Year: 2025
Type: article
Abstract: Microservices-based architectures have become increasingly prevalent due to their inherent scalability, modularity, and agility.However, their distributed nature introduces significant security challenges, as traditional API security mechanismssuch as OAuth 2.0, JWT, and API gatewayslargely rely on static authentication methods.These conventional approaches, while effective to an extent, contribute to performance overhead and often fail to keep pace with evolving cyber threats.Zero Trust Architecture (ZTA) offers a promising alternative by enforcing strict authentication and authorization for every API request.Yet, existing implementations of ZTA can degrade API performance due to the frequent execution of authentication procedures and complex policy validations.In this paper, we propose a performanceoptimized Zero Trust API security model specifically tailored for microservices environments.Our approach integrates a lightweight, token-less authentication mechanism, an optimized mutual TLS (mTLS) protocol, and dynamic policy enforcement embedded within Kubernetes-based service meshes.This model aims to Muzeeb
Author: Muzeeb Mohammad
Institution: Georgia Institute of Technology
Language: English
Topic: Access Control and Trust
Subfield: Sociology and Political Science
Field: Social Sciences
Domain: Social Sciences
Open Access status: diamond
OpenAlex ID: W4410707944