{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T11:15:32Z","timestamp":1780053332346,"version":"3.54.0"},"reference-count":18,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100015330","name":"State Grid Jiangsu Electric Power Company","doi-asserted-by":"crossref","award":["J2024089"],"award-info":[{"award-number":["J2024089"]}],"id":[{"id":"10.13039\/501100015330","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>In traditional power networks, security protection models primarily rely on perimeter-based defenses, utilizing firewalls, virtual private networks (VPNs), and identity authentication to block external threats. However, once a node within the power system is compromised, attackers can exploit it as a pivot to launch lateral movement attacks from within the system, posing serious threats to the core operations of the power grid. To address the increasingly complex cybersecurity landscape, this paper proposes a security defense approach that integrates an improved trust evaluation model based on the Practical Byzantine Fault Tolerance (PBFT) algorithm with a zero-trust architecture, leveraging the structural and functional symmetry among network nodes. The PBFT algorithm\u2019s fault tolerance and consensus mechanisms are leveraged to ensure dynamic trust scoring across multiple nodes. This approach guarantees that each node has an equal role in the system\u2019s operations, maintaining fairness and security across the network. Furthermore, the primary node in the PBFT consensus process is redefined as the arbitration node in the zero-trust framework, and faulty nodes can be automatically replaced through the view change protocol, thereby mitigating the centralization risk inherent in traditional zero-trust models. Experimental results demonstrate that the proposed approach achieves high accuracy and robustness in defending against both internal and external attacks in power network scenarios, highlighting the role of symmetry in enhancing secure and balanced system operations.<\/jats:p>","DOI":"10.3390\/sym17111982","type":"journal-article","created":{"date-parts":[[2025,11,17]],"date-time":"2025-11-17T14:04:07Z","timestamp":1763388247000},"page":"1982","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Improved Trust Evaluation Model Based on PBFT and Zero Trust Integrated Power Network Security Defense Method"],"prefix":"10.3390","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-8904-0102","authenticated-orcid":false,"given":"Xiaoyun","family":"Liao","sequence":"first","affiliation":[{"name":"State Grid Jiangsu Electric Power Co., Ltd., Taizhou Power Supply Branch, Taizhou 225309, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-6006-9029","authenticated-orcid":false,"given":"Sen","family":"Yang","sequence":"additional","affiliation":[{"name":"State Grid Jiangsu Electric Power Co., Ltd., Taizhou Power Supply Branch, Taizhou 225309, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-0082-7016","authenticated-orcid":false,"given":"Jun","family":"Xu","sequence":"additional","affiliation":[{"name":"State Grid Jiangsu Electric Power Co., Ltd., Taizhou Power Supply Branch, Taizhou 225309, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-3212-0942","authenticated-orcid":false,"given":"Li","family":"Liu","sequence":"additional","affiliation":[{"name":"State Grid Jiangsu Electric Power Co., Ltd., Taizhou Power Supply Branch, Taizhou 225309, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-2924-9481","authenticated-orcid":false,"given":"Wei","family":"Liang","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing 210003, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-2919-4974","authenticated-orcid":false,"given":"Shengjie","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing 210003, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7019-3942","authenticated-orcid":false,"given":"Yimu","family":"Ji","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing 210003, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8511-7544","authenticated-orcid":false,"given":"Shangdong","family":"Liu","sequence":"additional","affiliation":[{"name":"School of Computer Science, Nanjing University of Posts and Telecommunications, Nanjing 210003, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,11,16]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"805","DOI":"10.35833\/MPCE.2021.000161","article-title":"Edge-cloud computing systems for smart grid: State-of-the-art, architecture, and applications","volume":"10","author":"Li","year":"2022","journal-title":"J. Mod. Power Syst. Clean Energy"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"4433","DOI":"10.1109\/TDSC.2024.3353548","article-title":"TrustGuard: GNN-based robust and explainable trust evaluation with dynamicity support","volume":"21","author":"Wang","year":"2024","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Hammad, A.A., Ahmed, S.R., Abdul-Hussein, M.K., Ahmed, M.R., Majeed, D.A., and Algburi, S. (2024, January 15\u201317). Deep reinforcement learning for adaptive cyber defense in network security. Proceedings of the 2024 Cognitive Models and Artificial Intelligence Conference, Dubai, United Arab Emirates.","DOI":"10.1145\/3660853.3660930"},{"key":"ref_4","first-page":"51","article-title":"Adversarial machine learning in the context of network security: Challenges and solutions","volume":"4","author":"Khan","year":"2024","journal-title":"J. Comput. Intell. Robot."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Khan, Z.A., and Namin, A.S. (2022). A survey of DDoS attack detection techniques for IoT systems using Blockchain technology. Electronics, 11.","DOI":"10.3390\/electronics11233892"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Hajian, A., and Chang, H.C. (2022). A Blockchain-Based Smart Grid to Build Resilience Through Zero-Trust Cybersecurity, Springer International Publishing.","DOI":"10.1007\/978-3-030-72322-4_161-1"},{"key":"ref_7","first-page":"25","article-title":"Research on power grid security protection architecture based on zero trust","volume":"19","author":"Liu","year":"2021","journal-title":"Elec. Power Inf. Commun. Technol."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Sousa, J., Bessani, A., and Vukoli\u0107, M. (2018, January 25\u201328). A byzantine fault-tolerant ordering service for the Hyperledger Fabric blockchain platform. Proceedings of the 2018 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks, Luxembourg.","DOI":"10.1109\/DSN.2018.00018"},{"key":"ref_9","unstructured":"Castro, M., and Liskov, B. (1999, January 22\u201325). Practical Byzantine fault tolerance. Proceedings of the Symposium on Operating Systems Design and Implementation (OSDI), New Orleans, LA, USA."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"3515","DOI":"10.1007\/s11276-023-03407-4","article-title":"Primary node selection based on node reputation evaluation for PBFT in UAV-assisted MEC environment","volume":"29","author":"Zhang","year":"2023","journal-title":"Wirel. Netw."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"012008","DOI":"10.1088\/1742-6596\/2402\/1\/012008","article-title":"Dynamic trust continuous evaluation-based zero-trust access control for power grid cloud service","volume":"2402","author":"Lv","year":"2022","journal-title":"J. Phys. Conf. Ser."},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1186\/s42400-024-00320-x","article-title":"Zero-trust based dynamic access control for cloud computing","volume":"8","author":"Wang","year":"2025","journal-title":"Cybersecurity"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"57143","DOI":"10.1109\/ACCESS.2022.3174679","article-title":"Zero trust architecture (ZTA): A comprehensive survey","volume":"10","author":"Syed","year":"2022","journal-title":"IEEE Access"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1109\/MC.2015.33","article-title":"Attribute-based access control","volume":"48","author":"Hu","year":"2015","journal-title":"Computer"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"11837","DOI":"10.1007\/s13369-024-09614-1","article-title":"RGPBFT: A reputation-based PBFT algorithm with node grouping strategy","volume":"50","author":"Zhu","year":"2025","journal-title":"Arab. J. Sci. Eng."},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Gambo, M.L., and Almulhem, A. (2025). Zero trust architecture: A systematic literature review. arXiv.","DOI":"10.36227\/techrxiv.173933211.18231232\/v1"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"3306","DOI":"10.1109\/TIFS.2022.3206423","article-title":"Research on distributed dynamic trusted access control based on security subsystem","volume":"17","author":"Huang","year":"2022","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"679","DOI":"10.32628\/CSEIT25111261","article-title":"Zero Trust Evolution: Advanced Architectures for Resilient Cloud-Native IAM Systems","volume":"11","author":"Arun","year":"2025","journal-title":"Int. J. Sci. Res. Comput. Sci. Eng. Inf. Technol."}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/17\/11\/1982\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T05:19:21Z","timestamp":1763443161000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/17\/11\/1982"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,16]]},"references-count":18,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2025,11]]}},"alternative-id":["sym17111982"],"URL":"https:\/\/doi.org\/10.3390\/sym17111982","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,16]]}}}