Trust-Aware Access Control and Secure Delivery
Keywords:
Trust, cloud intelligence, autonomous governance, access governance, privilege management, identities, roles, policy enforcement, secure software delivery, enterprise security .Abstract
We present a Trust-Centric Cloud Intelligence Framework for autonomous access governance and secure enterprise software delivery, aimed at achieving deep governance of cloud services through intelligent, autonomous operations. While artificial intelligence (AI) and automation create unprecedented opportunities for enterprises, cybersecurity remains a persistent and critical challenge. Despite cloud providers' assurances of robust security measures, numerous high-profile breaches have demonstrated the limitations of these claims. We argue that trust serves as a foundational construct enabling security managers to establish sufficient cyber-resilience. Furthermore, the vast volume of data generated across cloud services offers a valuable source of intelligence for continuously monitoring and enforcing governance policies. By quantifying trustworthiness as an indicator of the risk associated with cloud service usage, our framework establishes the foundation for an intelligent access-governance model—one that integrates privilege management, identity administration, role assignment, and automated policy enforcement.
References
1. Chandramouli, R., Butcher, Z., & Chetal, A. (2021). Attribute-based access control for microservices-based applications using a service mesh. National Institute of Standards and Technology.
2. Duan, R., Alrawi, O., Kasturi, R. P., Elder, R., Saltaformaggio, B., & Lee, W. (2021). Towards measuring supply chain attacks on package managers for interpreted languages. Proceedings of the Network and Distributed System Security Symposium.
3. Martínez, J., & Durán, J. M. (2021). Software supply chain attacks, a threat to global cybersecurity: SolarWinds’ case study. International Journal of Safety and Security Engineering, 11(5), 537–545.
4. Mattaparthi, R. (2024). Transformer-Based Fault Diagnosis for Large-Scale Standby Power Generators: Partial Discharge Pattern Recognition at Hyperscale Data Center Installations. Journal of Computational Analysis and Applications (JoCAAA), 33(08), 8781-8799.
5. Afzali, H., Kuppusamy, T. K., Torres-Arias, S., Curtmola, R., & Cappos, J. (2021). Towards secure software supply chains: A survey of current practices and emerging approaches. IEEE Security & Privacy.
6. Shree, S., & Kumar, S. (2021). Zero trust security architecture for cloud computing environments. International Journal of Computer Networks and Applications, 8(6), 671–682.
7. Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2021). Zero trust architecture: Concepts and deployment considerations. National Institute of Standards and Technology.
8. NIST. (2021). Security measures for “EO critical software” use under Executive Order 14028. National Institute of Standards and Technology.
9. Venkateswara Rao Movva. (2024). AI-Augmented DevOps for Large-Scale Retail Platforms: A Framework for Intelligent CI/CD, Automated Testing, and Deployment Optimization. Journal of Computational Analysis and Applications (JoCAAA), 33(08), 7759–7765. Retrieved from https://eudoxuspress.com/index.php/pub/article/view/5827
10. NIST. (2021). Secure software development framework (SSDF) version 1.1: Recommendations for mitigating the risk of software vulnerabilities. National Institute of Standards and Technology.
11. Syed, N. F., Shah, S. W. H., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. (2022). Zero trust architecture (ZTA): A comprehensive survey. IEEE Access, 10, 57143–57179.
12. Penaka, B. (2024). Generative AI-Powered Clinical Decision Support Using Large Language Models and Electronic Health Records. Journal of Neonatal Surgery, 13(1), 2588–2596. Retrieved from https://jneonatalsurg.com/index.php/jns/article/view/10577
13. Okafor, C., Schorlemmer, T. R., Torres-Arias, S., & Davis, J. C. (2022). SoK: Analysis of software supply chain security by establishing secure design properties. In Proceedings of the 2022 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (pp. 15–24).
14. Jiang, W., Synovic, N., Sethi, R., Indarapu, A., Hyatt, M., Schorlemmer, T. R., Thiruvathukal, G. K., & Davis, J. C. (2022). An empirical study of artifacts and security risks in the pre-trained model supply chain. In Proceedings of the 2022 ACM Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses (pp. 105–114).
15. Pranitha Potturi. (2024). AI-Augmented Analytics Architecture for Intelligent Enterprise Reporting and Predictive Business Decision-Making . Journal of Computational Analysis and Applications (JoCAAA), 33(05), 3830–3841. Retrieved from https://eudoxuspress.com/index.php/pub/article/view/5797
16. Arshad, H., Johansen, C., & Owe, O. (2022). Semantic attribute-based access control: A review on current status and future perspectives. Journal of Systems Architecture, 129, 102625.
17. Sun, Q., Liang, G., Wu, Y., Wu, B., Tian, C., & Wang, W. (2022). Data-driven open source software supply chain maintenance risk analysis method. Journal of East China Normal University (Natural Science), 2022(5), 90–99.
18. Loganathan, R., & Kolla, S. H. (2024). Harnessing generative AI for adaptive risk policy generation in multi-regulatory data center environments. Turkish Journal of Computer and Mathematics Education (TURCOMAT), 15(3), 505-515.
19. Research on risk analysis and governance measures of open-source components of information system in transportation industry. (2022). Procedia Computer Science, 208, 106–110.
20. Melara, M. S., & Bowman, M. (2022). What is software supply chain security? arXiv.
21. Kolla, S. H., & Peddi, R. K. (2024). Designing Governance-Aligned GenAI Pipelines Using Small Language Models for Enterprise Workflow Intelligence. International Journal of Science, Research and Technology, 7(6), 13256-13268.
22. National Institute of Standards and Technology. (2022). Cybersecurity supply chain risk management practices for systems and organizations. National Institute of Standards and Technology.
23. National Institute of Standards and Technology. (2022). Blockchain for access control systems. National Institute of Standards and Technology.
24. Sasidhar Reddy Mondeddula. (2024). Large Language Model-Based Financial Intelligence for Automated Compliance, Risk Analysis, and Regulatory Reporting. Journal of Computational Analysis and Applications (JoCAAA), 33(06), 4222–4227. Retrieved from https://eudoxuspress.com/index.php/pub/article/view/5813
25. Duan, R., Alrawi, O., Kasturi, R. P., Elder, R., Saltaformaggio, B., & Lee, W. (2023). On the prevalence of software supply chain attacks: Empirical study and investigative framework. Forensic Science International: Digital Investigation, 44, 301508.
26. Amusuo, P. C., Robinson, K. A., Singla, T., Peng, H., Machiry, A., Torres-Arias, S., Simon, L., & Davis, J. C. (2023). ZTDJava: Mitigating software supply chain vulnerabilities via zero-trust dependencies.
27. Hu, V. C. (2023). Overview and considerations of access control based on attribute encryption. National Institute of Standards and Technology.
28. Rajesh Reddy Ellenki. (2024). Deep Learning-Based Demand Intelligence for Dynamic Merchandise Planning and Allocation. Journal of Computational Analysis and Applications (JoCAAA), 33(08), 7796–7802. Retrieved from https://eudoxuspress.com/index.php/pub/article/view/5832
29. Saxena, U. R., & Alam, T. (2023). Provisioning trust-oriented role-based access control for maintaining data integrity in cloud. Indian Journal of Science and Technology, 14(6), 1–10.
30. Research on zero trust evaluation method for network security. (2023). In Proceedings of the 3rd International Conference on Frontiers of Electronics, Information and Computation Technologies.
31. Tang, B., et al. (2023). Blockchain-based zero-trust access control for Internet of Things environments. IEEE-related research on decentralized trust and access control.
32. Chandramouli, R., & Butcher, Z. (2023). A zero trust architecture model for access control in cloud-native applications in multilocation environments. National Institute of Standards and Technology.
33. Torres-Arias, S., Afzali, H., Kuppusamy, T. K., Curtmola, R., & Cappos, J. (2023). Software supply-chain security: Issues and countermeasures. Computer, 56(7), 54–66.
34. Zhou, X., et al. (2024). A blockchain-based and microservices-architected software composition analysis system. Journal of Software: Evolution and Process.
35. Reddy, V. A. R. (2024). Generative Intelligence for Healthcare Claims Processing and Personalized Benefits Management. International Journal of Advanced Engineering Science and Information Technology (IJAESIT), 7(3), 14099.
36. Reichert, B. M., & Obelheiro, R. R. (2024). Software supply chain security: A systematic literature review. International Journal of Computers and Applications, 46(10), 853–867.
37. Chandramouli, R., Kautz, F., & Torres-Arias, S. (2024). Strategies for the integration of software supply chain security in DevSecOps CI/CD pipelines. National Institute of Standards and Technology.
38. Boyens, J. (2024). Appendix F: Software security in supply chains. National Institute of Standards and Technology.
39. Okafor, C., Schorlemmer, T. R., Torres-Arias, S., & Davis, J. C. (2024). SoK: Analysis of software supply chain security by establishing secure design properties. Proceedings of the 2024 software supply-chain security research community.
40. ZTSA: Zero trust security architecture—A comprehensive survey. (2024). In Proceedings of the 2024 International Conference on Communication, Computer Sciences and Engineering.
41. Ding, Y., Wu, Z., Miao, Y., & Ding, M. (2024). SharAcc: Enhancing scalability and security in attribute-based access control with sharding-based blockchain and full decentralization. Computer Networks.
42. Strategy for implementing of zero trust architecture. (2024). IEEE Transactions on Reliability, 73(1), 93–100.
43. IEEE Computer Society. (2024). IEEE Standard for blockchain-based zero-trust framework for the Internet of Things (IEEE Standard 3219-2023). IEEE Standards Association.
44. Anasuri, S., & Rusum, G. P. (2024). Software supply chain security: Policy, tooling, and real-world incidents. International Journal of Emerging Trends in Computer Science and Information Technology, 5(3), 79–88.
Additional Files
Published
Data Availability Statement
None
Issue
Section
License
Copyright (c) 2025 Dhanaraj Sathiri (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original author(s) and source are credited.
