Zero trust architecture: does it help?
Open accessAbstract
Discusses the concept of zero trust architecture (ZTA). ZTA has been introduced as a fine-grained defense approach paradigm that shifts defenses from static, network-based perimeters to users, assets, and resources.1 It assumes that no entities outside and inside the protected system can be trusted and therefore requires articulated and high-coverage deployment of security controls, such as authentication and access control. In a way, ZTA is not new; the idea that securing a system requires pervasive, fine-grained, and continuous deployment of layered security controls is quite obvious. However, the current emphasis on ZTA is important as it pushes systematic approaches to cybersecurity.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Translating the NIST SP 800-207 Zero Trust model into OT introduces three categories of friction: safety-availability priority inversion, legacy protocols unauthenticated by design, and asset lifetime versus crypto lifetime.
“Translating this canonical model into OT introduces three categories of friction that have been the subject of considerable recent commentary [11], [15], [17].”
From Crypto-Agile Zero Trust Architecture for IT-OT Convergence in Industrial Control Systems: A Digital Twin-Driven Framework over 5G/TSN with Post-Quantum Cryptography (2026) · cites this paper as [15]
The Abstract describes technical and organizational friction in deploying zero trust, including application-performance impacts and difficulty upgrading legacy infrastructure. It does not discuss OT or identify the three claimed categories: safety versus availability, unauthenticated legacy protocols, and asset versus cryptographic lifetimes. The citation supports the general point about deployment friction, not that specific OT breakdown. (LLM, conf=0.84)
Experimental — accuracy not yet measuredThe Zero Trust security model is emerging as a paradigm shift for cybersecurity and is adopted by the most mature actors from companies to nations.
“the Zero Trust security model is emerging [4] as a paradigm shift for cybersecurity that is adopted by the most mature actors from companies to nations [5-7].”
From Flexible zero trust architecture for the cybersecurity of industrial IoT infrastructures (2024) · cites this paper as [4]
OT prioritizes safety and availability above confidentiality and integrity, which is the inverse of the classical IT C-I-A triad.
“First, the safety-availability priority inversion : OT prioritizes safety and availability above confidentiality and integrity, which is the inverse of the classical IT C-I-A triad.”
From Crypto-Agile Zero Trust Architecture for IT-OT Convergence in Industrial Control Systems: A Digital Twin-Driven Framework over 5G/TSN with Post-Quantum Cryptography (2026) · cites this paper as [15]
The supplied passages and searches of our copy discuss zero-trust architecture, access-control policies, and deployment challenges (Abstract; no page given). None addresses operational technology’s safety and availability priorities or compares them with the IT confidentiality–integrity–availability triad. (LLM, conf=0.76)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Still being checked.
Cited by
Sorted by citations
Ramezanpour, K., & Jagannath, J. (2022) · Computer Networks · doi:10.1016/j.comnet.2022.109358 · Cited by 216 · see citing works
Flexible zero trust architecture for the cybersecurity of industrial IoT infrastructures
Zanasi, C., Russo, S., & Colajanni, M. (2024) · Ad Hoc Networks · doi:10.1016/j.adhoc.2024.103414 · Cited by 111 · see citing works
A critical analysis of Zero Trust Architecture (ZTA)
Fernández, E. B., & Brazhuk, A. (2024) · Computer Standards & Interfaces · doi:10.1016/j.csi.2024.103832 · Cited by 107 · see citing works
Zero Trust Architecture: A Systematic Literature Review
Gambo, M. L., & Almulhem, A. (2025) · Journal of Network and Systems Management · doi:10.1007/s10922-025-09998-x · Cited by 86 · see citing works
Securing IoT Devices Against Emerging Security Threats: Challenges and Mitigation Techniques
Kabir, M. A. A., Elmedany, W. M., & Sharif, M. S. (2023) · Journal of Cyber Security Technology · doi:10.1080/23742917.2023.2228053 · Cited by 84 · see citing works
Sensors for Context-Aware Smart Healthcare: A Security Perspective
Batista, E., Moncusi, M. A., López-Aguilar, P., Martínez-Ballesté, A., & Solanas, A. (2021) · Sensors · doi:10.3390/s21206886 · Cited by 88 · see citing works
An analysis of zero-trust architecture and its cost-effectiveness for organizational security
Adahman, Z., Malik, A. W., & Anwar, Z. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102911 · Cited by 52 · see citing works
SoK: Context and Risk Aware Access Control for Zero Trust Systems
Xiao, S., Ye, Y., Kanwal, N., Newe, T., & Lee, B. (2022) · Security and Communication Networks · doi:10.1155/2022/7026779 · Cited by 38 · see citing works
Tian, Z., Fang, B., Liao, Q., Sun, Y., Wang, Y., Yang, X., & Feng, J. (2023) · Strategic Study of CAE · doi:10.15302/j-sscae-2023.06.007 · Cited by 19 · see citing works
Prakash, P. S., Ramana, K. S., Pecho, R. D. C., Janardhan, M., Arellano, M. T. C., Mahalakshmi, J., Bhavsingh, M., & Samunnisa, K. (2024) · Computer Communications · doi:10.1016/j.comcom.2024.04.007 · Cited by 19 · see citing works
Continuous Authentication Methods for Zero-Trust Cybersecurity Architecture
Matiushin, I., & Korkhov, V. V. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-37120-2_22 · Cited by 15 · see citing works
A Survey of Cross-Layer Security for Resource-Constrained IoT Devices
Altaibek, M., Issainova, A., Aidynov, T., Kuttymbek, D., Abisheva, G., & Nurusheva, A. (2025) · Applied Sciences · doi:10.3390/app15179691 · Cited by 13 · see citing works
Hassan, A., Rauf, A., Shafqat, N., Latif, R., & Khan, H. (2025) · Scientific Reports · doi:10.1038/s41598-025-20998-4 · Cited by 11 · see citing works
Zero trust in cybersecurity: managing critical challenges for effective implementation
Pigola, A., & Meirelles, F. D. S. (2025) · Journal of Systems and Information Technology · doi:10.1108/jsit-08-2024-0326 · Cited by 10 · see citing works
Access Control Enforcement in IoT: state of the art and open challenges in the Zero Trust era
Colombo, P., Ferrari, E., & Tumer, E. D. (2021) · 2021 Third IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tpsisa52974.2021.00018 · Cited by 12 · see citing works
Huy, P. Q., & Phuc, V. K. (2024) · Cogent Business & Management · doi:10.1080/23311975.2024.2364053 · Cited by 9 · see citing works
Secure Enrollment Token Delivery Mechanism for Zero Trust Networks Using Blockchain
Rivera, J. J. D., Akbar, W., Khan, T. A., Afaq, M., & Song, W. (2023) · IEICE Transactions on Communications · doi:10.1587/transcom.2022tmp0005 · Cited by 9 · see citing works
Stodt, F., Reich, C., & Théoleyre, F. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3579028 · Cited by 8 · see citing works
A Zero Trust Module for Cybersecurity Education
Wang, X., Bhuse, V., & Cheng, Y. H. (2025) · Journal of The Colloquium for Information Systems Security Education · doi:10.53735/cisse.v12i1.193 · Cited by 6 · see citing works
Poster: Orbital ZTA! Secure Satellite Communication Networks with Zero Trust Architecture
Pokhrel, S. R. (2024) · ACM SIGCOMM Conference Posters and Demos · doi:10.1145/3672202.3673727 · Cited by 5 · see citing works
Implementing Zero Trust Security in Microservice Architecture of Electronic Health Record
Samonte, M. J. C., Aparize, J. E. R., Geronimo, J. M., & Oriño, C. C. (2024) · International Conference on Computer Systems (ICCS) · doi:10.1109/iccs62594.2024.10795827 · Cited by 7 · see citing works
Security System Design and Verification for Zero Trust Architecture
Lee, S., Huh, J., & Woo, H. (2025) · Electronics · doi:10.3390/electronics14040643 · Cited by 5 · see citing works
$ZTD_{\text{JAVA}}$: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies
Amusuo, P. C., Robinson, K. A., Singla, T., Peng, H., Machiry, A., Torres-Arias, S., Simon, L., & Davis, J. C. (2025) · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion) · doi:10.1109/icse55347.2025.00148 · Cited by 7 · see citing works
Tool/Dataset Paper: Realistic ABAC Data Generation using Conditional Tabular GAN
Rai, R., & Sural, S. (2023) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/3577923.3583635 · Cited by 4 · see citing works
Süzen, A. A., & Ceylan, O. (2024) · International Journal of 3D Printing Technologies and Digital Industry · doi:10.46519/ij3dptdi.1556319 · Cited by 3 · see citing works
Neural Network: Predator, Victim, and Information Security Tool
Betelin, V. B., Galatenko, V. A., & Kostiukhin, K. A. (2022) · Optical Memory and Neural Networks · doi:10.3103/s1060992x22040026 · Cited by 3 · see citing works
Gokhale, A., & Kulkarni, S. (2024) · International Journal for Research in Applied Science and Engineering Technology · doi:10.22214/ijraset.2024.58201 · Cited by 3 · see citing works
Shi, F., Cao, S., & Zhang, X. (2023) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads60453.2023.00319 · Cited by 2 · see citing works
Stability Analysis for Heterogeneous Vehicle Platoon in A Zero-Trust Environment
Bao, Y., Huang, D., & Na, Y. (2023) · Conference on Fully Actuated System Theory and Applications (FASTA) · doi:10.1109/cfasta57821.2023.10243371 · Cited by 2 · see citing works
Zero Trust Security in Modern Networks: a Survey of Applications, Challenges, and Future Directions
Qu, K., Zhao, M., & Cui, S. (2025) · IEEE Advanced Information Technology, Electronic and Automation Control Conference (IAEAC) · doi:10.1109/iaeac65194.2025.11166187 · Cited by 1 · see citing works
Barbosa, G. N. N., Lopez, M. A., Nguyen, T. M. T., & Mattos, D. M. F. (2026) · Annals of Telecommunications · doi:10.1007/s12243-026-01197-2 · Cited by 3 · see citing works
Zero Trust Paradigm (ZTP): an advancing approach of cybersecurity in emerging technologies
Sasikala, S., & Saranya, G. (2026) · Journal of Cyber Security Technology · doi:10.1080/23742917.2026.2704951 · Cited by 1 · see citing works
Distributed Fault-Tolerant Control of Connected Vehicle Platoon in A Zero-Trust Environment
Zhang, L., Huang, D., & Na, Y. (2023) · CAA Symposium on Fault Detection, Supervision and Safety for Technical Processes (SAFEPROCESS) · doi:10.1109/safeprocess58597.2023.10295833 · Cited by 1 · see citing works
A Continuous Authentication Method Based on Improved Sparrow Search Algorithm and XGBoost
Peng, X., Hu, J., Wang, H., & Li, H. (2024) · International Symposium on Computer and Information Processing Technology (ISCIPT) · doi:10.1109/iscipt61983.2024.10672883 · Cited by 1 · see citing works
Liu, Y., Li, D., & Liu, J. (2025) · Springer eBooks · doi:10.1007/978-981-96-3686-0_8 · Cited by 1 · see citing works
Towards Decentralized Operationalization of Zero Trust ArchitecturePreprint
Pokhrel, S. R., Li, G., Doss, R., & Nepal, . (2022) · doi:10.36227/techrxiv.19127090 · Cited by 1 · see citing works
Attack Detection and Countermeasures at Edge Devices
Ahmed, F., & Arafin, M. T. (2025) · doi:10.1002/9781394191529.ch20 · Cited by 1 · see citing works
Qadri, S. M. (2026) · Frontiers in Computer Science and Artificial Intelligence · doi:10.32996/fcsai.2026.5.9.2
“Translating this canonical model into OT introduces three categories of friction that have been the subject of considerable recent commentary [11], [15], [17].”
Towards Decentralized Operationalization of Zero Trust ArchitecturePreprint
Pokhrel, S. R., Li, G., Doss, R., & Nepal, . (2022) · doi:10.36227/techrxiv.19127090.v1
THE EMERGENCE OF LIMINAL CYBERSPACE - CHALLENGES FOR THE ONTOLOGICAL WORK IN CYBERSECURITY
Uusitupa, J. V. A. V. (2022) · Web Based Communities · doi:10.33965/ict_wbc_eh2022_202204l012
ZTD$_{JAVA}$: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust DependenciesPreprint
Amusuo, P. C., Robinson, K. A., Singla, T., Peng, H., Machiry, A., Torres-Arias, S., Simon, L., & Davis, J. C. (2023) · arXiv (Cornell University) · doi:10.48550/arxiv.2310.14117
Zero-Trust in Instant Messaging
Gergov, I., & Obreshkov, N. (2023) · International Scientific Conference on Computer Science (COMSCI) · doi:10.1109/comsci59259.2023.10315901
Automated Inspection System for Crop Disease Detection
Ahila, S. S., & Kaushal, C. (2024) · doi:10.1109/iccsp60870.2024.10544085
Asymmetric Group Key Agreement Protocol with Identity-Detection for NGNs
Zhou, T., Shen, M., Zheng, W., & Bhuiyan, M. Z. A. (2025) · IEEE International Conference on High Performance Computing and Communications; IEEE International Conference on Smart City; IEEE International Conference on Data Science and Systems (HPCC/SmartCity/DSS) · doi:10.1109/hpcc67675.2025.00121
Huy, P. Q., & Phuc, V. K. (2026) · Contributions to management science · doi:10.1007/978-981-95-2337-5_14
Implementing Zero Trust Architecture: Principles, Models and Challenges
Durga, R. K. (2025) · International Journal of Scientific Research and Modern Technology. · doi:10.38124/ijsrmt.v4i12.1050
A ZTNA-Based Architecture for Secure and Trusted Access in Campus Networks
Liu, Q., & Zhu, Y. (2026) · International Conference on Communication Networks and Machine Learning (CNML) · doi:10.1109/cnml68938.2026.11453130
Vincenzo, M. A., Lowen, N. J., & Gandawidjaja, A. (2026) · IEEE Middle East and North Africa Communications Conference (MENACOMM) · doi:10.1109/menacomm69507.2026.11532935 · Cited by 1 · see citing works
AI-Driven Zero Trust Architecture for Industrial IoT-Hybrid Cloud Convergence
Ghosh, S., & Raj, D. R. (2026) · IGI Global eBooks · doi:10.4018/979-8-3373-4581-9.ch016
Rubio-Medrano, C. E., Nath, S., Soneji, A., Mondragon, J., Baek, J., & Ahn, G.-J. (2026) · ACM Symposium on Access Control Models and Technologies · doi:10.1145/3750555.3811881
Belesioti, M., Diakoumakos, J., Chochliouros, I. P., Zahariadis, T. B., & Papadakis, A. E. (2026) · International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT) · doi:10.1109/dcoss-iot69657.2026.00196
Heric, S., & Bobek, S. (2026) · Naše gospodarstvo/Our economy · doi:10.2478/ngoe-2026-0017
- Authors
- Bertino, E.
- Affiliations
- Purdue University West Lafayette (US)
- Corresponding author
- Bertino, Elisa
- ORCID
- Bertino, Elisa
- Venue
- IEEE Security & Privacy
- Published
- 2021-09
- Volume
- 19
- Issue
- 5
- Pages
- 95-96
- ISSN
- 1540-7993 (ISSN-L)
- 1558-4046
- OpenAlex
- W3196576671
- Cited by
- 52
- References
- 0
- Citations by year
- 2026: 10 · 2025: 13 · 2024: 10 · 2023: 10 · 2022: 7 · 2021: 2
- FWCI
- 10.05
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Licence
- Locations
- IEEE Security & Privacy (publishedVersion)
- Topics
- Social Sciences › Sociology and Political Science › Access Control and Trust
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Keywords
- zero-trust architecture, network perimeter security, authentication, access control
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
