AI-Driven Intrusion Detection and Threat Mitigation in Zero Trust Architectures

Authors

Ehigiator Egho-Promise
QA Higher Education, Manchester, United Kingdom
Udoh Ekereuke
QA Higher Education, London, United Kingdom
Edita Gashi
QA Higher Education, London, United Kingdom
George Asante
Akenten Appiah-Menka University of Skills Training and Entrepreneurial Development, Kumasi, Ghana.
DOI: https://doi.org/10.52549/ijeei.v14i1.7706
Download PDF
Published: 26-03-2026 • Issue: Vol. 14 No. 1: March 2026 • Section: Regular paper

Abstract

This study explores the role of blending Artificial Intelligence (AI) with Zero Trust Architecture (ZTA) to boost Cybersecurity through a solid Intrusion Detection System (IDS). Using a design science and postpositivist approach, the research crafts and assesses AI-driven IDS models such as Decision Tree, Random Forest, Long Short-Term Memory (LSTM), and Transformer by leveraging the University of New South Wales - Network Benchmark 2015 ( UNSW-NB15) dataset within a simulated ZTA environment. The study evaluates how well these models perform based on metrics like accuracy, precision, recall, and F1-score to pinpoint the best architecture for spotting both insider and external threats. The results show that the Transformer-based IDS outshines the others with an impressive 99.2% accuracy rate, proving its exceptional ability in real-time anomaly detection and threat classification. These findings highlight that merging deep learning with ZTA’s identity-based access control significantly boosts network resilience and helps reduce lateral movement threats. This research presents an innovative AI-ZTA integrated model designed for proactive, adaptive, and scalable cybersecurity defense. It also offers valuable insights for organizations aiming to strengthen digital trust and policy frameworks in the face of increasingly sophisticated cyber threats.
Keywords: Artificial Intelligence; Zero Trust Architecture; Intrusion Detection System; Deep Learning; Cybersecurity; Transformer Model.

References

J. Kindervag, "Build security into your network’s DNA: The zero trust network architecture," Forrester Research Inc., 2010.

S. Rose, O. Borchert, S. Mitchell, and S. Connelly, Zero Trust Architecture, Nat. Inst. Stand. Technol., Gaithersburg, MD, USA, NIST Spec. Publ. 800-207, Aug. 2020.

M. Scott, S. Lamber, and D. Liebe, Zero Trust Networks: Building Secure Systems in Untrusted Networks. O'Reilly Media, 2021.

A. Mohammad, H. Al-Refai, and N. Alrefai, "A comparative analysis of machine learning algorithms for intrusion detection in cloud computing," J. Cybersecurity Privacy, vol. 3, no. 1, pp. 1–15, 2023.

R. Gupta, S. Tanwar, N. Kumar, and S. Tyagi, "Machine learning and deep learning for zero-trust-based security frameworks: A survey," J. Netw. Comput. Appl., vol. 198, p. 103273, 2022.

A. Khraisat, I. Gondal, P. Vamplew, and J. Kamruzzaman, "Survey of intrusion detection systems: techniques, datasets, and challenges," Cybersecurity, vol. 2, no. 1, pp. 1–22, 2019.

D. H. Le, H. A. Tran, and H. L. Le, "A deep learning-based approach for zero-day attack detection in a trust environment," Comput. Secur., vol. 113, p. 102537, 2022.

A. Alshamrani, S. Myneni, A. Chowdhary and D. Huang, "A Survey on Advanced Persistent Threats: Techniques, Solutions, Challenges, and Research Opportunities," in IEEE Communications Surveys & Tutorials, vol. 21, no. 2, pp. 1851-1877, 2019, doi: 10.1109/COMST.2019.2891891.

N. Gupta, V. Jindal, and P. Bedi, "A Survey on Intrusion Detection and Prevention Systems," SN Computer Science, vol. 4, art. 439, Jun. 2023, doi: 10.1007/s42979-023-01926-7.

K. DeMedeiros, A. Hendawi, and M. Alvarez, "A Survey of AI-Based Anomaly Detection in IoT and Sensor Networks," Sensors, vol. 23, no. 3, p. 1352, Jan. 2023, doi: 10.3390/s23031352.

M. Ahmed, A. N. Mahmood, and J. Hu, "A survey of network anomaly detection techniques," J. Netw. Comput. Appl., vol. 60, pp. 19–31, 2016.

W. Wang, M. Zhu, X. Zeng, X. Ye, and Y. Sheng, "Malware traffic classification using a convolutional neural network for representation learning," in Proc. Int. Conf. Inf. Netw. (ICOIN), 2017.

G. Kim, S. Lee, and S. Kim, "A novel hybrid intrusion detection method integrating anomaly detection with misuse detection," Expert Syst. Appl., vol. 169, p. 114470, 2021.

I. Sharafaldin, A. H. Lashkari, and A. A. Ghorbani, "Toward generating a new intrusion detection dataset and intrusion traffic characterization," in Proc. 4th Int. Conf. Inf. Syst. Secur. Privacy (ICISSP), 2018.

Y. Mirsky, T. Doitshman, Y. Elovici, and A. Shabtai, "Kitsune: An ensemble of autoencoders for online network intrusion detection," in Proc. Netw. Distrib. Syst. Secur. Symp. (NDSS), 2018.

N. Saxena, E. Hayes, E. Bertino, P. Ojo, K. K. R. Choo, and P. Burnap, "A comprehensive survey of cybersecurity threats, attacks, and effective countermeasures for industrial cyber-physical systems," ACM Comput. Surv., 2022.

M. Ring, S. Wunderlich, D. Grüdl, D. Landes, and A. Hotho, "Flow-based benchmark data sets for intrusion detection," in Proc. 16th Int. Joint Conf. e-Bus. Telecommun. (ICETE), 2019.

C. Rudin, "Stop explaining black box machine learning models for high-stakes decisions and use interpretable models instead," Nat. Mach. Intell., vol. 1, no. 5, pp. 206–215, May 2019.

E. I. Egho-Promise, G. Asante, H. Balisane, A. Salih, F. Aina, H. Kure, and E. K. Gavua, "Leveraging Artificial Intelligence for Predictive CyberSecurity: Enhancing Threat Forecasting and Vulnerability Management," International Journal of Innovative Research in Advanced Engineering, vol. 12, no. 2, pp. 68–79, 2025.

A. N. Kalejaiye and J. A. Shonubi, "Zero trust enforcement using microsegmentation, identity-aware proxies, and continuous adaptive risk assessment in multi-tenant cloud environments," Int. J. Comput. Appl. Technol. Res., vol. 14, no. 7, pp. 61–77, 2025.

B. Bhushan, P. R. Rajgopal, and K. Sharma, "An intent-aware zero trust identity architecture for unifying human and machine access," EuroLexis Research Index Library for Open Access Journals, 2025.

P. R. Nangi, C. K. R. N. Obannagari, and S. Settipi, "A multi-layered zero-trust security framework for cloudnative and distributed enterprise systems using AI-driven identity and access intelligence," Int. J. Emerg. Trends Comput. Sci. Inf. Technol., vol. 4, no. 3, pp. 144–153, 2023.

A. Uusiheimala, "Advanced threat detection through Snort integration: A study of IDS/IPS implementation at an institute of higher education," 2025.

T. Wei, Z. Duan, and P. Xie, "The multi-dimensional assessment and dynamic evolution of the energy trilemma in China," Environ. Impact Assess. Rev., vol. 114, p. 107914, 2025.

Y. Ben Mustapha, H. Debar, and G. Blanc, "Policy enforcement point model," in Proc. Int. Conf. Security and Privacy in Communication Systems, Cham, Switzerland: Springer, Sep. 2014, pp. 278–286.

A. Khan, P. Sharma, and G. Adrian, "Policy enforcement and authentication strategies in zero-trust architectures," Dec. 2017.

H. Zhang, L. Zhang, and Y. Jiang, "Overfitting and underfitting analysis for deep learning based end-to-end communication systems," in Proc. 11th Int. Conf. Wireless Commun. Signal Process. (WCSP), 2019, pp. 1–6.

N. Ghaffari Laleh et al., "Adversarial attacks and adversarial robustness in computational pathology," Nat. Commun., vol. 13, no. 1, p. 5711, 2022. [29] [S. H. Silva and P. Najafirad, "Opportunities and challenges in deep learning adversarial robustness: A survey," arXiv preprint arXiv:2007.00753, 2020.

Author Biographies

Ehigiator Egho-Promise
Lecturer in Computing (including Tech. Lab) Department of Computing
Udoh Ekereuke
Associate Dean(Ulster) & Head of Department (Computing)
Edita Gashi
Associate Dean(LSS) & Head of Department(Computing) London Metropolitan, Solent and Swansea University Partnership
George Asante
Senior Lecturer, Department of Information Technology Education

How to Cite

[1]
E. Egho-Promise, U. Ekereuke, E. Gashi, and G. Asante, “AI-Driven Intrusion Detection and Threat Mitigation in Zero Trust Architectures”, IJEEI, vol. 14, no. 1, pp. 211–227, Mar. 2026, doi: 10.52549/ijeei.v14i1.7706.