AI-Driven Dynamic Trust in Zero Trust Architecture: A Systematic Literature Review of Machine Learning, Federated Learning and Governance Challenges
DOI:
https://doi.org/10.63158/journalisi.v8i5.1815Keywords:
Zero Trust Architecture, artificial intelligence, machine learning, dynamic trust scoring, federated learningAbstract
Sophisticated cyber threats have exposed the limits of perimeter-based security models, and Zero Trust Architecture (ZTA) has increasingly been adopted as an alternative paradigm. Purpose: This Systematic Literature Review examines the integration of Artificial Intelligence (AI) and Machine Learning (ML) within Zero Trust frameworks, covering dynamic trust scoring, behavioural analytics and federated learning, the latter treated as one strand of AI rather than a separate paradigm. Following PRISMA 2020, 22 studies published between 2022 and 2025 were identified across IEEE Xplore, ACM Digital Library, SpringerLink, MDPI and Nature/Scientific Reports, appraised against a five-criterion quality instrument and synthesised narratively. The studies included are few and heterogeneous, and their findings should be read accordingly. Ensemble and hybrid designs predominate (14 of 22). Twelve studies report quantitative results, of which only eight evaluate on real named datasets; reported accuracies of 95 to 99 per cent come from different datasets, tasks, threat models, and evaluation settings, and are neither directly comparable nor a field-level benchmark. Only three studies directly compare learned adaptive trust against a static rule-based baseline. No study reports live operational deployment. We identify thirteen technique categories, eleven implementation barriers, and seven emerging trends. This paper proposes an integrated eight-component framework for AI-driven dynamic trust management, along with a five-domain research agenda. The framework is conceptual and synthesis-derived and requires empirical validation before operational use.
Downloads
References
[1] B. D. Lund, T. H. Lee, Z. Wang, T. Wang, and N. R. Mannuru, “Zero Trust Cybersecurity: Procedures and Considerations in Context,” Encyclopedia, vol. 4, no. 4, pp. 1520–1533, Dec. 2024, doi: 10.3390/encyclopedia4040099.
[2] N. F. Syed, S. W. Shah, A. Shaghaghi, A. Anwar, Z. Baig, and R. Doss, “Zero Trust Architecture (ZTA): A Comprehensive Survey,” IEEE Access, vol. 10, pp. 57143–57179, 2022, doi: 10.1109/ACCESS.2022.3174679.
[3] C. Liu et al., “Dissecting Zero Trust: Research Landscape and Its Implementation in IoT,” Cybersecurity, vol. 7, no. 1, p. 20, 2024, doi: 10.1186/s42400-024-00212-0.
[4] A. Dube, B. Mpande, F. Dzehonye, and T. Chazuza, “Zero Trust Architecture: Redefining Security,” in Lecture Notes in Networks and Systems, Springer Nature Switzerland, 2026, pp. 26-39, doi: 10.1007/978-3-032-20533-9.
[5] S. Rose, O. Borchert, S. Mitchell, and S. Connelly, "Zero Trust Architecture," National Institute of Standards and Technology, Gaithersburg, MD, NIST SP 800-207, Aug. 2020. doi: 10.6028/NIST.SP.800-207
[6] M. Moyo, B. Ndlovu, M. Moyo, and T. Siwela, "AI-Driven Intrusion Detection Systems: Algorithms, Key Applications, Efficacy, Opportunities and Ethical Implications," in Advances in Micro-Electronics, Embedded Systems and IoT. Lecture Notes in Electrical Engineering, vol. 1600. Springer, Cham, 2026, doi: 10.1007/978-3-032-20533-9_4
[7] K. L. Chizengwe and B. Ndlovu, "A Systematic Review of Agentic AI for Threat Detection and Mitigation in 5G Networks," J. Inf. Syst. Informatics, vol. 8, pp. 315–354, 2026, doi: 10.63158/journalisi.v8i1.1382.
[8] F. A. Qazi, “Study of Zero Trust Architecture for Applications and Network Security,” in Proc. IEEE 19th Int. Conf. Smart Communities: Improving Quality of Life Using ICT, IoT and AI (HONET), 2022. doi: 10.1109/HONET56683.2022.10019186.
[9] N. Kashyap, V. Kumar, and D. Baweja, “Zero Trust Architecture: Evaluating its Impact on Modern Information Security,” Institute of Electrical and Electronics Engineers (IEEE), Jan. 2026, pp. 1–6. doi: 10.1109/iccica67008.2025.11337489.
[10] D. Ajish, “The significance of artificial intelligence in zero trust technologies: a comprehensive review,” J. Electr. Syst. Inf. Technol., vol. 11, no. 1, 2024, doi: 10.1186/s43067-024-00155-z.
[11] E. S. Hosney, I. T. A. Halim, and A. H. Yousef, “An Artificial Intelligence Approach for Deploying Zero Trust Architecture (ZTA),” in Proc. 5th Int. Conf. Computing and Informatics (ICCI), 2022. doi: 10.1109/ICCI54321.2022.9756117.
[12] A. I. Weinberg, “Zero Trust Implementation in the Emerging Technologies Era: A Survey,” Complex Eng. Syst., vol. 4, p. 16, 2024, doi: 10.20517/ces.2024.41.
[13] M. Rahmati and A. Pagano, “Federated Learning-Driven Cybersecurity Framework for IoT Networks with Privacy Preserving and Real-Time Threat Detection Capabilities,” Informatics, vol. 12, no. 3, Sep. 2025, doi: 10.3390/informatics12030062.
[14] W. W. Lo, S. Layeghy, M. Sarhan, and M. Portmann, “Online Self-Supervised Deep Learning for Intrusion Detection Systems,” IEEE Trans. Inf. Forensics Secur., 2024, doi: 10.1109/TIFS.2024.3402148.
[15] B. Ndlovu, "AI-Driven Intrusion Detection in Healthcare Systems: A Systematic Review of Techniques, Evaluation Practices and Deployment Readiness, with a Reusable Assessment Framework," vol. 3, pp. 1–38, 2026, doi: 10.63158/IJAIS.v3i1.58.
[16] J. L. Hernandez-Ramos et al., “Intrusion Detection Based on Federated Learning: A Systematic Review,” Jul. 12, 2025, Association for Computing Machinery. doi: 10.1145/3731596.
[17] A. Vyas, P.-C. Lin, R.-H. Hwang, and M. Tripathi, “Privacy-Preserving Federated Learning for Intrusion Detection in IoT Environments: A Survey,” IEEE Access, vol. 12, pp. 127018-127050, 2024, doi: 10.1109/ACCESS.2024.3454211.
[18] C.-J. Chew, P.-Y. Wang, and J.-S. Lee, “Behavioural Analysis Zero-Trust Architecture Relying on Adaptive Multifactor and Threat Determination,” KSII Trans. Internet Inf. Syst., vol. 17, no. 9, pp. 2529–2549, 2023, doi: 10.3837/tiis.2023.09.012.
[19] V. Maphosa, “An overview of cybersecurity in Zimbabwe’s financial services sector,” F1000Research, vol. 12, p. 1251, 2024, doi: 10.12688/f1000research.132823.2.
[20] C. M. Mukwaira, Y. Chigariro, and B. Ndlovu, "An Integrated Cybersecurity Governance Ecosystem for Healthcare: A Quality-Appraised Systematic Review of Governance, Risk, and Compliance Frameworks for AI, Cloud, and Connected Health Technologies," vol. 13, pp. 617–636, 2026, doi: 10.15294/sji.v13i3.49854.
[21] D. Moher, A. Liberati, J. Tetzlaff, and D. G. Altman, “Preferred Reporting Items for Systematic Reviews and Meta-Analyses: The PRISMA Statement,” PLoS Med., vol. 6, no. 7, p. e1000097, 2009, doi: 10.1371/journal.pmed.1000097.
[22] M. J. Page and others, “The PRISMA 2020 Statement: An Updated Guideline for Reporting Systematic Reviews,” BMJ, vol. 372, p. n71, 2021, doi: 10.1136/bmj.n71.
[23] K. Maguraushe and B. M. Ndlovu, “The Use of Smart Technologies for Enhancing Palliative Care: A Systematic Review,” Digit. Heal., vol. 10, p. 20552076241271836, 2024, doi: 10.1177/20552076241271835.
[24] J. R. Meyers, A. D. Thompson, M. L. Greene, S. K. Roberts, and C. James, “AI-Based Continuous Authentication in Zero Trust Environments,” Jun. 2025.
[25] P. Selvaprasanth, “Artificial Intelligence-Driven Access Control for Resilient Security Frameworks in Cloud-Native Environments,” 2025.
[26] M. Mangla, “Integrating Machine Learning with Zero Trust Principles for Real-Time Threat Detection and Response,” Iconic Res. Eng. Journals, vol. 7, no. 9, pp. 564–575, Mar. 2024.
[27] S. N. Prajwalasimha, A. Pimpalkar, N. Shelke, and D. K. J. B. Saini, “Zero Trust Architectures Empowered by AI: A Paradigm Shift in Cloud and Edge Cybersecurity,” in Proceedings of 3rd International Conference on Sustainable Computing and Data Communication Systems, ICSCDS 2025, Institute of Electrical and Electronics Engineers Inc., 2025, pp. 328–335. doi: 10.1109/ICSCDS65426.2025.11166875.
[28] L. Bradatsch, O. Miroshkin, N. Trkulja, and F. Kargl, “Zero Trust Score-based Network-level Access Control in Enterprise Networks,” in 2023 IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2023, pp. 1422–1429. doi: 10.1109/TrustCom60117.2023.00194.
[29] S. Munasinghe, N. Piyarathna, E. Wijerathne, U. Jayasinghe, and S. Namal, “Machine Learning Based Zero Trust Architecture for Secure Networking,” in 2023 IEEE 17th International Conference on Industrial and Information Systems, ICIIS 2023 - Proceedings, Institute of Electrical and Electronics Engineers Inc., 2023, pp. 365–370. doi: 10.1109/ICIIS58898.2023.10253610.
[30]X. Cao, Z. Chen, M. Yang, X. Wang, and X. Wu, “Zero Trust-Based Dynamic and Continuous Access Control for Mobile Devices,” in Proc. IEEE 24th Int. Conf. Trust, Security and Privacy in Computing and Communications (TrustCom), 2025. doi: 10.1109/Trustcom66490.2025.00344.
[31] A. Shrivastava et al., “Tackling Cyber Espionage in Critical Energy Sectors Using AI-Driven Zero Trust Systems,” Institute of Electrical and Electronics Engineers (IEEE), Dec. 2025, pp. 355–359. doi: 10.1109/inspire67328.2025.11300601.
[32] H. Rehan, “Zero-Trust Architecture for Securing Multi-Cloud Environments,” Cybersecurity Netw. Def. Res., vol. 2, no. 2, pp. 236–273, 2022.
[33] D. Lina and L. Jiannan, “A Multi-Layered Cybersecurity Framework for Smart Campuses: Integrating Blockchain, AI, Zero Trust Architecture, and Digital Twins,” in 2025 IEEE 3rd International Conference on Control, Electronics and Computer Technology, ICCECT 2025, Institute of Electrical and Electronics Engineers Inc., 2025, pp. 11–14. doi: 10.1109/ICCECT64621.2025.11339781.
[34] A. Dalal, “Designing Zero Trust Security Models to Protect Distributed Networks and Minimize Cyber Risks,” Int. J. Manag. Technol. Eng., vol. 11, no. 11, pp. 142–164, 2025.
[35] A. A. Laghari et al., “A novel and secure artificial intelligence enabled zero trust intrusion detection in industrial internet of things architecture,” Sci. Rep., vol. 15, no. 1, pp. 1–15, 2025, doi: 10.1038/s41598-025-11738-9.
[36] M. Nagarajan, G. G. Devarajan, M. S. Thangakrishnan, T. V. Ramana, A. K. Bashir, and A. A. AlZubi.,“Artificial Intelligence Based Zero Trust Security Approach for Consumer Industry,” IEEE Trans. Consum. Electron., vol. PP, p. 1, Aug. 2024, doi: 10.1109/TCE.2024.3412772.
[37] F. Nawshin, D. Unal, M. Hammoudeh, and P. Suganthan, “AI-powered malware detection with Differential Privacy for zero trust security in Internet of Things networks,” Ad Hoc Networks, vol. 161, p. 103523, Apr. 2024, doi: 10.1016/j.adhoc.2024.103523.
[38] D. Javeed, M. S. Saeed, M. Adil, P. Kumar, and A. Jolfaei, “A federated learning-based zero trust intrusion detection system for Internet of Things,” Ad Hoc Networks, vol. 162, p. 103540, 2024, doi: 10.1016/j.adhoc.2024.103540.
[39] H. Xie, Y. Wang, Y. Ding, C. Yang, H. Liang, and B. Qin, “Industrial Wireless Internet Zero Trust Model: Zero Trust Meets Dynamic Federated Learning with Blockchain,” Wirel. Commun., vol. 31, no. 2, pp. 22–29, Apr. 2024, doi: 10.1109/MWC.001.2300368.
[40] M. Hussain, S. Pal, Z. Jadidi, E. Foo, and S. Kanhere, “Federated Zero Trust Architecture using Artificial Intelligence,” IEEE Wirel. Commun., vol. 31, no. 2, pp. 30–35, 2024, doi: 10.1109/MWC.001.2300405.
[41] S. R. Pokhrel, L. Yang, S. Rajasegarar, and G. Li, “Robust Zero Trust Architecture: Joint Blockchain based Federated learning and Anomaly Detection based Framework,” in Proceedings of the SIGCOMM Workshop on Zero Trust Architecture for Next Generation Communications, in ZTA-NextGen ’24. New York, NY, USA: Association for Computing Machinery, 2024, pp. 7–12. doi: 10.1145/3672200.3673878.
[42] K. Ramezanpour and J. Jagannath, “Intelligent zero trust architecture for 5G/6G networks: Principles, challenges, and the role of machine learning in the context of O-RAN,” Comput. Networks, vol. 217, p. 109358, 2022, doi: 10.1016/j.comnet.2022.109358.
[43] E. Jeong and D. Yang, “A Trust Score-Based Access Control Model for Zero Trust Architecture: Design, Sensitivity Analysis, and Real-World Performance Evaluation,” 2025. doi: 10.3390/app15179551.
[44] A. Hassan, A. Rauf, N. Shafqat, R. Latif, and H. Khan, “ZenGuard: A Machine Learning-Based Zero Trust Framework for Context-Aware Threat Mitigation Using SIEM, SOAR, and UEBA,” Sci. Rep., vol. 15, p. 35871, 2025, doi: 10.1038/s41598-025-20998-4.
[45] C. Xu, X. Du, L. Li, X. Li, and H. Yu, “End-Edge Collaborative Lightweight Secure Federated Learning for Anomaly Detection of Wireless Industrial Control Systems,” IEEE Open J. Ind. Electron. Soc., vol. PP, pp. 1–11, Jan. 2024, doi: 10.1109/OJIES.2024.3370496.
[46] H. Sedjelmaci, K. Tourki, and N. Ansari, “Enabling 6G Security: The Synergy of Zero Trust Architecture and Artificial Intelligence,” IEEE Netw., vol. PP, p. 1, Jan. 2023, doi: 10.1109/MNET.2023.3326003.
[47] F. M. Dandure and B. Ndlovu, "Federated Learning for Privacy-Preserving Sentiment Analysis in Distributed Electronic Health Record Environments: A Systematic Literature Review," J. Inf. Syst. Informatics, vol. 8, pp. 1812–1842, 2026, doi: 10.63158/journalisi.v8i2.1546.
[48] V. M. Zanpure, “Improving Zero Trust Architecture with Machine Learning: Automatic Threat Detection Using Network Traffic Analysis,” in Proc. 2nd Int. Conf. Research Methodologies in Knowledge Management, Artificial Intelligence and Telecommunication Engineering (RMKMATE), 2025. doi: 10.1109/RMKMATE64874.2025.11042837.
[49] I. Stankov, “Comparing Azure Sentinel and ML-Extended Solutions Applied to a Zero Trust Architecture,” in Proc. 32nd National Conf. with International Participation (TELECOM), 2024. doi: 10.1109/TELECOM63374.2024.10812246.
[50] H. Teymourlouei, “A Machine Learning Approach to the Evaluation of Zero Trust Compliance in Network Infrastructure,” in International Conference on Electrical, Computer, Communications and Mechatronics Engineering, ICECCME 2023, Institute of Electrical and Electronics Engineers Inc., 2023. doi: 10.1109/ICECCME57830.2023.10253205.
[51] A. A. Hossain and D. Ahner, “Game Theory–Driven AI for Zero Trust Security,” in 2025 2nd International Conference on Artificial Intelligence, Metaverse, and Cybersecurity (ICAMAC), IEEE, Oct. 2025, pp. 1–6. doi: 10.1109/ICAMAC67779.2025.11398547.
[52] S. Alnoaimi and A. Alomary, “Zero Trust Security: A Comprehensive Comparative Analysis of Zero Trust Maturity Models,” in 2nd International Conference on IT Innovations and Knowledge Discovery, ITIKD 2024, Institute of Electrical and Electronics Engineers Inc., 2025. doi: 10.1109/ITIKD63574.2025.11005097.
[53] D. Narasappa, “Integrating Zero Trust Architecture with Automation and Analytics for Resilient Cybersecurity,” in Proc. 3rd Int. Conf. Data Science and Network Security (ICDSNS), 2025. doi: 10.1109/ICDSNS65743.2025.11168551.
[54] S. Bai, W. Sheng, Y. Shang, G. Wang, L. Zhou, and L. Sun, “Research on Information Security Protection System of Distribution Network Based on Zero Trust Architecture,” in Proc. IEEE Int. Conf. Energy Internet (ICEI), 2024. doi: 10.1109/ICEI63732.2024.10917171.
[55] G. Muriithi et al., “Zero Trust Architecture for Electric Transportation Systems: A Systematic Survey and Deep Learning Framework for Replay Attack Detection,” IEEE Open J. Veh. Technol., vol. 6, pp. 2171–2194, 2025, doi: 10.1109/OJVT.2025.3592041.
[56] A. Barredo Arrieta and others, “Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AI,” Inf. Fusion, vol. 58, pp. 82–115, 2020, doi: 10.1016/j.inffus.2019.12.012.
[57] National Institute of Standards and Technology, “Artificial Intelligence Risk Management Framework (AI RMF 1.0),” Jan. 2023. doi: 10.6028/NIST.AI.100-1.
[58] B. Ndlovu and K. Maguraushe, “Balancing Ethics and Privacy in the Use of Artificial Intelligence in Institutions of Higher Learning: A Framework for Responsive AI Systems,” IJIE (Indonesian J. Informatics Educ.), vol. 9, no. 1, p. 39, 2025, doi: 10.20961/ijie.v9i1.100723.
[59] T. Kapuya, W. Kubiku, M. Dube, and T. Mukudu, “Ethical AI Frameworks: Balancing Privacy, Consent and Responsible Use,” 7th European Conference on Industrial Engineering and Operations Management, Augsburg, Germany, July 16-18, 2024, doi: 10.46254/EU07.20240168.
[60] A. Maramba and B. Ndlovu, “AI-Driven Threat and Incident Detection in Healthcare Cybersecurity: A Stacked Ensemble Model,” in 2025 4th Zimbabwe Conf. Information and Communication Technology, 2025, pp. 1-9, doi: 10.1109/ZCICT67553.2025.11602039.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Journal of Information Systems and Informatics
This work is licensed under a Creative Commons Attribution 4.0 International License.
Author's Declaration
- The Authors certify that they have read, understood, and agreed to the Journal of Information Systems and Informatics (JournalISI) submission guidelines, policies, and submission declaration. The submission has been prepared using the provided template.
- The Authors certify that all authors have approved the publication of this manuscript and that there is no conflict of interest.
- The Authors confirm that the manuscript is their original work, has not received prior publication, is not under consideration for publication elsewhere, and has not been previously published.
- The Authors confirm that all authors listed on the title page have contributed significantly to the work, have read the manuscript, attest to the validity and legitimacy of the data and its interpretation, and agree to its submission.
- The Authors confirm that the manuscript is not copied from or plagiarized from any other published work.
- The Authors declare that the manuscript will not be submitted for publication in any other journal or magazine until a decision is made by the journal editors.
- If the manuscript is finally accepted for publication, the Authors confirm that they will either proceed with publication immediately or withdraw the manuscript in accordance with the journal’s withdrawal policies.
- The Authors agree that, upon publication of the manuscript in this journal, they transfer copyright or assign exclusive rights to the publisher, including commercial rights
