Evolving Zero Trust: From Original Planes to Modern AI-Era Architecture

Abstract

Grounded in NIST SP 800-207, CISA ZTMM 2.0, and the six-plane model from Gilman & Barth’s Zero Trust Networks, this paper introduces an Entity Plane that extends the Device Plane for AI agents and non-human identities.

The short version.

• 01Zero Trust architecture has to account for more than users and devices.\nThe proposed Entity Plane extends the established six-plane model to cover AI agents and non-human identities.\nThe paper connects this approach with NIST SP 800-207 and CISA ZTMM 2.0 for practical adoption.