.org\/10.32604\/TSP-CROSSMARKPOLICY"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["CMC"],"published-print":{"date-parts":[[2025]]},"DOI":"10.32604\/cmc.2025.059170","type":"journal-article","created":{"date-parts":[[2025,1,2]],"date-time":"2025-01-02T02:48:24Z","timestamp":1735786104000},"page":"1593-1613","update-policy":"https:\/\/doi.org\/10.32604\/tsp-crossmarkpolicy","source":"Crossref","is-referenced-by-count":9,"title":["Zero Trust Networks: Evolution and Application from Concept to Practice"],"prefix":"10.32604","volume":"82","author":[{"given":"Yongjun","family":"Ren","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhiming","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pradip Kumar","family":"Sharma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fayez","family":"Alqahtani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Amr","family":"Tolba","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jin","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"17807","published-online":{"date-parts":[[2025]]},"reference":[{"key":"ref1","first-page":"1","volume":"27","author":"Kindervag","year":"2010","journal-title":"Build Security into Your Network\u2019s DNA: The Zero Trust Network Architecture"},{"key":"ref2","first-page":"6","article-title":"BeyondCorp: A new approach to enterprise security","volume":"39","author":"Ward","year":"2014","journal-title":"USENIX SAGE"},{"key":"ref3","unstructured":"C. S. A. (CSA), \u201cSDP specification v1.0,\u201d 2014. Accessed: Aug. 20, 2024. [Online]. Available: https:\/\/cloudsecurityalliance.org\/artifacts\/sdp-specification-v1-0\/"},{"key":"ref4","first-page":"18","article-title":"360 security brain leads the intelligent era of security protection","volume":"3","author":"Zhou","year":"2018","journal-title":"Cybersecur. Informatizat."},{"key":"ref5","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1007\/978-1-4842-4230-8_2","article-title":"Azure and office 365 security","author":"Katzer","year":"2018","journal-title":"Securing Office 365"},{"key":"ref6","doi-asserted-by":"crossref","unstructured":"V. Stafford, \u201cZero trust architecture,\u201d NIST Special Publication 800-207, 2020. doi: 10.6028\/NIST.SP.800-207.","DOI":"10.6028\/NIST.SP.800-207"},{"key":"ref7","unstructured":"S. D. Young, \u201cMoving the US government toward zero trust cybersecurity principles,\u201d The White House\u2019s Office of Management and Budget, 2022."},{"key":"ref8","author":"Wilder","year":"2012","journal-title":"Cloud Architecture Patterns: Using Microsoft Azure"},{"key":"ref9","author":"Halfpenny","year":"2023","journal-title":"Welcome to Citrix Workspace (PC)"},{"key":"ref10","first-page":"2085","article-title":"Automation of information security audit in the information system on the example of a standard \u201ccis palo alto 8 firewall benchmark\u201d","volume":"9","author":"Perminov","year":"2020","journal-title":"Int. J."},{"key":"ref11","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4842-5431-8","author":"Keeriyattil","year":"2019","journal-title":"Zero Trust Networks with VMware NSX"},{"key":"ref12","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1145\/3273982.3273994","article-title":"Bringing platform harmony to VMware NSX","volume":"52","author":"Pettit","year":"2018","journal-title":"2018 ACM SIGOPS Oper. Syst. Rev."},{"key":"ref13","doi-asserted-by":"crossref","DOI":"10.1201\/9781003470021","author":"Das","year":"2024","journal-title":"The Zero Trust Framework and Privileged Access Management (PAM)"},{"key":"ref14","series-title":"2021 IEEE Int. Conf. Pervasive Comput. Commun. Workshops other Affiliated Events (PerCom Workshops)","first-page":"514","article-title":"Zero trust federation: Sharing context under user control towards zero trust in identity federation","author":"Hatakeyama","year":"2021"},{"key":"ref15","series-title":"2024 2nd Int. Conf. Mechatron., IoT Industr. Inform. (ICMIII)","first-page":"938","article-title":"Analysis and inspiration of key elements of zero trust network architecture","author":"Wang","year":"2024"},{"key":"ref16","doi-asserted-by":"crossref","DOI":"10.3390\/e25121595","article-title":"Theory and application of zero trust security: A brief survey","volume":"25","author":"Kang","year":"2023, Art. no. 1595","journal-title":"Entropy"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1016\/S1353-4858(21)00019-2","article-title":"The state of zero trust in the age of fluid working","volume":"2021","author":"Sheridan","year":"2021","journal-title":"Netw. Secur."},{"key":"ref18","series-title":"Int. Conf. Comput. Eng. Netw.","first-page":"82","article-title":"Research on telecommuting security solution based on zero trust architecture","author":"Kou","year":"2023"},{"key":"ref19","first-page":"830","article-title":"Zero trust validation: From practical approaches to theory","volume":"2","author":"Bobbert","year":"2020","journal-title":"Sci. J. Res. Rev."},{"key":"ref20","series-title":"Artif. Intell. Secur.: 6th Int. Conf., ICAIS 2020","first-page":"50","article-title":"Survey on zero-trust network security","author":"Yan","year":"Jul. 17\u201320, 2020"},{"key":"ref21","doi-asserted-by":"crossref","DOI":"10.3390\/su141811213","article-title":"Security of zero trust networks in cloud computing: A comparative review","volume":"14","author":"Sarkar","year":"2022, Art. no. 11213","journal-title":"Sustainability"},{"key":"ref22","doi-asserted-by":"crossref","DOI":"10.1155\/2022\/6476274","article-title":"A survey on zero trust architecture: Challenges and future trends","volume":"2022","author":"He","year":"2022","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"ref23","doi-asserted-by":"crossref","DOI":"10.3390\/s24041328","article-title":"A review and comparative analysis of relevant approaches of zero trust network model","volume":"24","author":"Dhiman","year":"2024, Art. no. 1328","journal-title":"Sensors"},{"key":"ref24","first-page":"149","author":"Seaman","year":"2023","journal-title":"Digital Transformation in Policing: The Promise, Perils and Solutions"},{"key":"ref25","first-page":"9","article-title":"Review of zero trust networks and their key technologies","volume":"43","author":"Wang","year":"2023","journal-title":"J. Comput. Appl."},{"key":"ref26","doi-asserted-by":"crossref","first-page":"198","DOI":"10.23919\/JCC.2022.08.015","article-title":"A continuous authentication protocol without trust authority for zero trust architecture","volume":"19","author":"Meng","year":"2022","journal-title":"China Commun."},{"key":"ref27","unstructured":"D. Barth and E. Gilman, \u201cZero trust networks: Building trusted systems in untrusted networks,\u201d Accessed: Aug. 20, 2024. [Online]. Available: 2017. https:\/\/dl.acm.org\/doi\/book\/10.5555\/3161337"},{"key":"ref28","doi-asserted-by":"crossref","first-page":"226","DOI":"10.1109\/MNET.2019.1800324","article-title":"Software-defined perimeter (SDP): State of the art secure solution for modern networks","volume":"33","author":"Moubayed","year":"2019","journal-title":"IEEE Netw."},{"key":"ref29","first-page":"1","author":"Kindervag","year":"2011","journal-title":"Applying Zero Trust to the Extended Enterprise"},{"key":"ref30","series-title":"2022 Int. Conf. Blockchain Technol. Inf. Secur. (ICBCTIS)","first-page":"40","article-title":"Blockchain based software defined perimeter (SDP) in support of authentication and authorization","author":"Yan","year":"2022"},{"key":"ref31","doi-asserted-by":"crossref","first-page":"146577","DOI":"10.1109\/ACCESS.2019.2939780","article-title":"On the security of SDN: A completed secure and scalable framework using the software-defined perimeter","volume":"7","author":"Sallam","year":"2019","journal-title":"IEEE Access"},{"key":"ref32","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1109\/MNET.011.1900563","article-title":"Multilevel security framework for nfv based on software defined perimeter","volume":"34","author":"Singh","year":"2020","journal-title":"IEEE Netw."},{"key":"ref33","first-page":"696","article-title":"Intelligent authentication for identity and access management: A review paper","volume":"3","author":"Mohammed","year":"2013","journal-title":"Int. J. Manag., IT Eng. (IJMIE)"},{"key":"ref34","first-page":"1","article-title":"Systematic review of identity access management in information security","volume":"4","author":"Mohammed","year":"2017","journal-title":"Int. J. Innov. Eng. Res. Technol."},{"key":"ref35","series-title":"2021 Int. Conf. Wirel. Commun. Smart Grid (ICWCSG)","first-page":"18","article-title":"Real identity based access control technology under zero trust architecture","author":"Wu","year":"2021"},{"key":"ref36","series-title":"Trust, Privacy Secur. Digital Bus.: 18th Int. Conf., TrustBus 2021","first-page":"155","article-title":"AuthGuide: Analyzing security, privacy and usability trade-offs in multi-factor authentication","author":"Preuveneers","year":"2021"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"2101","DOI":"10.1109\/TIFS.2018.2810065","article-title":"Secure fine-grained access control and data sharing for dynamic groups in the cloud","volume":"13","author":"Xu","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref38","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1155\/2022\/1560885","article-title":"Traditional and hybrid access control models: A detailed survey","volume":"2022","author":"Aftab","year":"2022","journal-title":"Secur. Commun. Netw."},{"key":"ref39","unstructured":"C. Hamou, R. Brouk, and S. McAllister, U.S. patent no. 10,375,121, 2019."},{"key":"ref40","doi-asserted-by":"crossref","first-page":"6","DOI":"10.1016\/S1353-4858(19)30034-0","article-title":"Micro-segmentation: Securing complex cloud environments","volume":"3","author":"Klein","year":"2019","journal-title":"Netw. Secur."},{"key":"ref41","series-title":"2022 2nd Asia-Pacific Conf. Commun. Technol. Comput. Sci. (ACCTCS)","first-page":"113","article-title":"Construction of data center security system based on micro isolation under zero trust architecture","author":"Ni","year":"2022"},{"key":"ref42","series-title":"NOMS 2022\u20142022 IEEE\/IFIP Netw. Operat. Manag. Symp.","first-page":"1","article-title":"Towards a zero-trust micro-segmentation network security strategy: An evaluation framework","author":"Basta","year":"2022"},{"key":"ref43","unstructured":"S. Raveenthiran, \u201cSecure lightweight NFV architecture analysis for IoT edge computing,\u201d 2022. Accessed: Aug. 20, 2024. [Online]. Available: https:\/\/www.researchgate.net\/publication\/366920311"},{"key":"ref44","series-title":"2021 Int. Conf. Commun., Inf. Syst. Comput. Eng. (CISCE)","first-page":"712","article-title":"Dynamic access control technology based on zero-trust light verification network model","author":"Zhang","year":"2021"},{"key":"ref45","series-title":"IEEE INFOCOM 2021\u2014IEEE Conf. Comput. Commun. Workshops (INFOCOM WKSHPS)","first-page":"1","article-title":"Zero trust using network micro segmentation","author":"Sheikh","year":"2021"},{"key":"ref46","series-title":"ISCTT 2021; 6th Int. Conf. Inf. Sci., Comput. Technol. Transp.","first-page":"1","article-title":"A micro-segmentation protection scheme based on zero trust architecture","author":"Xie","year":"2021"},{"key":"ref47","series-title":"2017 IEEE 8th Annual Ubiquitous Comput., Electron. Mobile Commun. Conf. (UEMCON)","first-page":"288","article-title":"Autonomic security for zero trust networks","author":"Eidle","year":"2017"},{"key":"ref48","first-page":"99","article-title":"Integrative cybersecurity: Merging zero trust, layered defense, and global standards for a resilient digital future","volume":"6","author":"Muhammad","year":"2022","journal-title":"Int. J. Comput. Sci. Technol."},{"key":"ref49","author":"Gilman","year":"2019","journal-title":"Zero Trust Networks: Building Secure Systems in Untrusted Networks"},{"key":"ref50","series-title":"Proc. Twelfth ACM Conf. Data Appl. Secur. Privacy","first-page":"167","article-title":"NEUTRON: A graph-based pipeline for zero-trust network architectures","author":"Katsis","year":"2022"},{"key":"ref51","series-title":"MILCOM 2022\u20142022 IEEE Military Commun. Conf. (MILCOM)","first-page":"577","article-title":"Toward zero trust security in 5G open architecture network slices","author":"Kholidy","year":"2022"},{"key":"ref52","doi-asserted-by":"crossref","first-page":"1874","DOI":"10.3934\/mbe.2019091","article-title":"Secure data storage based on blockchain and coding in edge computing","volume":"16","author":"Ren","year":"2019","journal-title":"Math. Biosci. Eng."},{"key":"ref53","doi-asserted-by":"crossref","first-page":"3142","DOI":"10.11591\/eei.v12i5.4240","article-title":"A case analysis for kubernetes network security of financial service industry in Indonesia using zero trust model","volume":"12","author":"Surantha","year":"2023","journal-title":"Bull. Electr. Eng. Inform."},{"key":"ref54","series-title":"2022 IEEE Int. Conf. Netw., Archit. Storage (NAS)","first-page":"1","article-title":"BYOZ: Protecting byod through zero trust network security","author":"Anderson","year":"2022"},{"key":"ref55","first-page":"264","article-title":"Zero-trust security monitoring of intelligent distribution network terminals based on 5G communication technology","volume":"12700","author":"Liu","year":"2023","journal-title":"Int. Conf. Electron. Inf. Eng. Data Processing (EIEDP 2023)"},{"key":"ref56","doi-asserted-by":"crossref","DOI":"10.1016\/j.adhoc.2024.103414","article-title":"Flexible zero trust architecture for the cybersecurity of industrial IoT infrastructures","volume":"156","author":"Zanasi","year":"2024, Art. no. 103414","journal-title":"Ad Hoc Netw."},{"key":"ref57","article-title":"Healthcare and cybersecurity: Taking a zero trust approach","volume":"16","author":"Vukotich","year":"2023","journal-title":"Health Serv. Insights"},{"key":"ref58","doi-asserted-by":"crossref","first-page":"156","DOI":"10.1109\/MCOM.018.2300095","article-title":"Toward zero-trust security for the metaverse","volume":"62","author":"Cheng","year":"2024","journal-title":"IEEE Commun. Mag."},{"key":"ref59","doi-asserted-by":"crossref","first-page":"196","DOI":"10.1109\/MNET.131.2200513","article-title":"Zero trust architecture empowered attack detection framework to secure 6G edge computing","volume":"38","author":"Sedjelmaci","year":"2024","journal-title":"IEEE Netw."},{"key":"ref60","unstructured":"I. A. Ridhawi, S. Otoum, and M. Aloqaily, \u201cDecentralized zero-trust framework for digital twin-based 6G,\u201d 2023, arXiv:2302.03107."},{"key":"ref61","doi-asserted-by":"crossref","first-page":"224","DOI":"10.1109\/MNET.2023.3326356","article-title":"Zero trust architecture for 6G security","volume":"38","author":"Chen","year":"Jul. 2024","journal-title":"IEEE Netw."},{"key":"ref62","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1109\/MIC.2023.3304893","article-title":"A zero trust architecture for connected and autonomous vehicles","volume":"27","author":"Anderson","year":"Sep.\u2013Oct. 2023","journal-title":"IEEE Internet Comput."},{"key":"ref63","first-page":"3004","article-title":"Trusted access solution for 6G zero trust vehicular networks empowered by blockchain","volume":"44","author":"Hao","year":"2022","journal-title":"J. Electron. Inf. Technol."},{"key":"ref64","first-page":"1","article-title":"S-BDS: An effective blockchain-based data storage scheme in zero-trust IoT","volume":"23","author":"Wang","year":"2023","journal-title":"ACM Trans. Internet Technol."},{"key":"ref65","doi-asserted-by":"crossref","first-page":"289","DOI":"10.53106\/160792642022032302009","article-title":"ZT-BDS: A secure blockchain-based zero-trust data storage scheme in 6G edge IoT","volume":"23","author":"Han","year":"2022","journal-title":"J. Internet Technol."},{"key":"ref66","first-page":"535","article-title":"Fine-grained access control based on zero trust in distributed databases in the context of power internet of things","volume":"7","author":"Huang","year":"2021","journal-title":"J. Inf. Secur. Res."},{"key":"ref67","doi-asserted-by":"crossref","first-page":"501","DOI":"10.1109\/TC.2022.3157996","article-title":"A blockchain-based decentralized, fair and authenticated information sharing scheme in zero trust internet-of-things","volume":"72","author":"Liu","year":"2023","journal-title":"IEEE Trans. Comput."},{"key":"ref68","doi-asserted-by":"crossref","DOI":"10.3390\/info14020129","article-title":"A blockchain-inspired attribute-based zero-trust access control model for IoT","volume":"14","author":"Awan","year":"2023, Art. no. 129","journal-title":"Information"},{"key":"ref69","series-title":"2021 Third IEEE Int. Conf. Trust, Privacy Secur. Intell. Syst. Appl. (TPS-ISA)","first-page":"159","article-title":"Access control enforcement in IoT: State of the art and open challenges in the zero trust era","author":"Colombo","year":"2021"},{"key":"ref70","article-title":"Zero trust-based blockchain based IoT security with consensus and access control framework","volume":"12","author":"Khan","year":"2024","journal-title":"J. Intell. Syst. Internet Things"},{"key":"ref71","series-title":"Secur. Privacy in New Comput. Environ.: Third EAI Int. Conf., SPNCE 2020","first-page":"265","article-title":"Blockchain-enabled user authentication in zero trust internet of things","author":"Zhao","year":"Aug. 6\u20137, 2020"},{"key":"ref72","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1016\/S1353-4858(21)00063-5","article-title":"Applying the principles of zero-trust architecture to protect sensitive and critical data","volume":"2021","author":"Greenwood","year":"2021","journal-title":"Netw. Secur."},{"key":"ref73","series-title":"2020 IEEE 19th Int. Conf. Trust, Secur. Privacy Comput. Commun. (TrustCom)","first-page":"1801","article-title":"Trust aware continuous authorization for zero trust in consumer internet of things","author":"Dimitrakos","year":"2020"},{"key":"ref74","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1080\/10919392.2020.1831870","article-title":"Securing IoT devices using zero trust and blockchain","volume":"31","author":"Dhar","year":"2021","journal-title":"J. Organ. Comput. Electron. Commerce"},{"key":"ref75","doi-asserted-by":"crossref","first-page":"215","DOI":"10.9734\/jerr\/2024\/v26i21083","article-title":"Zero trust architecture in cloud networks: Application, challenges and future opportunities","volume":"26","author":"Ahmadi","year":"2024","journal-title":"J. Eng. Res. Rep."},{"key":"ref76","series-title":"2020 Int. Conf. Comput. Commun. Inf. (ICCCI)","first-page":"1","article-title":"Establishing a zero trust strategy in cloud computing environment","author":"Mehraj","year":"2020"},{"key":"ref77","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2021.102419","article-title":"Survivable zero trust for cloud computing environments","volume":"110","author":"Ferretti","year":"2021, Art. no. 102419","journal-title":"Comput. Secur."},{"key":"ref78","doi-asserted-by":"crossref","first-page":"6236","DOI":"10.1109\/TCE.2024.3415437","article-title":"ASMCC+: A secure authentication scheme for mobile cloud computing environment based on zero trust architecture","volume":"70","author":"Hossain","year":"2024","journal-title":"IEEE Trans. Consum. Electron."},{"key":"ref79","series-title":"Proc. 2019 ACM Symp. SDN Res.","first-page":"49","article-title":"eZTrust: Network-independent zero-trust perimeterization for microservices","author":"Zaheer","year":"2019"},{"key":"ref80","series-title":"2019 6th Int. Conf. Control, Decision Inf. Technol. (CoDIT)","first-page":"1911","article-title":"Cloud: Privacy for locations based-services\u2019 through access control with dynamic multi-level policy","author":"Jasim","year":"2019"},{"key":"ref81","series-title":"Cloud Comput.\u2014CLOUD 2020: 13th Int. Conf., Held Part Services Conf. Federation, SCF 2020","first-page":"287","article-title":"ZTIMM: A zero-trust-based identity management model for volunteer cloud computing","author":"Albuali","year":"2020"},{"key":"ref82","series-title":"2021 IEEE 14th Int. Conf. Cloud Comput. (CLOUD)","first-page":"730","article-title":"Performance analysis of zero-trust multi-cloud","author":"Rodigari","year":"2021"}],"container-title":["Computers, Materials & Continua"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/cdn.techscience.cn\/files\/cmc\/2025\/TSP_CMC-82-2\/TSP_CMC_59170\/TSP_CMC_59170.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,14]],"date-time":"2025-11-14T06:11:29Z","timestamp":1763100689000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.techscience.com\/cmc\/v82n2\/59492"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":82,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2025]]},"published-print":{"date-parts":[[2025]]}},"URL":"https:\/\/doi.org\/10.32604\/cmc.2025.059170","relation":{},"ISSN":["1546-2226"],"issn-type":[{"value":"1546-2226","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"2024-09-29","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-12-16","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-02-17","order":2,"name":"published","label":"Published Online","group":{"name":"publication_history","label":"Publication History"}}]}}