The objective of this project is to design an Identity and Access Management system based on Zero Trust principles. The system continuously verifies users and devices before granting access, ensuring that no entity is trusted by default, even within internal networks.
Study Zero Trust security principles and their relevance to modern enterprises.
Analyze limitations of perimeter-based security models.
Design IAM architecture aligned with Zero Trust concepts.
Implement continuous authentication and authorization checks.
Enforce least-privilege access policies for users and devices.
Integrate device posture and context into access decisions.
Implement secure session monitoring and revalidation.
Log all access requests and policy decisions.
Test system behavior under internal and external threat scenarios.
Evaluate security improvements over traditional IAM models.
Document design decisions, benefits, and implementation challenges.
