A Federated Learning Framework for Privacy Preserving Threat Detection in Zero Trust Network Access (ZTNA)

DOI

10.2991/978-94-6239-678-4_25How to use a DOI?

Keywords

ZTNA; Federated Learning; Machine Learning; Distributed Endpoint

Abstract

Zero Trust Network Access (ZTNA) has become one of the core cybersecurity strategies through the implementation of a continuous verification process and the least- privilege access management in disperse systems. Current ZTNA threat detection methodologies rely primarily on centralized machine learning models, which face issues of scalability, increased latency and major privacy issues with the centralized collection of sensitive endpoint in-formation. To overcome these issues, this paper presents a federated learning (FL) improved ZTNA frame- work for privacy preserving threat detection. In the proposed system, collaborative training is being performed by endpoint devices in which they train a shared machine learning training model by performing local training using endpoint telemetry and only sending privacy-protected model updates to a central aggregator (instead of raw data). A hybrid model of threat detection that uses a combination of Long Short-Term Memory network, auto encoder and Random Forest classifiers are used to extract temporal behavior, anomaly behavior and contextual threat behavior. Experimental evaluations performed on public benchmark data sets and large-scale enterprise telemetry show that proposed FL-based approach achieves the similar detection accuracy as centralized models (within 1.5-3.0%), while reducing measured privacy leakage by approx. 3-40% and keeping communication overhead at acceptable level. These results show that federated learning offers a scalable and privacy-aware method for real-time threat detection in ZTNA environments in order to enable improved security without data locality or compliance with regulations.

Copyright

© 2026 The Author(s)

Open Access

Open Access This chapter is licensed under the terms of the Creative Commons Attribution-NonCommercial 4.0 International License (http://creativecommons.org/licenses/by-nc/4.0/), which permits any noncommercial use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made.

Download article (PDF)

TY  - CONF
AU  - Md. Mushfiqur Rahman
AU  - Sakib Ur Rahman
AU  - Moinoddeen Quader Al Arabi
AU  - Kamran Hassan Shomrat
AU  - Kazi Sanghati Sowharda Haque
AU  - Mehadi Hasan Foysal
AU  - Sazzad Hossain
PY  - 2026
DA  - 2026/05/28
TI  - A Federated Learning Framework for Privacy Preserving Threat Detection in Zero Trust Network Access (ZTNA)
BT  - Proceedings of the 2nd International Conference on Recent Advancement and Modernization in Sustainable Intelligent Technologies & Applications (RAMSITA-2026)
PB  - Atlantis Press
SP  - 316
EP  - 330
SN  - 1951-6851
UR  - https://doi.org/10.2991/978-94-6239-678-4_25
DO  - 10.2991/978-94-6239-678-4_25
ID  - Rahman2026
ER  -