🤖 AI Summary
This work proposes a novel endpoint security framework tailored for critical infrastructure operating in cloud environments, where increasingly sophisticated endpoint threats challenge conventional security models and zero trust architecture (ZTA) remains underexplored for endpoint management. The framework systematically integrates ZTA principles into endpoint security by enforcing continuous authentication, least-privilege access control, and cloud-native security mechanisms to dynamically validate every access request. This approach significantly reduces the attack surface, enhances endpoint protection capabilities, and strengthens compliance with regulatory requirements. By embedding zero trust deeply into the endpoint layer of critical infrastructure cloud systems, the proposed framework addresses a critical gap in current zero trust practices and offers a robust foundation for securing high-value assets against evolving threats.
📝 Abstract
Cyber threats have become highly sophisticated, prompting a heightened concern for endpoint security, especially in critical infrastructure, to new heights. A security model, such as Zero Trust Architecture (ZTA), is required to overcome this challenge. ZTA treats every access request as new and assumes no implicit trust. Critical infrastructure like power plants, healthcare systems, financial systems, water supply, and military assets are especially prone to becoming targets for hackers and phishing attacks. This proposes a comprehensive framework for integrating tailored ZTA into organizations that manage sensitive operations. The paper highlights how the ZTA framework can enhance compliance, enabling continuous protection, thereby reducing attack surfaces. This paper aims to address the gap that exists in applying ZTA to endpoint management within cloud environments for critical infrastructure.