Named, Secured Data as a Foundation for Zero Trust A Conceptual Comparison of Today’s Zero Trust Realizations and NDN Security Architecture

Zero Trust for SQL Server: A Three-Layer Security Architecture

This study designed and empirically validated a three-layer Zero Trust architecture for Microsoft SQL Server that natively integrates instance-level authentication governance, enhanced Role-Based Access Control with Row-Level Security and Just-in-Time privilege elevation, and metadata-driven Attribute-Based Access Cont...

Connection context verification as a basis for network access control in zero-trust architectures ⋆

MULTI-FACTOR AUTHENTICATION, SINGLE SIGN-ON, AND IDENTITY MANAGEMENT IN CLOUD-BASED HEALTHCARE MOBILE APPLICATIONS A Reference Architecture and STRIDE Threat-Model Evaluation

This study develops and evaluates a standards-based reference architecture integrating single sign-on (SSO), multi-factor authentication (MFA), federated identity, lifecycle governance, server-side authorization, and auditable policy enforcement.

Zero-Trust Authorization and Discovery for Enterprise MCP

LLM agents translate natural-language context, which may include attacker-controlled text, into privileged tool calls, so authorization must remain effective even when an agent is prompt-injected or adversarially steered. The Model Context Protocol (MCP) has become a widely adopted interface for this boundary, yet its...

Delegation Without Trust: An Empirical Gap Analysis of Identity, Authorization, and Runtime Governance in Multi-Agent LLM Systems

It is argued that agent security must be evaluated under an untrusted-model assumption: a correct system is one in which a fully prompt-injected agent still cannot exceed the authority explicitly delegated to it, and an authorization broker is implemented that closes the gap.

Design of an Intelligent Cross-Layer Risk-Adaptive Zero-Knowledge Permissioned Blockchain Framework for Secure Intelligent Financial Transaction Processing

Secure financial transactions require more than just an immutable record — they also demand privacy-preserving identity assurance (which enables secure, trusted and transparent communication), adaptive fraud intelligence (to detect fraudulent transactions), policy-aware execution (so organizations can set their own rul...