Volume 10,Issue 9
Authentication and Dynamic Access Control in Zero-Trust Network Security Paradigm
Zero-trust architecture represents a fundamental departure from perimeter-based security models, demanding continuous verification and context-aware authorization for every access request. This paper presents a unified framework for authentication and dynamic access control that operationalizes zero-trust principles in heterogeneous network environments. We introduce a real-time policy evaluation engine that integrates identity provenance, device posture, behavioral telemetry, and environmental risk signals into a single decision fabric. Unlike static rule sets, our approach enables adaptive privilege modulation—granting minimal, time-bound entitlements that evolve with observed trust indicators. The framework is designed for seamless integration across cloud, edge, and legacy infrastructure without requiring architectural overhauls. Empirical validation demonstrates measurable improvements in breach containment latency, unauthorized lateral movement prevention, and policy compliance agility under shifting threat conditions.
[1] Xiao S, Ye Y, Kanwal N, et al., 2022, SoK: Context and Risk Aware Access Control for Zero Trust Systems. Security and Communication Networks, 2022(1): 7026779.
[2] Venu M, Kruthika M, Likhitha R, et al., 2026, Zero-Trust Reinforcement: An Adaptive Access Control Framework Using Deep Learning. Proceedings of the 13th International Conference on Computing for Sustainable Global Development (INDIACom), 1–6.
[3] Ma X, Fang F, Liu T, et al., 2026, Dynamic Authentication and Granularized Authorization with a Cross-Domain Zero Trust Architecture in Large-Scale IoT Networks. IEEE Transactions on Network Science and Engineering.
[4] Li X, Cao L, Bai J, et al., 2026, Prov-Trust: Zero-Trust Dynamic Access Control Technology Based on Anomaly Detection of Provenance Graph. Journal of King Saud University Computer and Information Sciences.
[5] Jin Q, Wang L, 2021, Zero-Trust Based Distributed Collaborative Dynamic Access Control Scheme with Deep Multi-Agent Reinforcement Learning. EAI Endorsed Transactions on Security and Safety, 8(27): 1.
[6] Qiao L, 2026, Zero-Trust Data Access Control in Multi-Cloud Databases: A Dynamic Policy Enforcement Framework Based on Attribute and Risk Scoring. Proceedings of the International Conference on Intelligent Computing (ICONIC), 1–5.
[7] Aswini A, Prasanna S, 2026, AZ–TAC Adaptive Zero Trust Access Control with Continuous Authentication for Secured Cloud Environments. IEEE Access.
[8] Chang P, Xu G, 2026, Design and Implementation of a Zero Trust Access Control Model Driven by Session Lifecycle. IEEE Access.
[9] Markovic K, 2025, Toward Adaptive Zero Trust Architectures: Dynamic Trust Evaluation, Risk-Based Authentication, and Context-Aware Access Control for Next-Generation Network Security. American Academic Journal, 466–477.
[10] Anderson K, 2025, Dynamic Risk-Adaptive Access Control Using Machine Learning in Zero-Trust Azure Environments. ResearchGate.
[11] Stodt F, Reich C, Theoleyre F, 2025, Beyond Static Security: A Context-Aware and Real-Time Dynamic Zero Trust Architecture for IIoT Access Control. IEEE Internet of Things Journal, 12(17): 35380–35393.
[12] Yao Q, Wang Q, Zhang X, et al., 2020, Dynamic Access Control and Authorization System Based on Zero-Trust Architecture. Proceedings of the 1st International Conference on Control, Robot, and Intelligent System, 123–127.
