Security Architecture of WEB-based Education Management Platform Based on Zero-Trust Model: Protecting Sensitive Student Data and Teaching Resources
DOI:
https://doi.org/10.13052/jwe1540-9589.2573Keywords:
Zero Trust Model, Education Management Platform, Teaching Resources, Security ArchitectureAbstract
In response to security risks such as data leakage and unauthorized access in educational Web platforms during digital transformation, this paper proposes a five-layer security architecture based on the zero-trust model. Following the principle of “never trust, always verify,” the architecture integrates identity management and access proxy technologies to build a collaborative protection system. It employs a multi-dimensional permission model for fine-grained access control, combines signature and behavior detection to strengthen Web attack protection, and leverages dynamic authorization evaluation, three-factor authentication, AES256 encryption, and distributed storage to ensure authentication and data security. Comparative experiments show that the architecture effectively mitigates unauthorized access, session hijacking, and abnormal authentication attacks, achieving a 97.0% defense success rate. Under 50 concurrent users, authentication delay remains within 4.2 ms, and the average response time in high-frequency access scenarios is 68 ms. Throughput meets the peak demands of education systems, with performance improved by 57.5% compared to traditional Web education platform architectures (TWEPA) and by 33.3% compared to general zero-trust architectures (ZTA). This solution provides a feasible approach for security enhancement and data compliance management in educational Web platforms.
Downloads
References
Y. Zhang, Privacy-preserving with zero-trust computational intelligent hybrid technique to English education model. Appl. Artif. Intell., vol. 37, no. 1, pp. 1–10, 2023. doi: 10.1080/08839514.2023.2219560.
Z. Tang, Intelligent construction of Web-based environmental education system in universities. J. Cases Inf. Technol., vol. 28, no. 1, pp. 1–20, 2026. doi: 10.4018/jcit.404699.
A. M. Arabi, A. D. Ogundijo, and T. E. Nyamasvisva, A zero-trust model-based framework for managing of academic dishonesty in institutes of higher learning. Turk. J. Comput. Math. Educ., vol. 12, no. 6, pp. 5381–5389, 2021.
X. Wang, V. Bhuse, and Y. Cheng, A zero-trust module for cybersecurity education. J. Colloq. Inf. Syst. Secur. Educ., vol. 12, no. 1, 2025.
M. A. Perkins and B. A. Akorede, Tracking K-12 and higher education job postings through Web-scraped longitudinal data. Data, vol. 11, no. 3, Art. no. 52, 2026. doi: 10.3390/data11030052.
A. Fadlil, I. Riadi, and M. A. Mu’Min, Mitigation from SQL injection attacks on Web server using Open Web Application Security Project framework. Int. J. Eng., vol. 37, no. 4, pp. 635–645, 2024.
K. D. Woo, S. J. Han, K. C. Lee, and S. H. Oh, A study on zero-trust security model for public education network based on ARC access control policy. Converg. Secur. J., vol. 24, no. 5, pp. 145–154, 2024. doi: 10.33778/kcsa.2024.24.5.145.
A. M. Akram and I. Ahmed, Securing eye-gaze technology in smart classrooms: A zero-trust, cloud-native framework for inclusive education. Proc. 2026 Int. Conf. AI Innov. Ind. (ICAIII), 2026.
R. Albaghli, A. Beidas, and N. Attar, Corrigendum to “Eyes on higher education: Evaluating Web usability in Kuwaiti private universities using eye-tracking and SUPR-Q metrics”. J. Eng. Res., vol. 14, no. 1, 2026. doi: 10.1016/j.jer.2025.12.023.
P. Vajpayee, B. Anderson, and G. Hossain, Zero-Trust and cyber risk modeling for intelligent school transportation systems (ISTS). Proc. 2025 IEEE Int. Carnahan Conf. Secur. Technol. (ICCST), 2025.
B. Paul and M. Rao, Zero-Trust model for smart manufacturing industry. Appl. Sci., vol. 13, no. 1, Art. no. 221, 2022. doi: 10.3390/app13010221.
M. A. Islam, Zero-Trust security and FERPA aligned data governance for higher education Web systems with identity centric access control secure APIs and tamper evident audit logging. Research Square, pp. 1–18, 2026, doi: 10.21203/rs.3.rs-9915310/v1.
S. J. Coetzee and L. V. Mulaudzi, Exploring the educational potential of free Web 3.0 resources for training technology students in higher education. Discover Educ., vol. 5, no. 1, Art. no. 175, 2026. doi: 10.1007/s44217-026-01207-1.
P. V. Zahorodko and S. O. Semerikov, Integrating agile methodologies and AI-assisted learning in Web programming education: A theoretical framework for CS curriculum transformation. Discover Educ., vol. 5, no. 1, Art. no. 166, 2026. doi: 10.1007/s44217-026-01179-5.
J. Kim, H. Kim, J. Yun, et al., CoDeF: A Web-based education platform for system-level design of unmanned vehicles. SoftwareX, vol. 33, Art. no. 102471, 2026. doi: 10.1016/j.softx.2025.102471.
J. Liu, S. Zhang, Q. Wang, et al., Coordinating fast concurrency adapting with autoscaling for SLO-oriented Web applications. IEEE Trans. Parallel Distrib. Syst., vol. 33, no. 12, pp. 3349–3362, 2022. doi: 10.1109/TPDS.2022.3169795.
M. Tsai, S. Lee, and S. W. Shieh, Strategy for implementing of zero-trust architecture. IEEE Trans. Rel., vol. 73, no. 1, pp. 93–100, 2024. doi: 10.1109/TR.2023.3289300.
S. Teerakanok, T. Uehara, and A. Inomata, Migrating to zero-trust architecture: Reviews and challenges. Secur. Commun. Netw., vol. 2021, Art. no. 9947347, 2021. doi: 10.1155/2021/9947347.
