International Journal of Science, Engineering and TechnologyAuthors: S.Janani, S.Vedavalli
Abstract: Perimeter-based security paradigms have proved insufficient in defending enterprises against sophisticated cyberattacks like Advanced Persistent Threats (APT), insider threat misuse, and supply chain attacks. Zero Trust Architecture (ZTA) offers a reliable solution to such cyberattacks, relying on continuous verification of users, devices, and network activity by following the "Never trust, always verify" paradigm. This paper introduces an elaborate ZTA framework that integrates SIEM, SOAR, and UEBA systems to detect and mitigate advanced threats. The framework utilizes machine learning techniques such as Isolation Forest for detecting behavioral anomalies and dynamic risk scoring. Multi-layered enforcement is implemented at three different levels of Identity, Device, and Network enforcement. Experiments conducted prove the effectiveness of this framework with Mean Time to Respond (MTTR) less than 10 seconds for critical threat cases and an accuracy of more than 95% for detecting anomalies in behavior patterns.
DOI: http://doi.org/10.5281/zenodo.21675846
