Skip to main content
Have a personal or library account? Click to login
Zero-Trust Architecture Applied to a Banking System Cover
By:   
Open Access
|Oct 2026

References

  1. Y. Kannan, “Zero Trust Architecture: Principles, Implementation, and Impact on Organizational Security”, International Journal of Science and Research (IJSR), Volume 11 Issue 5, 2022, pp. 2111–2118, DOI: https://dx.doi.org/10.21275/SR24716003250
  2. R. Chandramouli, Z. Butcher, “A Zero-Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Location Environments”, (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP) NIST SP 800-207A, 2023, https://doi.org/10.6028/NIST.SP.800-207A
  3. S. Rose, O. Bochert, S. Mitchell, S. Connelly, “Zero Trust Architecture”, National Institute of Standards and Technology, Gaithersburg, MD, NIST Special Publication (SP) NIST SP 800-207, 2020, https://doi.org/10.6028/NIST.SP.800-207
  4. M. Khan, “Zero trust architecture: Redefining network security paradigms in the digital age”, World Journal of Advanced Research and Reviews, 19(3), 2023, pp. 105–116. Article DOI: https://doi.org/10.30574/wjarr.2023.19.3.1785
  5. G. Tripathi, A. Mohd, C. Gabriella, “A comprehensive review of blockchain technology: Underlying principles and historical background with future challenges”, Decision Analytics Journal, Volume 9, 2023, https://doi.org/10.1016/j.dajour.2023.100344.
  6. European Parliament, “Network and Information Security 2 (NIS 2)”, Directive (EU) 2022/2555, 14 December 2022
  7. European Parliament, “Digital Operational Resilience Act (DORA)”, Regulation (EU) 2022/2554, 14 December 2022. Available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2554 (Accessed on date: 21 June 2026).
  8. European Parliament, “General Data Protection Regulation (GDPR)”, Regulation (EU) 2016/679, 27 April 2016
  9. D. Evans, V. Kolesnikov, M. Rosulek, “A Pragmatic Introduction to Secure Multi-Party Computation”, Foundations and Trends® in Privacy and Security, Vol. 2, no. 2–3, pp. 70–246, 2018.
  10. National Institute of Standards and Technology (NIST), “Module-Lattice-Based Digital Signature Standard,” Federal Information Processing Standards Publication (FIPS) 204, August 2024. https://doi.org/10.6028/NIST.FIPS.204
  11. L. Brandão, R. Peralta, “First Call for Multi-Party Threshold Schemes”, (National Institute of Standards and Technology, Gaithersburg, MD) NIST Internal Report (IR) 8214C. 2026, DOI:10.6028/NIST.IR.8214.
  12. G. Alagic, M. Bros, P. Ciadoux, D. Cooper, Q. Dang, T. Dang, J. Kelsey, J. Lichtinger, Y. Liu, C. Miller, D. Moody, R. Peralta, R. Perlner, A. Robinson, H. Silberg, D. Smith-Tone, N. Waller, “Status Report on the Fourth Round of the NIST Post-Quantum Cryptography Standardization Process”. (National Institute of Standards and Technology, Gaithersburg, MD), NIST Internal Report (IR) NIST IR 8545, 2025, https://doi.org/10.6028/NIST.IR.8545
  13. I. Damgard, V. Pastro, N. Smart, S. Zakarias, “Multiparty Computation from Somewhat Homomorphic Encryption”, Advances in Cryptology – CRYPTO 2012 (Lecture Notes in Computer Science), 2012, pp. 1–46, https://eprint.iacr.org/2011/535
  14. M. Albreht, A. Davidson, A. Deo, N. Smart, “Round-Optimal Verifiable Oblivious Pseudorandom Functions from Ideal Lattices”, Springer Nature, 2021, pp. 261 – 289, DOI: https://doi.org/10.1007/978-3-030-75248-4_10
  15. M. Gambo, A. Almulhem, “Zero Trust Architecture: A Systematic Literature Review”, J Netw Syst Manage 34, 25, 2026, https://doi.org/10.1007/s10922-025-09998-x
  16. N. Syed, S. Shah, A. Shaghaghi, A. Anwar, Z. Baig, R. Doss, “Zero Trust Architecture (ZTA): A Comprehensive Survey”, Deakin University. Journal contribution, 2022, https://hdl.handle.net/10779/DRO/DU:20586441.v2
  17. J. Whitaker, E. Lawson, M. Greene, S. Bennett, D. Esther, R. Chandrasekaran “Risk-Adaptive Access Control in Zero-Trust Architectures”, Preprint, 2023,
  18. Y. Akharchaf, “Zero Trust Architecture in Cloud Security: Challenges and Implementation”, Preprint, 2025, 10.13140/RG.2.2.26671.04000
  19. M. Nasiruzzaman, M. Ali, I. Salam, M. Miraz, “The Evolution of Zero Trust Architecture (ZTA) from Concept to Implementation”, 2025 29th International Conference on Information Technology (IT), Žabljak, Montenegro, 2025, 1–8. DOI: 10.1109/IT64745.2025.10930254.
  20. S. Prasad, “Zero Trust Architecture: The future of enterprise security”, World Journal of Advanced Engineering Technology and Sciences, 15(01), 2025, pp. 660–666. Article DOI: https://doi.org/10.30574/wjaets.2025.15.1.0247.
  21. A. Arora, “Zero Trust Architecture: Revolutionizing Cybersecurity for Modern Digital Environments”, International Journal of Management, Technology And Engineering, Volume XIV, Issue IX, 2024, pp. 71–85.
  22. L. Koralla, “Zero Trust Architecture: A Comprehensive Framework for Modern Data Security”, International Journal of Advanced Research in Science, Communication and Technology, 2025, 390–405. 10.48175/IJARSCT-24449.
  23. J. Wang, Z. Wang, J. Song, H. Cheng, “Attribute and User Trust Score-Based Zero Trust Access Control Model in IoV”, Electronics, 2023, 12, 4825. https://doi.org/10.3390/electronics12234825
  24. M. Zajeganović, M. Pavlović, D. Ristić, “One Example Of Implementing Zero Trust Architecture”, Annual conference on Challenges on Contemporary Higher Education (ACCHE), Kopaonik, Serbia, 2025, pp. 222 – 227
  25. A. Chen, G. Lu, H. Xing, Y. Xie, S. Yuan, “Dynamic and Semantic-Aware Access-Control Model for Privacy Preservation in Multiple Data Center Environments”, International Journal of Distributed Sensor Networks 2020, Vol. 16, 2020, No 5. https://doi.org/10.1177/1550147720921778
  26. C. Happer, “AI-Augmented Role-Based and Attribute-Based Access Control for Multi Tenant Azure Architectures”, 2025, Available at: https://www.researchgate.net/publication/394842762_AI-Augmented_Role-Based_and_Attribute-Based_Access_Control_for_Multi-Tenant_Azure_Architectures (Accessed on date: 14 October 2026)
  27. E. Jeong, D. Yang, “A Trust Score-Based Access Control Model for Zero Trust Architecture: Design, Sensitivity Analysis, and Real-World Performance Evaluation”, Appl. Sci., 2025, 15, 9551. https://doi.org/10.3390/app15179551
  28. P. Jyosthna, K. Reddy, “A comprehensive access control model integrating zero trust architecture”, Indonesian Journal of Electrical Engineering and Computer Science, Vol. 38, No. 3, 2025, pp. 1896–1904
  29. R. Wang, C. Li, K. Zhang, B. Tu, “Zero-trust based dynamic access control for cloud computing”, Cybersecurity, 8, 2025, 10.1186/s42400-024-00320-x.
  30. M. Penelova, “Hybrid Role and Attribute Based Access Control Applied in Information Systems”, Cybernetics and Information Technologies, Volume 21, Issue 3, 2021, 85–96, 10.2478/cait-2021-0031.
  31. M. Penelova, V. Dimitrov, “Authorization In Electronic Healthcare Systems”, Nauchnyy Zhurnal Vestnik Aktyubinskogo Regionalnogo Universiteta imeni K. Zhubanova, 2025, DOI 10.70239/arsu.2025.t80.n2.06.
  32. Joint Task Force, “Security and Privacy Controls for Information Systems and Organizations”, (National Institute of Standards and Technology, Gaithersburg, MD), NIST Special Publication (SP) NIST SP 800-53 rev. 5, 2020 https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
  33. NIST/SEMATECH, “e-Handbook of Statistical Methods,” National Institute of Standards and Technology, 2012, https://doi.org/10.18434/M32189
  34. F. Liu, K. Ting, Z. Zhou, “Isolation Forest”, Eight IEEE International Conference on Data Mining, 2009, DOI:10.1109/ICDM.2008.17
  35. Amazon Web Services (AWS) official website. Available at: https://aws.amazon.com/ (Accessed on date: 18 June 2026).
  36. Ethereum official website, Account Abstraction. Available at: https://ethereum.org/roadmap/account-abstraction/ (Accessed on date: 20 June 2026).
  37. Laravel official website. Available at: https://laravel.com (Accessed on date: 26 May 2026)
  38. V. Canger, “What Are the Best Full-stack Web App Frameworks in 2026?”. Available at: https://wasp.sh/resources/2026/02/24/best-frameworks-web-dev-2026 (Accessed on date: 26 May 2026)
  39. PHP official website. Available at: https://www.php.net/ (Accessed on date: 26 May 2026).
  40. MySQL official website. Available at: https://www.mysql.com/ (Accessed on date: 26 May 2026).
  41. Laravel Livewire official website. Available at: https://livewire.laravel.com/ (Accessed on date: 29 June 2026)
  42. Solidity documentation. Available at: https://docs.soliditylang.org/en/latest/ (Accessed on date: 26 May 2026).
  43. Arbitrum official website. Available at: https://arbitrum.io/ (Accessed on date: 16 June 2026)
  44. Node.js official website. Available at: https://nodejs.org/en (Accessed on date: 26 May 2026).
  45. Python official website. Available at: https://www.python.org/ (Accessed on date: 24 June 2026)
  46. M. Penelova, Isolation Forest ZTA-HRABAC trainer. Available at: https://github.com/MGP-Ucict/zta-hrabac-trainer (Accessed on date: 24 June 2026)
  47. Redis official website. Available at: https://redis.io/ (Accessed on date: 28 June 2026)
  48. M. Penelova, Laravel package implementing HRABAC repository. Available at: https://github.com/MGP-Ucict/mpenelova (Accessed on date: 26 May 2026).
  49. M. Penelova, Bank system repository. Available at: https://github.com/MGP-Ucict/hrabac-bank-system-smart-contract (Accessed on date: 14 June 2026).
  50. Y. Riady, “Auditing Smart Contracts with Slither and Echidna”, Available at: https://yos.io/2022/02/20/audit-smart-contracts-with-slither-and-echidna/ (Accessed on date: 4 September 2026)
  51. Web Socket official website. Available at: https://socket.io/ (Accessed on date: 29 June 2026)
  52. Hardhat official website. Available at: https://hardhat.org/ (Accessed on date: 20 June 2026).
  53. S. Yoon, J. Choi, “Formal Specification and Verification of Smart Contract-Based Loan Management System Using TLA+”, IEEE Access, 2025, pp. 1–1. 10.1109/ACCESS.2025.3558081.
  54. TLA+ Model Checker. Available at: https://learning.tlapl.us/intro/platform/ (Accessed on date: 22 June 2026).
  55. P. Shor, “Algorithms for quantum computation: discrete logarithms and factoring” Proceedings 35th Annual Symposium on Foundations of Computer Science, IEEE Computer Society, 1994, pp. 124–134.
  56. M. Penelova, ZTA-HRABAC verification. Available at: https://github.com/MGP-Ucict/zta-hrabac-security-invariants-validation (Accessed on date: 22 June 2026).
  57. European Parliament and Council, “Anti-Money Laundering Regulation (AMLR)”, Regulation (EU) 2024/1624 of 31 May 2024 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing.
DOI: https://doi.org/10.2478/ias-2026-0023 | Journal eISSN: 1554-1029 | Journal ISSN: 1554-1010
Language: English
Page range: 468 - 500
Published on: Oct 27, 2026
Published by: Cerebration Science Publishing Co., Limited
In partnership with: Paradigm Publishing Services
Publication frequency: Volume open

© 2026 Maria Penelova, published by Cerebration Science Publishing Co., Limited
This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 License.