Blockchain-Based Zero Trust Threat Detection Framework for the Finance Industry Network

The rapid evolution of cyber threats has made perimeter-based security models inadequate, especially in the financial sector, where data integrity, confidentiality, and regulatory compliance are critical. Despite advances, existing frameworks like Zero Trust still face challenges such as centralised trust mechanisms and limited resilience against insider threats and APTs. This research addresses these gaps by integrating blockchain technology into the Zero Trust model, proposing a novel Zero Trust Blockchain (ZTB) framework. The ZTB framework introduces decentralised verification, immutable audit trails, and a hybrid access control system, significantly enhancing security and trust in financial networks. The study adopts a multi-phased methodology. A prototype banking application was developed to evaluate the performance of the foundational Zero Trust (FZT) framework, focusing on identity and access management (IAM), network security, and data protection. The results demonstrated resilience to common threats such as SQL injection and brute-force attacks. To address the limitations of Zero Trust, the ZTB framework was designed and validated using OMNeT++ simulations under three configurations: Traditional, FZT, and ZTB networks. Simulated attack scenarios, including MITM, DDoS, and insider threats, revealed that the ZTB framework achieved superior detection accuracy (96%), improved data integrity, and minimised false positives and negatives, despite minor trade-offs in latency and scalability. This research contributes to the cybersecurity literature by presenting ZTB as a transformative solution, combining Zero Trust principles with blockchain’s unique capabilities. By addressing identified gaps and aligning with regulatory standards, the ZTB framework offers a robust and transparent approach to securing financial networks.

Grantor dc:publisher.institution

University of Bradford

Author dc:creator

• Daah, Clement

Advisors dc:contributor.advisor

• Awan, Irfan
• Qureshi, Amna
• Konur, Savas

• Network security
• Zero Trust
• Blockchain
• Financial networks
• Network simulation
• Hybrid access control
• Threat detection
• Cybersecurity

Statement dc:rights

• <a rel="license" href="http://creativecommons.org/licenses/by-nc-nd/3.0/"><img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-nc-nd/3.0/88x31.png" /></a><br />The University of Bradford theses are licenced under a <a rel="license" href="http://creativecommons.org/licenses/by-nc-nd/3.0/">Creative Commons Licence</a>.

Language dc:language.iso

en

Repository record dc:identifier.uri

https://bradscholars.brad.ac.uk/handle/10454/20964

OAI identifier oai:identifier

oai:bradscholars.brad.ac.uk:10454/20964