The DOI matches its Crossref record; 18 of the 18 references it cites were found in a registry or an index.
Towards a Zero-Trust Micro-segmentation Network Security Strategy: An Evaluation Framework
Open accessAbstract
Micro-segmentation is an emerging security technique that separates physical networks into isolated logical micro-segments (workloads). By tying fine-grained security policies to individual workloads, it limits the attacker’s ability to move laterally through the network, even after infiltrating the perimeter defences. While micro-segmentation is proved to be effective for shrinking enterprise networks attack surface, its impact assessment is almost absent in the literature. This research is dedicated to developing an analytical framework to characterise and quantify the effectiveness of micro-segmentation on enhancing networks security. We rely on a twofold graph-feature-based framework of the network connectivity and attack graphs to evaluate the network exposure and robustness, respectively. Tracking the variations of formulated metrics values post the deployment of micro-segmentation reveals exposure reduction and robustness improvement in the range of 60% – 90%.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“In [17], the authors perform a deep-dive investigation on micro-segmentation approaches, proposing a workflow-level isolation approach to minimize lateral movement, and a metric to evaluate the trade-offs between efficiency and achieved security.”
From A Zero-Trust Architecture for Remote Access in Industrial IoT Infrastructures (2023) · cites this paper as [17]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“Different approaches can be used to implement a ZTA, including network micro-segmentation (Basta et al., 2022) and dynamic access policy enforcement (Colombo et al., 2021).”
From A Zero Trust Architecture for Critical Operational Technology Systems (2025) · cites this paper as Basta et al., 2022
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Epidemic spreading in real networks: an eigenvalue viewpoint
Wang, Y., Chakrabarti, D., Wang, C., & Faloutsos, C. (2004) · IEEE Symposium on Reliable Distributed Systems (SRDS) · doi:10.1109/reldis.2003.1238052 · Cited by 876
A scalable approach to attack graph generation
Ou, X., Boyer, W. F., & McQueen, M. (2006) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/1180405.1180446 · Cited by 622
Model-based evaluation: from dependability to security
Nicol, D. M., Sanders, W. H., & Trivedi, K. S. (2004) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2004.11 · Cited by 511
MulVAL: a logic-based network security analyzer
Ou, X., Govindavajhala, S., & Appel, A. W. (2005) · Cited by 509
A quantitative study of firewall configuration errors
Wool, A. (2004) · Computer · doi:10.1109/mc.2004.2 · Cited by 397
An Attack Graph-Based Probabilistic Security Metric
Wang, L., Islam, T., Long, T., Singhal, A., & Jajodia, S. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-70567-3_22 · Cited by 385
Conflict classification and analysis of distributed firewall policies
Al-Shaer, E. S., Hamed, H., Boutaba, R., & Hasan, M. M. K. (2005) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2005.854119 · Cited by 291
A Survey on Systems Security Metrics
Pendleton, M., Garcia-Lebron, R., Cho, J.-H., & Xu, S. (2016) · ACM Computing Surveys · doi:10.1145/3005714 · Cited by 287
An analysis of CVSS version 2 vulnerability scoring
Scarfone, K. A., & Mell, P. (2009) · Proceedings of the ... ACM-IEEE International Symposium on Empirical Software Engineering and Measurement/International Symposium on Empirical Software Engineering and Measurement · doi:10.1109/esem.2009.5314220 · Cited by 169
Extending Attack Graph-Based Security Metrics and Aggregating Their Application
Idika, N. C., & Bhargava, B. (2010) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2010.61 · Cited by 149
Research works printed but not linked: 3
- li, 2011, A stochastic model for quantitative security analyses of networked systems, IEEE TDSC, 8, 28
- nandakumara, 2020, Efficacy of micro-segmentation assessment report, Bishop Fox
- 10.3233/JCS-130475 · DOI
Cited by
A Survey on Zero Trust Architecture: Challenges and Future Trends
He, Y., Huang, D., Chen, L., Ni, Y., & Ma, X. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/6476274 · Cited by 348
“In 2021, Basta N and others [52] adopted microsegmentation technology, which limited the attacker’s ability to move laterally in the network by binding fine-grained security policies to a single workload, and initially realized trust assessment under the concept of zero trust.”
BackgroundFlexible zero trust architecture for the cybersecurity of industrial IoT infrastructures
Zanasi, C., Russo, S., & Colajanni, M. (2024) · Ad Hoc Networks · doi:10.1016/j.adhoc.2024.103414 · Cited by 111
Zero Trust Architecture: A Systematic Literature Review
Gambo, M. L., & Almulhem, A. (2025) · Journal of Network and Systems Management · doi:10.1007/s10922-025-09998-x · Cited by 178
Dissecting zero trust: research landscape and its implementation in IoT
Liu, C., Tan, R., Wu, Y., Feng, Y., Jin, Z., Zhang, F., Liu, Y., & Liu, Q. (2024) · Cybersecurity · doi:10.1186/s42400-024-00212-0 · Cited by 111
Nsoh, B., Katimbo, A., Guo, H., Heeren, D. M., Nakabuye, H. N., Qiao, X., Ge, Y., Rudnick, D. R., Wanyama, J., Bwambale, E., et al. (2024) · Sensors · doi:10.3390/s24237480 · Cited by 81
Verify and trust: A multidimensional survey of zero-trust security in the age of IoT
Azad, M. A., Abdullah, S., Arshad, J., Lallie, H. S., & Ahmed, Y. H. (2024) · Internet of Things · doi:10.1016/j.iot.2024.101227 · Cited by 114
A Zero-Trust Architecture for Remote Access in Industrial IoT Infrastructures
Federici, F., Martintoni, D., & Senni, V. (2023) · Electronics · doi:10.3390/electronics12030566 · Cited by 74
Cyber Threats Classifications and Countermeasures in Banking and Financial Sector
Darem, A. A., Alhashmi, A. A., Alkhaldi, T. M., Alashjaee, A. M., Alanazi, S. M., & Ebad, S. A. (2023) · IEEE Access · doi:10.1109/access.2023.3327016 · Cited by 96
Li, K., Li, C., Yuan, X., Li, S., Zou, S., Ahmed, S. S., Ni, W., Niyato, D. T., Jamalipour, A., Dressler, F., et al. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3603957 · Cited by 80
Towards zero trust security in connected vehicles: A comprehensive survey
Annabi, M., Zeroual, A., & Messai, N. (2024) · Computers & Security · doi:10.1016/j.cose.2024.104018 · Cited by 50
Advanced Persistent Threats and Their Defense Methods in Industrial Internet of Things: A Survey
Gan, C., Lin, J., Huang, D.-W., Zhu, Q., & Tian, L. (2023) · Mathematics · doi:10.3390/math11143115 · Cited by 35
Enhancing cloud-native DevSecOps: A Zero Trust approach for the financial sector
Shin, D., Kim, J., Pawana, I. W. A. J., & You, I. (2025) · Computer Standards & Interfaces · doi:10.1016/j.csi.2025.103975 · Cited by 21
Trusted and secure composite digital twin architecture for collaborative ecosystems
Kuruppuarachchi, P. M., Rea, S., & McGibney, A. (2022) · IET Collaborative Intelligent Manufacturing · doi:10.1049/cim2.12070 · Cited by 19
Zero Trust Networks: Evolution and Application from Concept to Practice
Ren, Y., Wang, Z., Sharma, P. K., Alqahtani, F. H., Tolba, A. K. R., & Wang, J. (2025) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2025.059170 · Cited by 23
Afolalu, O. F., & Tšoeu, M. S. (2025) · Future Internet · doi:10.3390/fi17040133 · Cited by 14
Is Trust Misplaced? A Zero-Trust Survey
Poirrier, A., Cailleux, L., & Clausen, T. (2025) · Proceedings of the IEEE · doi:10.1109/jproc.2025.3555131 · Cited by 22
Ahmed, S., Shihab, I. F., & Khokhar, A. (2025) · Measurement Digitalization · doi:10.1016/j.meadig.2025.100005 · Cited by 21
Toward zero trust in 5G Industrial Internet collaboration systems
Zhang, H., Zhang, Z., & Chen, L. (2024) · Digital Communications and Networks · doi:10.1016/j.dcan.2024.03.011 · Cited by 13
A Micro-Segmentation Method Based on VLAN-VxLAN Mapping Technology
Li, D., Yang, Z., Yu, S., Duan, M., & Yang, S. (2024) · Future Internet · doi:10.3390/fi16090320 · Cited by 11
Jmal, H., Hmida, F. B., Basta, N., Ikram, M., Kâafar, M. A., & Walker, A. (2023) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2023.3338965 · Cited by 10
Self-citationBello, A. J., Diyan, M., & Asghar, I. (2025) · International Conference on Computing and Information Technology (ICCIT) · doi:10.1109/iccit63348.2025.10989392 · Cited by 10
A Multi-Layered Zero Trust Microsegmentation Solution for Cloud-Native 5G & Beyond Networks
Benzaïd, C., Guerd, N., Rehouma, N. E. H., Zeraoulia, K., & Taleb, T. (2025) · IEEE Wireless Communications and Networking Conference · doi:10.1109/wcnc61545.2025.10978671 · Cited by 6
Masukawa, R., Yun, S., Jeong, S., Bastian, N. D., & Imani, M. (2025) · IEEE Access · doi:10.1109/access.2025.3592877 · Cited by 6
A Hybrid Zero Trust Deployment Model for Securing O-RAN Architecture in 6G Networks
Eiza, M. H., Akwirry, B., Raschellà, A., Mackay, M., & Maheshwari, M. K. (2025) · Future Internet · doi:10.3390/fi17080372 · Cited by 7
Security challenges and solutions in Internet of Medical Things (IoMT) communication: A review
Mohammed, B. A., Al-Shareeda, . A., Hamzah, A. E., Alhasnawi, B. N., Homod, R. Z., Alkhabra, Y. A., Al-Mekhlafi, Z. G., alrashdi, R., Alshammari, G., & Alreshidi, I. D. (2026) · Journal of King Saud University - Computer and Information Sciences · doi:10.1007/s44443-026-00658-x · Cited by 4
Khan, N. M., Bhattacharya, P., Liu, H., Zhu, J.-R., & Gadekallu, T. R. (2025) · Internet Technology Letters · doi:10.1002/itl2.70056 · Cited by 4
Chennamsetty, S., & Averine, S. A. (2025) · International Conference on Electronics and Communication, Network and Computer Technology (ECNCT) · doi:10.1109/ecnct66493.2025.11172491 · Cited by 5
Task-Based Access Control for Computation and Communication in the Tactical Warfighting Edge
Poduvu, S., Neupane, R. L., Morel, A. E., Mitra, R., Anand, V., Chadha, R., & Calyam, P. P. (2024) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom61039.2024.10773844 · Cited by 2
Investigating operational technology attacks as code
Callegati, F., Giallorenzo, S., Melis, A., Melloni, S., Prandini, M., & Vannini, A. (2025) · Empirical Software Engineering · doi:10.1007/s10664-025-10713-2 · Cited by 2
Process Identity-Based Firewalling
Mantu, R., Chiroiu, M., & Raiciu, C. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-70890-9_11 · Cited by 2
Zanasi, C., Marchetti, M., & Colajanni, M. (2024) · IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/dasc64200.2024.00009 · Cited by 6
Behare, N., Palav, M. R., Deshmukh, S. B., Waghulkar, S., & Pal, V. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-86305-9_19 · Cited by 1
Xiang, W., Li, Q., & Jing, L. (2025) · IEEE Access · doi:10.1109/access.2025.3631892 · Cited by 1
Dependency-Based Link Prediction for Learning Microsegmentation Policy
Noel, S., & Swarup, V. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-15777-6_31 · Cited by 1
Palle, R. R. (2023) · International Journal of Science and Research (IJSR) · doi:10.21275/es24101104007 · Cited by 1
Adaptive Sharing of IoT Resources Through SDN-Based Microsegmentation of Services Using Mininet
Martínez, A. R. G., Padrón, J. D., Zambrano-Martínez, J. L., & Calafate, C. T. (2024) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-57523-5_18 · Cited by 1
Integrating Zero Trust and Human Elements for Enhanced Cloud Security
Rajraji, M., Simske, S., & Rabii, A. (2024) · doi:10.7176/isde/14-1-05 · Cited by 1
Trust Evaluation in Mobile Crowd Sensing Networks Based on Age of Trust (AoT)
Wang, X. S., Li, M., Tao, Y., Wang, X., & Wu, H. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00354 · Cited by 1
A three-tier microsegmentation framework for enterprise networks under Zero Trust Architecture
N.N., H., Krishnan, P., Jain, K., Saudagar, A. K. J., P., P., & Poonia, R. C. (2026) · Alexandria Engineering Journal · doi:10.1016/j.aej.2026.03.014 · Cited by 1
A Zero Trust Architecture for Critical Operational Technology Systems
Song, M. W., Nguyen, T., & Irvine, C. (2025) · Proceedings of the Annual Hawaii International Conference on System Sciences · doi:10.24251/hicss.2025.849
Multi-Cycle Network Traffic Prediction Algorithm for Flow Control and Monitor in Micro-Segmentation
Jing, Y., Chen, W., & Jiang, C. (2023) · IEEE Joint International Information Technology and Artificial Intelligence Conference (ITAIC) · doi:10.1109/itaic58329.2023.10409049
Enhancing Security in ASP.NET Core Applications: Implementing Oauth, JWT, and Zero-Trust Models
Chinthalapudi, S. S. (2025) · doi:10.38124/ijisrt/25mar1677 · Cited by 1
A Minimal Overlay-Based Framework for Transitioning Legacy Infrastructure to Zero Trust
Wang, W., Sadjadi, S. M., Rishe, N. D., & Mahara, A. (2025) · IEEE Conference on Communications and Network Security · doi:10.1109/cns66487.2025.11195028
TIMeFoRCE: An Identity and Access Management Framework for IoT Devices in A Zero Trust Architecture
Morris, V., Kornegay, K., Falaye, J., Richardson, S., Tienteu, M., & Tchuenkou, L. J. D. (2025) · Advances in Science Technology and Engineering Systems Journal · doi:10.25046/aj100601
Micro-Segmentation Anomaly Detection in Zero-Trust Software-Defined Network Fabrics
Joseph, A. (2025) · Artificial Intelligence and Smart Technologies for Sustainability Conference (AISTS) · doi:10.1109/aists66100.2025.11233161
ABC – Das technologische Zusammenspiel von AI, Big Data und Cloud
Sommer, J., Gutjahr, G., Velten, C., & Löffler, H. (2025) · Springer eBooks · doi:10.1007/978-3-658-49375-2_3
Zero Trust Architecture for Ransomware Defense in Virtualized Environment
Dhumal, A., Ghaleb, M., Abdelsalam, S., Moldovan, A.-N., & Hamdan, M. (2025) · IEEE/ACM International Conference on Big Data Computing, Applications and Technologies (BDCAT) · doi:10.1145/3773276.3774876
A Taxonomy of Segmentation in Network Security
Dube, R. (2026) · IEEE Access · doi:10.1109/access.2026.3658250 · Cited by 1
Implementing Zero Trust Architecture: Principles, Models and Challenges
Durga, R. K. (2025) · International Journal of Scientific Research and Modern Technology. · doi:10.38124/ijsrmt.v4i12.1050
Zero-Trust Stealth Authentication for Networked Systems via Port Knocking and TLS Fingerprinting
Sooda, G., Chandana, S., & Deepamala, N. (2026) · doi:10.1109/comsnets67989.2026.11418128
Formal Security of Zero Trust Architectures
Poirrier, A. (2024) · theses.fr (ABES) · doi:10.70675/368679edzc429z4365z9ed8z98bd52899a61
Zero Trust Architectures for Securing Foundation Model Lifecycles in Enterprise AI Systems
Mohile, A. (2026) · International Conference on Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE) · doi:10.1109/rmkmate69073.2026.11518852
A Two-Stage Micro-segmentation Framework for SDN Security Using Modified ART2A Clustering and CIDR
Bashaa, M. H., Bhaya, W. S., & Al-aaraji, N. H. K. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-24239-6_3
A Zero-Trust Framework for Securing Next-Generation Internet of Things Network
Rani, P. (2026) · Intelligent systems reference library · doi:10.1007/978-3-032-21753-0_12
AUTOMATED COMPLIANCE CONTROL OF NETWORK DEVICE CONFIGURATIONS WITH CYBERSECURITY REQUIREMENTS
Sashnova, M., Vozniuk, Y., Cherkasov, D., & Maslov, P. (2026) · Collection of scientific works of the Military Institute of Kyiv National Taras Shevchenko University · doi:10.17721/2519-481x/2026/90-07
Cybersecurity Challenges and Solutions in Digital Supply Chain Networks
Makinde, O. F. (2026) · IGI Global eBooks · doi:10.4018/979-8-3373-3740-1.ch008
Network Segmentation Frameworks for Zero Trust Architecture Implementation
Varanasi, B. S. S. (2025) · International Journal of Computational and Experimental Science and Engineering · doi:10.22399/ijcesen.5555
Metadata
- Authors
- Basta, N., Ikram, M., Kaafar, M. A., & Walker, A.
- Affiliations
- Macquarie University (AU)
- Macquarie University
- Ditno
- Venue
- NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium
- Publisher
- IEEE
- Published
- 2022-04-25
- Pages
- 1-7
- OpenAlex
- W3216300306
- Cited by
- 56
- References
- 18
- Citations by year
- 2026: 9 · 2025: 24 · 2024: 14 · 2023: 6 · 2022: 3
- FWCI
- 10.50
- Type
- conference paper
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- IEEE/IFIP Network Operations and Management Symposium (NOMS) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Computer Networks and Communications › Cybersecurity and Information Systems
- Keywords
- micro-segmentation, zero-trust security, network security assessment, attack graphs, network robustness, lateral movement, attack surface reduction, security policy enforcement
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
