Continuous Trust Evaluation Beyond the Perimeter
Keywords:
Hybrid Cloud-Native, Trust Intelligence, Identity-Based System, Identity-Centric Threat Detection, Trust Inference, Governance, Risk, and Compliance, Provenance, Digital Credential, Trust Score,Continuous Trust Intelligence, Identity-Centric Security, Threat Detection, Zero Trust Architecture, Hybrid Cloud Security, Cloud-Native Enterprises, Identity and Access Management, Behavioral Analytics, Continuous Authentication, Adaptive Access Control.Abstract
This paper defines continuous trust intelligence and situates it within the broader problem of identity-centric threat detection. We argue that this capability is especially relevant to hybrid, cloud-native enterprises, where identity has become a primary — and often under-monitored — attack surface. The paper outlines the scope of the work, states its research questions, and previews its anticipated contributions.
We offer provisional answers to the following questions: What key challenges arise from the capabilities of cloud-native services and applications? What properties must a system satisfy to support identity-centric trust intelligence and risk mitigation? And can trust itself be treated as a legitimate, measurable point within the enterprise attack surface?
Existing work on identity-centric risk avoidance is extensive, yet it largely fails to provide continuous, real-time visibility into identity-driven exposure within business-critical systems. This gap raises a practical question that enterprise architects and security officers routinely face: When is it safe enough to consume partner, managed, and legacy identity-aware systems and resources without an additional layer of zero-trust controls? Answering this requires a clear, ongoing assessment of how risky such usage actually is, paired with additional identity-centric safeguards that function as a last line of defense.
This matters because identity systems — generally assumed to be secure — often constitute the largest identity-centric attack surface in an organization, with both direct and indirect effects. Unlike conventional attack surfaces, which are typically measured and made visible through established tooling, identity-based attack surfaces can expand unchecked while remaining largely invisible, even when they involve strategic, high-value, or continuously active systems and connections.
References
1. Azad, M. A., Abdullah, S., Arshad, J., Lallie, H., & Ahmed, Y. (2024). Verify and trust: A multidimensional survey of zero-trust security in the age of IoT. Internet of Things, 27, Article 101227.
2. Buck, C., Olenberger, C., Schweizer, A., Völter, F., & Eymann, T. (2021). Never trust, always verify: A multivocal literature review on current knowledge and research gaps of zero-trust. Computers & Security, 110, Article 102436.
3. Kumar, S. S., Gadi, A. L., Sheelam, G. K., Kummari, D. N., Reddy Koppolu, H. K., & Pamisetty, A. (2026). AI-Driven Compliance and Audit Framework for Manufacturing Infrastructure in Automotive Connected Services and Financial Ecosystems. In 2026 IEEE International Conference for Convergence in Computing Technology (I3CTCON) (pp. 1–6). IEEE. 2026 IEEE International Conference for Convergence in Computing Technology (I3CTCON). https://doi.org/10.1109/i3ctcon68242.2026.11507231
4. Chandramouli, R., & Butcher, Z. (2023). A zero trust architecture model for access control in cloud-native applications in multi-location environments (NIST Special Publication 800-207A). National Institute of Standards and Technology.
5. Dhiman, P., Saini, N., Gulzar, Y., Turaev, S., Kaur, A., Nisa, K. U., & Hamid, Y. (2024). A review and comparative analysis of relevant approaches of zero trust network model. Sensors, 24(4), Article 1328.
6. Fernandez, E. B., & Brazhuk, A. (2024). A critical analysis of Zero Trust Architecture (ZTA). Computer Standards & Interfaces, 89, Article 103832.
7. Krishnan, M., Yandamuri, U. S., Recharla, M., Challa, K., Kolla, S. H., & Valiki, S. (2026). Adaptive Machine Learning Ecosystem for Personalized Medicine and Digital Finance: Leveraging Azure Cloud, Data Engineering, and Workflow Automation. In 2026 5th OPJU International Technology Conference (OTCON) on Smart Computing for Innovation and Advancement in Industry 5.0 (pp. 1–6). IEEE. 2026 5th OPJU International Technology Conference (OTCON) on Smart Computing for Innovation and Advancement in Industry 5.0. https://doi.org/10.1109/otcon69332.2026.11629728
8. Kang, H., Liu, G., Wang, Q., Meng, L., & Liu, J. (2023). Theory and application of zero trust security: A brief survey. Entropy, 25(11), Article 1595.
9. Lund, B. D., Lee, T.-H., Wang, Z., Wang, T., & Mannuru, N. R. (2024). Zero trust cybersecurity: Procedures and considerations in context. Encyclopedia, 4(4), 1520–1533.
10. Nahar, N., Andersson, K., Schelén, O., & Saguna, S. (2024). A survey on zero trust architecture: Applications and challenges of 6G networks. IEEE Access, 12, 94753–94764.
11. Phiayura, P., & Teerakanok, S. (2023). A comprehensive framework for migrating to Zero Trust Architecture. IEEE Access, 11, 19487–19511.
12. Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero trust architecture (NIST Special Publication 800-207). National Institute of Standards and Technology.
13. Sarkar, S., Choudhary, G., Shandilya, S. K., Hussain, A., & Kim, H. (2022). Security of zero trust networks in cloud computing: A comparative review. Sustainability, 14(18), Article 11213.
14. Shetty, T. S., Gorle, R., Malani, S. R., Mattaparthi, R., & Kalra, M. (2026, August). AI-Driven Self-Healing Infrastructure Using Predictive Material Intelligence. In 2026 7th International Conference On Computational Vision and Bio Inspired Computing (ICCVBIC) (pp. 1876-1883). IEEE.
15. SumanPrakash, P., Ramana, K. S., CosmePecho, R. D., Janardhan, M., Churampi Arellano, M. T., Mahalakshmi, J., Bhavsingh, M., & Samunnisa, K. (2024). Learning-driven continuous diagnostics and mitigation program for secure edge management through Zero-Trust Architecture. Computer Communications, 220, 94–107.
16. Yeoh, W., Liu, M., Shore, M., & Jiang, F. (2023). Zero trust cybersecurity: Critical success factors and a maturity assessment framework. Computers & Security, 133, Article 103412.
17. Mashetty, S. M. S., & Schneider, D. S. D. (2026). Continuously Delivered Lakehouse Analytics on Azure Databricks. European Journal of Advances in Artificial Intelligence, 4(03).
18. Yan, X., & Wang, H. (2020). Survey on zero-trust network security. In Artificial Intelligence and Security: 6th International Conference, ICAIS 2020, Proceedings, Part I (pp. 50–60). Springer.
19. Itodo, C., & Ozer, M. (2024). Multivocal literature review on zero-trust security implementation. Computers & Security, 141, Article 103827.
20. Syed, N. F., Shah, S. W., Shaghaghi, A., Anwar, A., Baig, Z., & Doss, R. (2022). Zero Trust Architecture (ZTA): A comprehensive survey. IEEE Access, 10, 57143–57179.
21. Chandramouli, R. (2021). Attribute-based access control for microservices-based applications using a service mesh (NIST Special Publication 800-204B). National Institute of Standards and Technology.
22. Rose, S., Borchert, O., Kerman, A., & Souppaya, M. (2025). Implementing a Zero Trust Architecture: High-level document (NIST Special Publication 1800-35). National Institute of Standards and Technology.
23. National Institute of Standards and Technology. (2022). Implementation of DevSecOps for a microservices-based application with service mesh (NIST Special Publication 800-204C).
24. Subramanian, G., Premalatha, V., Peddi, R. K., Qidwai, T., Krishnamoorthi, M., & Swetha, B. (2026, August). Explainable Consumer Behavior Forecasting Using Dynamic Knowledge Graphs. In 2026 7th International Conference On Computational Vision and Bio Inspired Computing (ICCVBIC) (pp. 579-586). IEEE.
25. National Institute of Standards and Technology. (2024). Service mesh proxy models for cloud-native applications (NIST Special Publication 800-233).
26. National Institute of Standards and Technology. (2024). A data protection approach for cloud-native applications (NIST Interagency Report 8505).
27. National Institute of Standards and Technology. (2024). Guidelines for API protection for cloud-native systems (NIST Special Publication 800-228).
28. Gambo, M. L., & Almulhem, A. (2025). Zero Trust Architecture: A systematic literature review. arXiv.
29. Pigola, A., & De Souza Meirelles, F. (2025). Zero trust in cybersecurity: Managing critical challenges for effective implementation. Journal of Systems and Information Technology. Advance online publication.
30. Aitha, A. R., Pamisetty, V., & Recharla, M. (2026). Letter to the Editor re: “Implementation of deep learning for measurement of penile curvature on real 2D intraoperative images.” Journal of Pediatric Urology, 22(5), 106036. https://doi.org/10.1016/j.jpurol.2026.106036
31. Pigola, A., & Souza Meirelles, F. (2024). Unraveling trust management in cybersecurity: Insights from a systematic literature review. Information Technology and Management. Advance online publication.
32. National Institute of Standards and Technology. (2021). Zero trust networks. In 2020 cybersecurity and privacy annual report.
33. National Institute of Standards and Technology. (2023). A zero trust architecture model for access control in cloud-native applications in multi-cloud environments (NIST Special Publication 800-207A).
34. National Institute of Standards and Technology. (2020). Zero trust architecture: Initial public draft (NIST Special Publication 800-207).
35. National Institute of Standards and Technology. (2025). Implementing a Zero Trust Architecture: Practice guide (NIST Special Publication 1800-35).
Additional Files
Published
Data Availability Statement
None
Issue
Section
License
Copyright (c) 2026 Carlos Mendoza (Author)
This work is licensed under a Creative Commons Attribution 4.0 International License.
This work is licensed under a Creative Commons Attribution 4.0 International License (CC BY 4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original author(s) and source are credited.
