Zero Trust: Risks and Research Opportunities
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
This paper describes research opportunities in the field of zero trust (ZT), a cybersecurity paradigm that focuses on resource protection and the premise that trust is never granted implicitly but must be continually evaluated.
To understand what areas of zero trust research could be beneficial for the Software Engineering Institute (SEI) to pursue, we developed a notional U.S. government agency. We used this agency to develop an operational vignette to help understand the nodes and actors that would interact with the agency in a hybrid cloud ZT environment.
We then developed three mission threads that highlight risks and research areas to consider for zero trust environments.
This paper describes the resulting mission threads, risks, and future research areas.
Cite This SEI Report
Sanders, G., & Morrow, T. (2021, March 1). Zero Trust: Risks and Research Opportunities. Retrieved September 11, 2026, from https://www.sei.cmu.edu/library/zero-trust-risks-and-research-opportunities/.
@techreport{sanders_2021,
author={Sanders, Geoff and Morrow, Timothy},
title={Zero Trust: Risks and Research Opportunities},
month={Mar},
year={2021},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/zero-trust-risks-and-research-opportunities/},
note={Accessed: 2026-Sep-11}
}
Sanders, Geoff, and Timothy Morrow. "Zero Trust: Risks and Research Opportunities." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, March 1, 2021. https://www.sei.cmu.edu/library/zero-trust-risks-and-research-opportunities/.
G. Sanders, and T. Morrow, "Zero Trust: Risks and Research Opportunities," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 1-Mar-2021 [Online]. Available: https://www.sei.cmu.edu/library/zero-trust-risks-and-research-opportunities/. [Accessed: 11-Sep-2026].
Sanders, Geoff, and Timothy Morrow. "Zero Trust: Risks and Research Opportunities." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Mar. 2021. https://www.sei.cmu.edu/library/zero-trust-risks-and-research-opportunities/. Accessed 11 Sep. 2026.
Sanders, Geoff; & Morrow, Timothy. Zero Trust: Risks and Research Opportunities. Software Engineering Institute. 2021. https://www.sei.cmu.edu/library/zero-trust-risks-and-research-opportunities/