Advanced International Journal for Research

E-ISSN: 3048-7641     Impact Factor: 9.11

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Call for Paper Volume 7, Issue 4 (July-August 2026) Submit your research before last 3 days of August to publish your research paper in the issue of July-August.

Zero Trust Architecture in Distributed Enterprise Systems

Author(s) Joseph Njenga Mwaniki
Country United States
Abstract The shift toward distributed enterprise systems, accelerated by cloud migration and remote work, has made the traditional perimeter-based security models obsolete. This thesis investigates the implementation and efficacy of Zero Trust Architecture (ZTA) in complex, distributed environments. Unlike traditional models that assume trust within a network, ZTA operates on the principle of "never trust, always verify." I will evaluate the security improvements provided by ZTA, specifically focusing on micro-segmentation and continuous authentication, against the potential performance overhead introduced by these rigorous checks.
Through a series of simulations and real-world performance benchmarks conducted on AWS infrastructure spanning two geographic regions, this research quantifies the latency and throughput impacts of various ZTA components. A structured threat modeling exercise using the STRIDE methodology has been employed to identify attack surfaces in both legacy and ZTA-enabled systems. Additionally, two enterprise case studies, one in the financial sector and one in healthcare, provide practical validation of the theoretical framework.
My findings suggest that while ZTA significantly reduces the risk of lateral movement by adversaries, blocking 92% of simulated breach attempts compared to 30% for legacy systems, careful orchestration of Policy Decision Points (PDP) is required to maintain system performance within acceptable enterprise thresholds. The median latency increase of 14ms per request is well within acceptable bounds for enterprise applications, and session-based policy caching at the Policy Enforcement Point (PEP) layer mitigates throughput degradation by 8 percentage points. This thesis concludes with a phased adoption roadmap and recommendations for future research into ML-driven policy automation.
Keywords Zero trust, Cyber Security, Data Security, ZTA, Zero trust Architecture
Field Computer > Data / Information
Published In Volume 7, Issue 4, July-August 2026
Published On 2026-07-07

Share this