Research Article
Policy Design in Zero-Trust Distributed Networks: Challenges and Solutions
@INPROCEEDINGS{10.1007/978-3-032-44094-5_17, author={Fannya R. Sandjaja and Ayesha A. Majeed and Abdullah Abdullah and Gyan Wickremasinghe and Karen Rafferty and Vishal Sharma}, title={Policy Design in Zero-Trust Distributed Networks: Challenges and Solutions}, proceedings={Industrial Networks and Intelligent Systems. 12th EAI International Conference, INISCOM 2026, Da Nang, Vietnam, February 26--27, 2026, Proceedings}, proceedings_a={INISCOM}, year={2026}, month={11}, keywords={Zero-Trust Agentic AI Policy design Security Formal verification}, doi={10.1007/978-3-032-44094-5_17} }- Fannya R. Sandjaja
Ayesha A. Majeed
Abdullah Abdullah
Gyan Wickremasinghe
Karen Rafferty
Vishal Sharma
Year: 2026
Policy Design in Zero-Trust Distributed Networks: Challenges and Solutions
INISCOM
Springer
DOI: 10.1007/978-3-032-44094-5_17
Abstract
Traditional security architectures are becoming more vulnerable to distributed attacks due to significant dependence on trust. This will further escalate when implementing agentic AI within the systems, as more components must be secured over a similar distributed space. These scenarios can be observed in consumer technologies, such as the dense Internet of things (IoT). Here, zero-trust architecture (ZTA) can be seen as a potential solution, which relies on a key principle of not giving users explicit trust, instead always verifying their privileges whenever a request is made. However, the overall security in ZTA is managed through its policies, and unverified policies can lead to unauthorized access. Thus, this paper explores challenges and solutions for ZTA policy design in the context of distributed networks, which is referred to as zero-trust distributed networks (ZTDN). This is followed by a case study on formal verification of policies using UPPAAL. Subsequently, the importance of accountability and responsibility in the system’s security is discussed.