A Critical Review of Continuous Threat Exposure Management and Zero Trust Security in Cloud–IoT Ecosystems
Keywords:
Adaptive access control, Artificial intelligence-based cyber defense, Cloud–IoT security, Continuous threat exposure management, Threat exposure prediction, Zero trust securityAbstract
The rise in Cloud–Internet of Things (Cloud–IoT) infrastructure has greatly increased the exposure of organizations to cyber threats, with recent studies showing that over 68% of security breaches have originated from misconfigured cloud resources. Continuous Threat Exposure Management (CTEM) and Zero Trust Security (ZTS) models have been proposed to address these challenges; however, nearly 70% of current implementations are still detection-oriented rather than exposure-predictive. This critical review statistically evaluates current research on CTEM models, Zero Trust frameworks, and artificial intelligence-based cybersecurity solutions in multi-cloud and edge environments. A review of the literature suggests that less than 35% of current solutions have combined dynamic risk scoring with automated access control, while less than 25% of current solutions have allowed real-time adaptive policy enforcement. There is a great need for improvement in predictive threat exposure modelling, autonomous security orchestration, and continuous exposure mitigation in heterogeneous cloud–IoT infrastructures. The review identifies essential research goals in the development of an AI-based adaptive cyber defence framework that is predictive, intelligent, and continuously risk-driven in a Zero-Trust security paradigm.
References
S. Ji, S. Pan, E. Cambria, P. Marttinen, and P. S. Yu, “A survey on knowledge graphs: Representation, acquisition, and applications,” IEEE Transactions on Neural Networks and Learning Systems, vol. 33, no. 2, pp. 494–514, Feb. 2022.
S. Pan, R. Hu, G. Long, J. Jiang, L. Yao, and C. Zhang, “Adversarially regularized graph autoencoder for graph reasoning,” Proceedings of the 27th International Joint Conference on Artificial Intelligence, 2022, pp. 2609–2615.
M. Yasunaga, H. Ren, A. Bosselut, P. Liang, and J. Leskovec, “QA-GNN: Reasoning with language models and knowledge graphs for question answering,” Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies, Jun. 2021, pp. 535–546.
A. d’Avila Garcez and L. C. Lamb, “Neurosymbolic AI: The 3rd wave,” Artificial Intelligence Review, vol. 56, pp. 12387–12406, Mar. 2023.
R. Ghnemat, S. Alodibat, and Q. Abu Al-Haija, “Explainable Artificial Intelligence (XAI) for deep learning based medical imaging classification,” Journal of Imaging, vol. 9, no. 9, Aug. 2023.
L. Hu, Z. Liu, Z. Zhao, L. Hou, L. Nie, and J. Li, “A survey of knowledge enhanced pre-trained language models,” arXiv, Aug. 30, 2023.
M. Nickel, K. Murphy, V. Tresp, and E. Gabrilovich, “A review of relational machine learning for knowledge graphs,” Proceedings of the IEEE, vol. 104, no. 1, pp. 11–33, Jan. 2016.
L. Wu et al., “Graph neural networks for natural language processing: A survey,” Foundations and Trends in Machine Learning, vol. 16, no. 2, pp. 119–328, Jan. 2023.
T. Dash, S. Chitlangia, A. Ahuja, and A. Srinivasan, “A review of some techniques for inclusion of domain-knowledge into deep neural networks,” Scientific Reports, vol. 12, Jan. 2022.
B. Oğuz et al., “UniK-QA: Unified representations of structured and unstructured knowledge for open-domain question answering,” Findings of the Association for Computational Linguistics: NAACL 2022, Jan. 2022, pp. 1535–1546.
Z. Dai, Z. Yang, Y. Yang, J. Carbonell, Q. Le, and R. Salakhutdinov, “Transformer-XL: Attentive language models beyond a fixed-length context,” Proceedings of the 57th Annual Meeting of the Association for Computational Linguistics, Jul. 2019, pp. 2978–2988.
OpenAI, “GPT-4 Technical Report,” arXiv, Mar. 2023.
H. Touvron et al., “Llama 2: Open foundation and fine-tuned chat models,” arXiv, Jul. 2023.
