A Proactive zero trust architecture-based defence framework to mitigate ransomware attacks

Shah, Ayush Dharmesh (2025) A Proactive zero trust architecture-based defence framework to mitigate ransomware attacks. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration Manual) Download (2MB) | Preview

Abstract

Ransomware attacks have evolved into a critical cybersecurity threat, often bypassing traditional perimeter defenses and causing operational and financial disruption. This research showcases a proactive defense framework based on Zero Trust Architecture (ZTA) to detect, mitigate, and respond to ransomware threats. A virtualized lab environment was developed using open-source tools—Keycloak for identity and access management, Pomerium for zero-trust network access, and Wazuh for real-time threat monitoring. Attack simulations such as brute force login attempts and ransomware simulation using tools such as Hydra and Ransim were conducted to evaluate detection and response mechanisms set in place. The results showcased 100% threat detection and accuracy with a response time average of 2.11 seconds, which confirms the validity of ZTA in real world scenarios. The Findings align with NIST SP 800-207 principles and demonstrate how ZTA strengthens the security through least privilege access, continuous monitoring and automated response. Although the implementation proved effective, limitations in logging successful brute force attempts indicates area for further enhancement in future research.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Sahni, Vikas UNSPECIFIED
Uncontrolled Keywords:	Zero Trust Architecture; Ransomware
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security T Technology > T Technology (General) > Information Technology
Divisions:	School of Computing > Master of Science in Cyber Security
Depositing User:	Ciara O'Brien
Date Deposited:	17 Jun 2026 08:41
Last Modified:	17 Jun 2026 08:41
URI:	https://norma.ncirl.ie/id/eprint/9374

Actions (login required)

View Item