Evolutionary Computation-Enhanced White-Box Penetration Testing for Lateral-Movement Prevention in Zero-Trust Architectures

• Author(s): Marcelo Araujo
• Paper ID: 1717535
• Page: 4275-4279
• Published Date: 09-05-2026
• Published In: Iconic Research And Engineering Journals
• Publisher: IRE Journals
• e-ISSN: 2456-8880
• Volume/Issue: Volume 9 Issue 10 April-2026

Abstract

Preventing lateral movement remains a central cybersecurity challenge even in environments designed according to Zero Trust principles. Although this paradigm reduces implicit trust and enforces continuous verification, its effectiveness ultimately depends on access-policy quality, identity-to-resource segmentation, and the ability to detect abusive chains built from seemingly legitimate permissions. In parallel, recent automated penetration-testing research has advanced through reinforcement learning, graph-based modeling, and simulation frameworks for exploring complex attack surfaces [1-4]. Building on this state of the art, this article proposes a conceptual white-box penetration-testing framework for Zero-Trust architectures in which evolutionary algorithms perform global search over the internal blueprint of the environment, while reinforcement learning adaptively refines promising action sequences. The model assumes authorized defensive access to ZTNA policies, identity and privilege graphs, workload dependencies, and continuous-verification logs. Its fitness function is multi-objective and jointly considers success probability, stealth, and evasion rate. We argue that this combination may improve the identification of plausible lateral-movement routes and generate more useful remediation outputs, provided that it is applied in controlled environments with telemetry sufficiently faithful to the real system.

Keywords

Automated Penetration Testing, Evolutionary Computation, Reinforcement Learning, Lateral Movement, Zero Trust.

Citations

IRE Journals:
Marcelo Araujo "Evolutionary Computation-Enhanced White-Box Penetration Testing for Lateral-Movement Prevention in Zero-Trust Architectures" Iconic Research And Engineering Journals Volume 9 Issue 10 2026 Page 4275-4279 https://doi.org/10.64388/IREV9I10-1717535

IEEE:
Marcelo Araujo "Evolutionary Computation-Enhanced White-Box Penetration Testing for Lateral-Movement Prevention in Zero-Trust Architectures" Iconic Research And Engineering Journals, 9(10) https://doi.org/10.64388/IREV9I10-1717535