Trust Quantification on Zero Trust Architecture: A Survey

초록

Zero Trust Architecture (ZTA) has emerged as a prominent security paradigm that moves beyond traditional network perimeter-based security by continuously verifying all access requests. In this paradigm, Trust Quantification (TQ) plays a critical role by numerically evaluating the trustworthiness of users, devices, sessions, and behaviors, thereby enabling dynamic access control and policy decision-making. To date, ZTA and TQ have been surveyed in isolation from one another. Existing surveys on ZTA primarily focus on architectural structures, policy components, and system frameworks, while an in-depth analysis of TQ mechanisms has remained limited. Conversely, surveys on TQ have mainly concentrated on model analysis and performance comparison, without considering the specific characteristics and requirements of ZTA environments. Therefore, this study investigates existing studies on TQ within the context of ZTA and presents an integrated analytical framework for systematic comparison and evaluation. The proposed framework divides the TQ process into three stages: 1) Data Collection; 2) Data Pre-Processing; and 3) Trust Quantification Model. In addition, it incorporates evaluation criteria derived from the core tenets of ZTA. Based on this framework, existing TQ approaches designed for ZTA environments were systematically analyzed and evaluated. Through a stage-wise analysis, this study identifies the limitations of current TQ research and provides an academic foundation for guiding future research directions in trust quantification for ZTA systems.

키워드