{"id":"https://openalex.org/W7148628079","doi":"https://doi.org/10.71465/ajbd3656","title":"LLM-Assisted Zero-Trust Policy Generation: A Dynamic Approach Integrating SBOM and Runtime Telemetry for Microservices","display_name":"LLM-Assisted Zero-Trust Policy Generation: A Dynamic Approach Integrating SBOM and Runtime Telemetry for Microservices","publication_year":2026,"publication_date":"2026-03-25","ids":{"openalex":"https://openalex.org/W7148628079","doi":"https://doi.org/10.71465/ajbd3656"},"language":"en","primary_location":{"id":"doi:10.71465/ajbd3656","doi":"https://doi.org/10.71465/ajbd3656","is_oa":true,"landing_page_url":"https://doi.org/10.71465/ajbd3656","pdf_url":"https://australiansciencejournals.com/bigdata/article/download/3656/4569","source":{"id":"https://openalex.org/S5407050933","display_name":"American Journal Of Big Data","issn_l":"2688-9994","issn":["2688-9994"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"American Journal Of Big Data","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://australiansciencejournals.com/bigdata/article/download/3656/4569","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123834288","display_name":"Daoquan Zhou","orcid":"https://orcid.org/0009-0004-2956-7067","observed_orcids":["https://orcid.org/0009-0004-2956-7067"]},"institutions":[{"id":"https://openalex.org/I185649097","display_name":"New England College","ror":"https://ror.org/059aewc73","country_code":"US","type":"education","lineage":["https://openalex.org/I185649097"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Daoquan Zhou","raw_affiliation_strings":["Information Technology Program Management (ITPM), New England College, Henniker, NH 03242, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Program Management (ITPM), New England College, Henniker, NH 03242, USA","institution_ids":["https://openalex.org/I185649097"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5123834288"],"corresponding_institution_ids":["https://openalex.org/I185649097"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":"1","first_page":"212","last_page":"228"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.79830002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.79830002784729,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.06310000270605087,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.041200000792741776,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/zero-trust-architecture","display_name":"zero-trust architecture","score":0.8899999856948853},{"id":"https://openalex.org/keywords/policy-generation","display_name":"policy generation","score":0.6169999837875366},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.902999997138977},{"id":"https://openalex.org/keywords/microservices-security","display_name":"microservices security","score":0.8330000042915344},{"id":"https://openalex.org/keywords/software-bill-of-materials","display_name":"software bill of materials","score":0.9089999794960022},{"id":"https://openalex.org/keywords/ebpf","display_name":"eBPF","score":0.9959999918937683},{"id":"https://openalex.org/keywords/software-supply-chain-security","display_name":"software supply chain security","score":0.722000002861023},{"id":"https://openalex.org/keywords/software-vulnerabilities","display_name":"software vulnerabilities","score":0.5329999923706055},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.6449999809265137},{"id":"https://openalex.org/keywords/kubernetes","display_name":"Kubernetes","score":0.8090000152587891},{"id":"https://openalex.org/keywords/cloud-native-security","display_name":"cloud-native security","score":0.5709999799728394}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8295999765396118},{"id":"https://openalex.org/C2778505942","wikidata":"https://www.wikidata.org/wiki/Q18344624","display_name":"Microservices","level":3,"score":0.7027999758720398},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.5733000040054321},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5293999910354614},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48649999499320984},{"id":"https://openalex.org/C2780870223","wikidata":"https://www.wikidata.org/wiki/Q1004415","display_name":"Runtime system","level":2,"score":0.45500001311302185},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.44749999046325684},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.4009999930858612},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.39169999957084656},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.34850001335144043},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.3458999991416931},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.32600000500679016},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.314300000667572},{"id":"https://openalex.org/C2776397876","wikidata":"https://www.wikidata.org/wiki/Q1450531","display_name":"Cyberinfrastructure","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C2776834041","wikidata":"https://www.wikidata.org/wiki/Q25346349","display_name":"Execution model","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C174683762","wikidata":"https://www.wikidata.org/wiki/Q609588","display_name":"Component-based software engineering","level":4,"score":0.27790001034736633},{"id":"https://openalex.org/C76518257","wikidata":"https://www.wikidata.org/wiki/Q271680","display_name":"Software framework","level":5,"score":0.27630001306533813},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C179603123","wikidata":"https://www.wikidata.org/wiki/Q1941921","display_name":"Modeling language","level":3,"score":0.25920000672340393},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2581000030040741},{"id":"https://openalex.org/C67388219","wikidata":"https://www.wikidata.org/wiki/Q207440","display_name":"Hash table","level":3,"score":0.2551000118255615},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.25459998846054077},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.25270000100135803},{"id":"https://openalex.org/C200749887","wikidata":"https://www.wikidata.org/wiki/Q1165574","display_name":"System monitoring","level":2,"score":0.2515000104904175},{"id":"https://openalex.org/C52723943","wikidata":"https://www.wikidata.org/wiki/Q1127410","display_name":"Serialization","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.71465/ajbd3656","doi":"https://doi.org/10.71465/ajbd3656","is_oa":true,"landing_page_url":"https://doi.org/10.71465/ajbd3656","pdf_url":"https://australiansciencejournals.com/bigdata/article/download/3656/4569","source":{"id":"https://openalex.org/S5407050933","display_name":"American Journal Of Big Data","issn_l":"2688-9994","issn":["2688-9994"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"American Journal Of Big Data","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.71465/ajbd3656","doi":"https://doi.org/10.71465/ajbd3656","is_oa":true,"landing_page_url":"https://doi.org/10.71465/ajbd3656","pdf_url":"https://australiansciencejournals.com/bigdata/article/download/3656/4569","source":{"id":"https://openalex.org/S5407050933","display_name":"American Journal Of Big Data","issn_l":"2688-9994","issn":["2688-9994"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"American Journal Of Big Data","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7148628079.pdf","grobid_xml":"https://content.openalex.org/works/W7148628079.grobid-xml"},"referenced_works_count":8,"referenced_works":["https://openalex.org/W4400649471","https://openalex.org/W4411096396","https://openalex.org/W4412894395","https://openalex.org/W4413810999","https://openalex.org/W4415016525","https://openalex.org/W4415071524","https://openalex.org/W7080125945","https://openalex.org/W7117778096"],"related_works":["https://openalex.org/W7127171553","https://openalex.org/W7214099737","https://openalex.org/W7117964361","https://openalex.org/W7115018353","https://openalex.org/W4412477654","https://openalex.org/W7203555334","https://openalex.org/W7160771779","https://openalex.org/W7160292997","https://openalex.org/W7203819129","https://openalex.org/W4407155270"],"abstract_inverted_index":{"The":[0],"rapid":[1],"proliferation":[2],"of":[3,32,40,58,115,207,213,224],"cloud-native":[4],"architectures":[5],"has":[6],"fundamentally":[7],"transformed":[8],"application":[9],"deployment,":[10],"shifting":[11],"paradigms":[12],"from":[13,112],"monolithic":[14],"structures":[15],"to":[16,29,77,93],"highly":[17,69],"distributed":[18],"microservices.":[19],"This":[20],"architectural":[21],"evolution":[22],"introduces":[23],"significant":[24],"security":[25,47,236],"challenges,":[26],"primarily":[27],"due":[28],"the":[30,37,56,136,164,205,211,222],"explosion":[31],"east-west":[33],"network":[34,100],"traffic":[35],"and":[36,64,75,96,101,152,168,184,198],"complex":[38],"web":[39],"software":[41,150],"supply":[42,227],"chain":[43,228],"dependencies.":[44],"Traditional":[45],"perimeter-based":[46],"models":[48],"are":[49],"wholly":[50],"inadequate":[51],"in":[52,173],"these":[53],"environments,":[54],"necessitating":[55],"adoption":[57],"Zero-Trust":[59],"Architecture.":[60],"However,":[61],"manually":[62],"crafting":[63],"maintaining":[65],"zero-trust":[66,99],"policies":[67],"for":[68,234],"dynamic":[70,192],"microservices":[71],"is":[72],"operationally":[73],"prohibitive":[74],"prone":[76],"human":[78],"error.":[79],"In":[80],"this":[81,128],"paper,":[82],"we":[83],"propose":[84],"a":[85,132,142,159,174],"novel":[86],"framework":[87],"that":[88,190],"leverages":[89],"Large":[90,137],"Language":[91,138],"Models":[92],"automatically":[94],"generate":[95],"dynamically":[97],"update":[98],"system":[102,161],"policies.":[103],"Our":[104],"approach":[105,193],"uniquely":[106],"integrates":[107],"static":[108,181],"vulnerability":[109],"data":[110,130,229],"derived":[111],"Software":[113],"Bill":[114],"Materials":[116],"with":[117,230],"real-time":[118],"behavioral":[119],"insights":[120],"captured":[121],"through":[122],"eBPF-based":[123],"runtime":[124,155,208,232],"telemetry.":[125],"By":[126],"serializing":[127],"multimodal":[129],"into":[131],"comprehensive":[133,160],"structural":[134],"prompt,":[135],"Model":[139],"acts":[140],"as":[141],"cognitive":[143],"policy":[144,165,182,196],"engine,":[145],"reasoning":[146],"over":[147],"both":[148],"known":[149],"vulnerabilities":[151],"emergent":[153],"anomalous":[154],"behaviors.":[156],"We":[157],"introduce":[158],"architecture,":[162],"formalize":[163],"optimization":[166],"problem,":[167],"deploy":[169],"an":[170],"open-source":[171],"prototype":[172],"simulated":[175],"Kubernetes":[176],"environment.":[177],"Experimental":[178],"evaluations":[179],"against":[180],"baselines":[183],"heuristic":[185],"intrusion":[186],"detection":[187],"systems":[188],"demonstrate":[189],"our":[191],"significantly":[194],"enhances":[195],"precision":[197],"recall":[199],"while":[200],"minimizing":[201],"false":[202],"positives.":[203],"Furthermore,":[204],"integration":[206],"telemetry":[209],"reduces":[210],"latency":[212],"isolating":[214],"compromised":[215],"workloads":[216],"during":[217],"active":[218],"exploitation":[219],"scenarios,":[220],"proving":[221],"efficacy":[223],"combining":[225],"deterministic":[226],"stochastic":[231],"observations":[233],"autonomous":[235],"operations.":[237]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-04-03T00:00:00"}