Zero-Trust-Based Cybersecurity Framework for Large-Scale Corporate Networks

Kang Geol

Abstract: The article examines a cybersecurity framework for an extensive, distributed corporate network, constructed on the principles of zero-trust architecture. The objective is to substantiate the transition from a perimeter-centric model to a systemic zero-trust architecture, given blurred network boundaries, multi-cloud infrastructure, and the escalating costs of cyber incidents. The study's relevance is driven by the dominance of web applications and DDoS attacks in the incident landscape, the heterogeneity of internal endpoints, and mounting regulatory pressure. The novelty of the work lies in the synthesis of a multi-layer framework that integrates a standardized corporate web application firewall and a global DDoS mitigation program, a network access control platform, cloud security posture management tools, privileged access management, and contextual data access control, all bound together by a unified model of identity, policy, and telemetry. The framework is grounded in an empirical case of a large-scale network and formalized as a stepwise implementation roadmap. It is shown that the proposed approach ensures the practical feasibility of zero trust architecture at the scale of hundreds of domains and thousands of connections, transforming fragmented perimeter-hardening measures into a coherent model of continuous verification and microsegmentation. The article is intended for cybersecurity architects, IT and information security leaders, and researchers of corporate networks.

Keywords: zero trust architecture, cybersecurity, large corporate networks, network access control

How to Cite?: Kang Geol, "Zero-Trust-Based Cybersecurity Framework for Large-Scale Corporate Networks", Volume 14 Issue 12, December 2025, International Journal of Science and Research (IJSR), Pages: 1995-2001, https://www.ijsr.net/getabstract.php?paperid=SR251217162021, DOI: https://dx.doi.org/10.21275/SR251217162021