{"id":"https://openalex.org/W4415296890","doi":"https://doi.org/10.3390/jcp5040087","title":"The Erosion of Cybersecurity Zero-Trust Principles Through Generative AI: A Survey on the Challenges and Future Directions","display_name":"The Erosion of Cybersecurity Zero-Trust Principles Through Generative AI: A Survey on the Challenges and Future Directions","publication_year":2025,"publication_date":"2025-10-15","ids":{"openalex":"https://openalex.org/W4415296890","doi":"https://doi.org/10.3390/jcp5040087"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5040087","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040087","pdf_url":"https://www.mdpi.com/2624-800X/5/4/87/pdf?version=1760537216","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/4/87/pdf?version=1760537216","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052950957","display_name":"Dan Xu","orcid":"https://orcid.org/0009-0004-3930-7381"},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Dan Xu","raw_affiliation_strings":["School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia"],"raw_orcid":"https://orcid.org/0009-0004-3930-7381","affiliations":[{"raw_affiliation_string":"School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia","institution_ids":["https://openalex.org/I82951845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003563704","display_name":"Iqbal Gondal","orcid":"https://orcid.org/0000-0001-7963-2446"},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Iqbal Gondal","raw_affiliation_strings":["School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7963-2446","affiliations":[{"raw_affiliation_string":"School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia","institution_ids":["https://openalex.org/I82951845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100709723","display_name":"Xun Yi","orcid":"https://orcid.org/0000-0001-7351-5724"},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xun Yi","raw_affiliation_strings":["School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7351-5724","affiliations":[{"raw_affiliation_string":"School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia","institution_ids":["https://openalex.org/I82951845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037915797","display_name":"Teo Su\u0161njak","orcid":"https://orcid.org/0000-0001-9416-1435"},"institutions":[{"id":"https://openalex.org/I51158804","display_name":"Massey University","ror":"https://ror.org/052czxv31","country_code":"NZ","type":"education","lineage":["https://openalex.org/I51158804"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Teo Susnjak","raw_affiliation_strings":["School of Mathematical and Computational Sciences, Massey University, Auckland 0632, New Zealand"],"raw_orcid":"https://orcid.org/0000-0001-9416-1435","affiliations":[{"raw_affiliation_string":"School of Mathematical and Computational Sciences, Massey University, Auckland 0632, New Zealand","institution_ids":["https://openalex.org/I51158804"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074086920","display_name":"Paul Watters","orcid":"https://orcid.org/0000-0002-1399-7175"},"institutions":[{"id":"https://openalex.org/I149672521","display_name":"Federation University","ror":"https://ror.org/05qbzwv83","country_code":"AU","type":"education","lineage":["https://openalex.org/I149672521"]},{"id":"https://openalex.org/I4210107908","display_name":"Ballarat Health Services","ror":"https://ror.org/01jmjwt28","country_code":"AU","type":"healthcare","lineage":["https://openalex.org/I4210107908"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Paul Watters","raw_affiliation_strings":["Cyberstronomy Pty Ltd., Ballarat, VIC 3350, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1399-7175","affiliations":[{"raw_affiliation_string":"Cyberstronomy Pty Ltd., Ballarat, VIC 3350, Australia","institution_ids":["https://openalex.org/I149672521","https://openalex.org/I4210107908"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024454231","display_name":"Timothy R. McIntosh","orcid":"https://orcid.org/0000-0003-0836-4266"},"institutions":[{"id":"https://openalex.org/I4210087542","display_name":"Cancer Australia","ror":"https://ror.org/00510tw04","country_code":"AU","type":"government","lineage":["https://openalex.org/I2801453606","https://openalex.org/I3149551504","https://openalex.org/I4210087542"]},{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Timothy R. McIntosh","raw_affiliation_strings":["Cyberoo Pty Ltd., Surry Hills, NSW 2010, Australia","School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0836-4266","affiliations":[{"raw_affiliation_string":"Cyberoo Pty Ltd., Surry Hills, NSW 2010, Australia","institution_ids":["https://openalex.org/I4210087542"]},{"raw_affiliation_string":"School of Computing Technologies, RMIT University, Melbourne, VIC 3000, Australia","institution_ids":["https://openalex.org/I82951845"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5052950957"],"corresponding_institution_ids":["https://openalex.org/I82951845"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1207},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1207},"fwci":13.904,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.98653392,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"5","issue":"4","first_page":"87","last_page":"87"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7214999794960022},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6503999829292297},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6420000195503235},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5407000184059143},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.46970000863075256},{"id":"https://openalex.org/keywords/government","display_name":"Government (linguistics)","score":0.4074000120162964},{"id":"https://openalex.org/keywords/nist","display_name":"NIST","score":0.4058000147342682},{"id":"https://openalex.org/keywords/mainstream","display_name":"Mainstream","score":0.39579999446868896},{"id":"https://openalex.org/keywords/counterfactual-thinking","display_name":"Counterfactual thinking","score":0.39259999990463257}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7214999794960022},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6503999829292297},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6488999724388123},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6420000195503235},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5454999804496765},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5407000184059143},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.48539999127388},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.46970000863075256},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.4074000120162964},{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.4058000147342682},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.39579999446868896},{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.39259999990463257},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.38269999623298645},{"id":"https://openalex.org/C80958533","wikidata":"https://www.wikidata.org/wiki/Q1047174","display_name":"Audit trail","level":3,"score":0.33399999141693115},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.32350000739097595},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.31859999895095825},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.31679999828338623},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.2962999939918518},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.2939999997615814},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.29339998960494995},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.28369998931884766},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.27950000762939453},{"id":"https://openalex.org/C69360830","wikidata":"https://www.wikidata.org/wiki/Q1172237","display_name":"Data Protection Act 1998","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C2779033394","wikidata":"https://www.wikidata.org/wiki/Q5186733","display_name":"Critical infrastructure protection","level":3,"score":0.2703999876976013},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C174839445","wikidata":"https://www.wikidata.org/wiki/Q1134386","display_name":"Lock (firearm)","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.25699999928474426},{"id":"https://openalex.org/C2778223634","wikidata":"https://www.wikidata.org/wiki/Q224952","display_name":"Suspect","level":2,"score":0.2549999952316284},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.25200000405311584},{"id":"https://openalex.org/C143095724","wikidata":"https://www.wikidata.org/wiki/Q515895","display_name":"Odds","level":3,"score":0.25130000710487366}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5040087","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040087","pdf_url":"https://www.mdpi.com/2624-800X/5/4/87/pdf?version=1760537216","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2c4edaa989dc4887b9300ebac1116a70","is_oa":true,"landing_page_url":"https://doaj.org/article/2c4edaa989dc4887b9300ebac1116a70","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 4, p 87 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5040087","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5040087","pdf_url":"https://www.mdpi.com/2624-800X/5/4/87/pdf?version=1760537216","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415296890.pdf","grobid_xml":"https://content.openalex.org/works/W4415296890.grobid-xml"},"referenced_works_count":170,"referenced_works":["https://openalex.org/W2302640900","https://openalex.org/W2912264626","https://openalex.org/W3005594826","https://openalex.org/W3025740502","https://openalex.org/W3036911563","https://openalex.org/W3082735423","https://openalex.org/W3135809943","https://openalex.org/W3176850402","https://openalex.org/W3195846920","https://openalex.org/W3196515948","https://openalex.org/W3205163562","https://openalex.org/W3210731496","https://openalex.org/W4206089482","https://openalex.org/W4210987902","https://openalex.org/W4211108011","https://openalex.org/W4213034586","https://openalex.org/W4214822780","https://openalex.org/W4220870308","https://openalex.org/W4221032186","https://openalex.org/W4223902894","https://openalex.org/W4224241642","https://openalex.org/W4226070699","https://openalex.org/W4226256448","https://openalex.org/W4280574916","https://openalex.org/W4280644919","https://openalex.org/W4281822694","https://openalex.org/W4282589588","https://openalex.org/W4282945617","https://openalex.org/W4283763633","https://openalex.org/W4285205927","https://openalex.org/W4285206483","https://openalex.org/W4292263371","https://openalex.org/W4293060418","https://openalex.org/W4293199628","https://openalex.org/W4294958289","https://openalex.org/W4295016347","https://openalex.org/W4295185261","https://openalex.org/W4308089063","https://openalex.org/W4308274177","https://openalex.org/W4309283053","https://openalex.org/W4310368412","https://openalex.org/W4311173372","https://openalex.org/W4317743536","https://openalex.org/W4317793327","https://openalex.org/W4319233998","https://openalex.org/W4319297893","https://openalex.org/W4319863504","https://openalex.org/W4321204539","https://openalex.org/W4321780144","https://openalex.org/W4322154771","https://openalex.org/W4360839289","https://openalex.org/W4362467636","https://openalex.org/W4362496414","https://openalex.org/W4362665947","https://openalex.org/W4366277429","https://openalex.org/W4366589820","https://openalex.org/W4366824110","https://openalex.org/W4367297572","https://openalex.org/W4378696892","https://openalex.org/W4378880903","https://openalex.org/W4381195850","https://openalex.org/W4381509766","https://openalex.org/W4381516841","https://openalex.org/W4381786572","https://openalex.org/W4382366645","https://openalex.org/W4383567255","https://openalex.org/W4384153669","https://openalex.org/W4385261011","https://openalex.org/W4385366999","https://openalex.org/W4385478224","https://openalex.org/W4385755118","https://openalex.org/W4385819863","https://openalex.org/W4386086329","https://openalex.org/W4386389031","https://openalex.org/W4386490237","https://openalex.org/W4386590864","https://openalex.org/W4386883676","https://openalex.org/W4387701059","https://openalex.org/W4387831783","https://openalex.org/W4387872721","https://openalex.org/W4387969883","https://openalex.org/W4388016060","https://openalex.org/W4388039919","https://openalex.org/W4388450954","https://openalex.org/W4388576658","https://openalex.org/W4388584888","https://openalex.org/W4388627545","https://openalex.org/W4388720055","https://openalex.org/W4388937595","https://openalex.org/W4389042750","https://openalex.org/W4389076254","https://openalex.org/W4389099839","https://openalex.org/W4389143741","https://openalex.org/W4389270731","https://openalex.org/W4389313029","https://openalex.org/W4389815575","https://openalex.org/W4390226056","https://openalex.org/W4390317718","https://openalex.org/W4390344973","https://openalex.org/W4390604115","https://openalex.org/W4390670372","https://openalex.org/W4390730117","https://openalex.org/W4390908077","https://openalex.org/W4391128486","https://openalex.org/W4391134054","https://openalex.org/W4391225283","https://openalex.org/W4391342373","https://openalex.org/W4391470024","https://openalex.org/W4391523155","https://openalex.org/W4391649861","https://openalex.org/W4391783404","https://openalex.org/W4391785412","https://openalex.org/W4391941625","https://openalex.org/W4392005512","https://openalex.org/W4392131995","https://openalex.org/W4392183823","https://openalex.org/W4392223637","https://openalex.org/W4392248476","https://openalex.org/W4392875588","https://openalex.org/W4393114577","https://openalex.org/W4393146282","https://openalex.org/W4393152095","https://openalex.org/W4393308520","https://openalex.org/W4393323393","https://openalex.org/W4393372130","https://openalex.org/W4393384866","https://openalex.org/W4393406857","https://openalex.org/W4394674799","https://openalex.org/W4394693490","https://openalex.org/W4394694882","https://openalex.org/W4394694890","https://openalex.org/W4394694918","https://openalex.org/W4394694925","https://openalex.org/W4394951197","https://openalex.org/W4395090270","https://openalex.org/W4395480811","https://openalex.org/W4395679038","https://openalex.org/W4396620995","https://openalex.org/W4396680723","https://openalex.org/W4396768380","https://openalex.org/W4396859816","https://openalex.org/W4396982193","https://openalex.org/W4397026235","https://openalex.org/W4398137718","https://openalex.org/W4398764214","https://openalex.org/W4399040069","https://openalex.org/W4399379973","https://openalex.org/W4399562991","https://openalex.org/W4399728340","https://openalex.org/W4399799359","https://openalex.org/W4399884650","https://openalex.org/W4400072043","https://openalex.org/W4400276351","https://openalex.org/W4400314994","https://openalex.org/W4400447706","https://openalex.org/W4400510063","https://openalex.org/W4400520589","https://openalex.org/W4400647957","https://openalex.org/W4400887755","https://openalex.org/W4401004521","https://openalex.org/W4401070271","https://openalex.org/W4401213410","https://openalex.org/W4401315531","https://openalex.org/W4401326099","https://openalex.org/W4401336884","https://openalex.org/W4401534989","https://openalex.org/W4401634023","https://openalex.org/W4402056280","https://openalex.org/W4403360640","https://openalex.org/W4410376226"],"related_works":[],"abstract_inverted_index":{"Generative":[0],"artificial":[1],"intelligence":[2],"(AI)":[3],"and":[4,28,33,64,77,104,126,136,148,160,183],"persistent":[5],"empirical":[6],"gaps":[7],"are":[8,193],"reshaping":[9],"the":[10,87,142,204],"cyber":[11],"threat":[12,206],"landscape":[13],"faster":[14],"than":[15],"Zero-Trust":[16,143],"Architecture":[17],"(ZTA)":[18],"research":[19,60,177],"can":[20,170],"respond.":[21],"We":[22],"reviewed":[23],"10":[24],"recent":[25],"ZTA":[26,59,191],"surveys":[27],"136":[29],"primary":[30],"studies":[31],"(2022\u20132024)":[32],"found":[34],"that":[35,106,161,168,186,192],"98%":[36],"provided":[37],"only":[38,195],"partial":[39],"or":[40],"no":[41,154],"real-world":[42],"validation,":[43],"leaving":[44],"several":[45],"core":[46],"controls":[47],"largely":[48],"untested.":[49],"Our":[50],"critique,":[51],"therefore,":[52],"proceeds":[53],"on":[54,172],"two":[55],"axes:":[56],"first,":[57],"mainstream":[58],"is":[61],"empirically":[62],"under-powered":[63],"operationally":[65],"unproven;":[66],"second,":[67],"generative-AI":[68],"attacks":[69],"exploit":[70],"these":[71],"very":[72],"weaknesses,":[73],"accelerating":[74],"policy":[75],"bypass":[76],"detection":[78],"failure.":[79],"To":[80],"expose":[81],"this":[82],"compounding":[83],"risk,":[84],"we":[85,175,184],"contribute":[86],"Cyber":[88],"Fraud":[89],"Kill":[90],"Chain":[91],"(CFKC),":[92],"a":[93,196],"seven-stage":[94],"attacker":[95],"model":[96],"(target":[97],"identification,":[98],"preparation,":[99],"engagement,":[100],"deception,":[101],"execution,":[102],"monetization,":[103],"cover-up)":[105],"maps":[107],"specific":[108],"generative":[109],"techniques":[110],"to":[111,165],"NIST":[112],"SP":[113],"800-207":[114],"components":[115],"they":[116],"erode.":[117],"The":[118],"CFKC":[119],"highlights":[120],"how":[121],"synthetic":[122],"identities,":[123],"context":[124],"manipulation":[125],"adversarial":[127],"telemetry":[128],"drive":[129],"up":[130],"false-negative":[131],"rates,":[132],"extend":[133],"dwell":[134],"time,":[135],"sidestep":[137],"audit":[138,166],"trails,":[139],"thereby":[140],"undermining":[141],"principles":[144],"of":[145,189],"verify":[146],"explicitly":[147],"assume":[149],"breach.":[150],"Existing":[151],"guidance":[152],"offers":[153],"systematic":[155],"countermeasures":[156],"for":[157,179],"AI-scaled":[158],"attacks,":[159],"compliance":[162],"regimes":[163],"struggle":[164],"content":[167],"AI":[169],"mutate":[171],"demand.":[173],"Finally,":[174],"outline":[176],"directions":[178],"adaptive,":[180],"evidence-driven":[181],"ZTA,":[182],"argue":[185],"incremental":[187],"extensions":[188],"current":[190],"insufficient;":[194],"generative-AI-aware":[197],"redesign":[198],"will":[199],"sustain":[200],"defensive":[201],"parity":[202],"in":[203],"coming":[205],"cycle.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-25T07:29:55.448023","created_date":"2025-10-18T00:00:00"}