International Journal of Science, Engineering and TechnologyAuthors: Assistant Professor Miss M.Ajithaveni, R.Naveen, A.Thameena Shifa, V.Vasumathi, S. Deepa, S. Subalakshmi
Abstract: Zero Trust Security (ZTS) is an architectural and operational approach designed to address the limitations of traditional perimeter-based security in modern enterprise environments. The rapid adoption of cloud computing, remote work, mobile devices, Internet of Things (IoT), and hybrid infrastructure has reduced the effectiveness of relying on network location as a basis for trust. This paper examines Zero Trust Security as a framework for next-generation enterprise protection, focusing on identity-centric access control, continuous authentication and authorization, least-privilege access, device posture assessment, micro-segmentation, continuous monitoring, and risk-based access decisions. The study reviews authoritative frameworks, government guidance, scholarly research, and real-world implementations including NIST Zero Trust Architecture and Google BeyondCorp. The proposed framework explains how identity, device security, policy decision-making, policy enforcement, resource protection, and continuous monitoring can work together to reduce unauthorized access and limit lateral movement. The paper also examines implementation methodology, evaluation metrics, challenges, limitations, and future research directions. The study concludes that Zero Trust should be considered an iterative security transformation rather than a single technology or product, with its effectiveness depending on appropriate policy design, reliable identity and device information, continuous monitoring, and organization-specific security objectives.
