The DOI matches its Crossref record; 18 of the 18 references it cites were found in a registry or an index.
Towards a Zero-Trust Micro-segmentation Network Security Strategy: An Evaluation Framework
Open accessAbstract
Micro-segmentation is an emerging security technique that separates physical networks into isolated logical micro-segments (workloads). By tying fine-grained security policies to individual workloads, it limits the attacker’s ability to move laterally through the network, even after infiltrating the perimeter defences. While micro-segmentation is proved to be effective for shrinking enterprise networks attack surface, its impact assessment is almost absent in the literature. This research is dedicated to developing an analytical framework to characterise and quantify the effectiveness of micro-segmentation on enhancing networks security. We rely on a twofold graph-feature-based framework of the network connectivity and attack graphs to evaluate the network exposure and robustness, respectively. Tracking the variations of formulated metrics values post the deployment of micro-segmentation reveals exposure reduction and robustness improvement in the range of 60% – 90%.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“In [17], the authors perform a deep-dive investigation on micro-segmentation approaches, proposing a workflow-level isolation approach to minimize lateral movement, and a metric to evaluate the trade-offs between efficiency and achieved security.”
From A Zero-Trust Architecture for Remote Access in Industrial IoT Infrastructures (2023) · cites this paper as [17]
Experimental — accuracy not yet measuredThe cited source says what the claim attributes to it.
In the citing paper
“Different approaches can be used to implement a ZTA, including network micro-segmentation (Basta et al., 2022) and dynamic access policy enforcement (Colombo et al., 2021).”
From A Zero Trust Architecture for Critical Operational Technology Systems (2025) · cites this paper as Basta et al., 2022
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Epidemic spreading in real networks: an eigenvalue viewpoint
Wang, Y., Chakrabarti, D., Wang, C., & Faloutsos, C. (2004) · IEEE Symposium on Reliable Distributed Systems (SRDS) · doi:10.1109/reldis.2003.1238052 · Cited by 876
A scalable approach to attack graph generation
Ou, X., Boyer, W. F., & McQueen, M. (2006) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/1180405.1180446 · Cited by 622
Model-based evaluation: from dependability to security
Nicol, D. M., Sanders, W. H., & Trivedi, K. S. (2004) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2004.11 · Cited by 511
MulVAL: a logic-based network security analyzer
Ou, X., Govindavajhala, S., & Appel, A. W. (2005) · Cited by 509
A quantitative study of firewall configuration errors
Wool, A. (2004) · Computer · doi:10.1109/mc.2004.2 · Cited by 397
An Attack Graph-Based Probabilistic Security Metric
Wang, L., Islam, T., Long, T., Singhal, A., & Jajodia, S. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-70567-3_22 · Cited by 385
Conflict classification and analysis of distributed firewall policies
Al-Shaer, E. S., Hamed, H., Boutaba, R., & Hasan, M. M. K. (2005) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2005.854119 · Cited by 291
A Survey on Systems Security Metrics
Pendleton, M., Garcia-Lebron, R., Cho, J.-H., & Xu, S. (2016) · ACM Computing Surveys · doi:10.1145/3005714 · Cited by 287
An analysis of CVSS version 2 vulnerability scoring
Scarfone, K. A., & Mell, P. (2009) · Proceedings of the ... ACM-IEEE International Symposium on Empirical Software Engineering and Measurement/International Symposium on Empirical Software Engineering and Measurement · doi:10.1109/esem.2009.5314220 · Cited by 169
Extending Attack Graph-Based Security Metrics and Aggregating Their Application
Idika, N. C., & Bhargava, B. (2010) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2010.61 · Cited by 149
Research works printed but not linked: 3
- li, 2011, A stochastic model for quantitative security analyses of networked systems, IEEE TDSC, 8, 28
- nandakumara, 2020, Efficacy of micro-segmentation assessment report, Bishop Fox
- 10.3233/JCS-130475 · DOI
Cited by
A Survey on Zero Trust Architecture: Challenges and Future Trends
He, Y., Huang, D., Chen, L., Ni, Y., & Ma, X. (2022) · Wireless Communications and Mobile Computing · doi:10.1155/2022/6476274 · Cited by 348
“In 2021, Basta N and others [52] adopted microsegmentation technology, which limited the attacker’s ability to move laterally in the network by binding fine-grained security policies to a single workload, and initially realized trust assessment under the concept of zero trust.”
BackgroundFlexible zero trust architecture for the cybersecurity of industrial IoT infrastructures
Zanasi, C., Russo, S., & Colajanni, M. (2024) · Ad Hoc Networks · doi:10.1016/j.adhoc.2024.103414 · Cited by 111
Zero Trust Architecture: A Systematic Literature Review
Gambo, M. L., & Almulhem, A. (2025) · Journal of Network and Systems Management · doi:10.1007/s10922-025-09998-x · Cited by 178
Dissecting zero trust: research landscape and its implementation in IoT
Liu, C., Tan, R., Wu, Y., Feng, Y., Jin, Z., Zhang, F., Liu, Y., & Liu, Q. (2024) · Cybersecurity · doi:10.1186/s42400-024-00212-0 · Cited by 111
Nsoh, B., Katimbo, A., Guo, H., Heeren, D. M., Nakabuye, H. N., Qiao, X., Ge, Y., Rudnick, D. R., Wanyama, J., Bwambale, E., et al. (2024) · Sensors · doi:10.3390/s24237480 · Cited by 81
Metadata
- Authors
- Basta, N., Ikram, M., Kaafar, M. A., & Walker, A.
- Affiliations
- Macquarie University (AU)
- Macquarie University
- Ditno
- Venue
- NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium
- Publisher
- IEEE
- Published
- 2022-04-25
- Pages
- 1-7
- OpenAlex
- W3216300306
- Cited by
- 56
- References
- 18
- Citations by year
- 2026: 9 · 2025: 24 · 2024: 14 · 2023: 6 · 2022: 3
- FWCI
- 10.50
- Type
- conference paper
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- IEEE/IFIP Network Operations and Management Symposium (NOMS) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Computer Networks and Communications › Cybersecurity and Information Systems
- Keywords
- micro-segmentation, zero-trust security, network security assessment, attack graphs, network robustness, lateral movement, attack surface reduction, security policy enforcement
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
