Lockbox -- A Zero Trust Architecture for Secure Processing of Sensitive Cloud Workloads
Vamshi Krishna Thotempudi, Mahima Agarwal, Raghav Batta, Anjali Mangal

TL;DR
Lockbox introduces a Zero Trust architecture tailored for secure processing of sensitive cloud workloads, emphasizing trust verification, isolation, and strict access controls to enhance security in cloud environments.
Contribution
The paper presents Lockbox, a comprehensive Zero Trust framework integrating modern security primitives for safeguarding sensitive cloud data and workflows.
Findings
Enables secure processing of sensitive cybersecurity reports.
Supports AI-assisted analysis without compromising security.
Demonstrates effective implementation of Zero Trust principles in cloud workloads.
Abstract
Enterprises increasingly rely on cloud-based applications to process highly sensitive data artifacts. Although cloud adoption improves agility and scalability, it also introduces new security challenges such as expanded attack surfaces, a wider radius of attack from credential compromise, and challenges maintaining strict access controls across users, services, and workflows. These challenges are especially acute for applications that handle privileged data and execute security-critical analysis, where traditional trust boundaries and ad hoc safeguards are insufficient. This paper presents Lockbox; a Zero Trust architecture designed for secure processing of sensitive cloud workloads under strict enterprise security and governance requirements. Lockbox applies explicit trust verification, strong isolation, least-privilege access, and policy-driven enforcement throughout the entire…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsCloud Data Security Solutions · Security and Verification in Computing · Access Control and Trust
