Zero Trust-Based Adaptive Authentication using Composite Attribute Set

Rapid evolution of internet-oriented applications has increased the threats to confidential data. Single-factor authentication approaches are no longer sufficient to ensure user credibility. Multi-factor authentication schemes are also not tamper-proof. A Zero Trust, adaptive authentication-based approach that uses the user's past behavior can offer protection in this scenario. This paper proposes a system that collects a composite attribute set that includes the user behavior, attributes of the application through which the user is requesting access, and the device used. The enhanced collection allows the creation of detailed context that allows granular variance calculation and risk score.