Published September 25, 2025 | Version v1
Preprint Open

The Adaptive Zero Trust Imperative (AZTI): Defending Against the AI-Enhanced Attacker

Authors/Creators

Description

Traditional Zero Trust (ZT) architectures are based on predefined policies and static rule sets.

However, the emergence of AI-enhanced attackers capable of automated reconnaissance, hyper-realistic social engineering, and adaptive lateral movement highlights a critical vulnerability in conventional ZT.

This paper therefore argues that a fundamental shift towards an adaptive Zero Trust approach is necessary. We propose an AI driven framework integrating anomaly detection, behavioural biometrics, and dynamic policy engines.

These components continuously learn and adjust access controls in real time based on adversarial behaviour. By making Zero Trust intelligent and proactive, organisations can counter the speed and sophistication of AI-powered threats.

Files

Cybersecurity_AI_ZeroTrust.pdf

Files (337.6 kB)

Name Size
md5:a63e52e788fd77c87908ef871bb9654d
337.6 kB Preview Download

Additional details

References

  • [1] J. Kindervag, "Build security into your network's DNA: The zero trust network architecture," Forrester Research, 2010.
  • [2] R. Ward and B. Beyer, "BeyondCorp: A new approach to enterprise security," ;login:, vol. 39, no. 6, pp. 6–11, 2014.
  • [3] International Organization for Standardization, "ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection — Information security management systems — Requirements," Standard, ISO, 2022.
  • [4] International Organization for Standardization, "ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements," Standard, ISO, 2019.
  • [5] European Union, "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)," Official Journal of the European Union, vol. L 119, pp. 1–88, 2016. [Online]. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679
  • [6] European Union, "Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive)," Official Journal of the European Union, vol. L 333, pp. 80–152, 2022. [Online]. Available: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32022L2555
  • [7] International Organization for Standardization, "ISO/IEC 27005:2022 Information security, cybersecurity and privacy protection — Guidance on managing information security risks," Standard, ISO, 2022.