Zero Trust Security Architecture for Unified Communications in Distributed Enterprise Environments

Abstract

The growing use of UC and remote team members on cloud systems means that current security methods focused on the organization’s perimeter no longer work. Trusting everyone unconditionally, giving roles-based access and not seeing user behavior can lead to real dangers such as someone gaining access to a session without permission, hijacking a user’s authenticity or a danger from an insider. As a result, this paper offers the Zero Trust Security Architecture (ZTSA) to ensure identity verification is always on, analyze user behaviors and manage real-time context-based access permissions for all UC services. To propose the best possible architecture, a modular framework has been used, integrating Identity Providers, Policy Decision Points, Trust Engines, Adaptive Learning Modules and Policy Enforcement Points, all cooperating to assess session legitimacy in real-time. Telemetry, micro-segmentation and predictive analysis are all used to set access permissions according to each device’s condition, activities and the surrounds. Experimental results demonstrate that the ZTSA framework greatly enhances system protection and makes decisions faster, as its access decision accuracy is 96.8% against 71.3% for the standard systems, with 34.2 milliseconds of latency in policy update. Besides, memory stays intact more, with a behavior downgrade score of 0.14 while using our model which is much better than the baseline’s 0.39. The test demonstrates that the ZTSA method is able to safeguard modern UC systems without lowering the organization’s operations, so it is a good fit for future deployment in enterprises.