ZKP-Shield: Eradicating Cloud Attack Surfaces through Non-Interactive Zero-Knowledge Proofs and Software-Defined Perimeters

Abstract

Cloud computing has transformed data storage, accessibility, and enterprise operations; however, it has also increased exposure to sophisticated cyber threats. Traditional centralized Identity Management Systems (IDMs) often suffer from critical vulnerabilities such as a single point of failure, where the compromise of a central authority can expose sensitive user credentials. This research proposes ZKP-Shield, a security framework that integrates Non-Interactive Zero-Knowledge Proofs (NIZKPs) with a Software-Defined Perimeter (SDP) to create a secure and invisible cloud authentication environment. The proposed architecture eliminates the need to transmit passwords or sensitive identity data by allowing users to mathematically prove their identity without revealing secret information. Simultaneously, the SDP layer conceals cloud resources from unauthorized users by enforcing a “dark cloud” model, where services remain hidden until authentication is successfully verified. The framework employs cryptographic techniques such as the Discrete Logarithm Problem and the Fiat–Shamir heuristic to transform interactive proofs into efficient non-interactive authentication processes. Experimental simulations conducted in a distributed cloud environment demonstrate that the ZKP-SDP integration significantly reduces attack surfaces, prevents credential-based attacks, and maintains acceptable latency for enterprise applications. The results indicate that combining cryptographic identity verification with network invisibility provides a scalable and resilient security model for modern cloud infrastructures.