A survey of security in zero trust network architectures

Abstract

Zero Trust Network Architecture (ZTNA) has emerged as a transformative paradigm in cybersecurity, aiming to address the limitations of traditional perimeter-based security models. By adopting a "never trust, always verify" approach, ZTNA enforces stringent access controls and continuous authentication, regardless of user location or device. This survey provides a comprehensive overview of security challenges, solutions, and advancements in ZTNA. It explores core principles such as least privilege access, micro-segmentation, and contextual identity verification. The paper also examines the integration of emerging technologies like artificial intelligence (AI), blockchain, and secure access service edge (SASE) in ZTNA implementations. Additionally, it discusses the effectiveness of ZTNA in mitigating advanced persistent threats, insider attacks, and lateral movement. Finally, the survey identifies current research gaps, practical deployment challenges, and future directions to enhance security in ZTNA, offering valuable insights for academics and practitioners alike.