Research

Paper

TESTING March 09, 2026

Lockbox -- A Zero Trust Architecture for Secure Processing of Sensitive Cloud Workloads

Authors

Vamshi Krishna Thotempudi, Mahima Agarwal, Raghav Batta, Anjali Mangal

Abstract

Enterprises increasingly rely on cloud-based applications to process highly sensitive data artifacts. Although cloud adoption improves agility and scalability, it also introduces new security challenges such as expanded attack surfaces, a wider radius of attack from credential compromise, and challenges maintaining strict access controls across users, services, and workflows. These challenges are especially acute for applications that handle privileged data and execute security-critical analysis, where traditional trust boundaries and ad hoc safeguards are insufficient. This paper presents Lockbox; a Zero Trust architecture designed for secure processing of sensitive cloud workloads under strict enterprise security and governance requirements. Lockbox applies explicit trust verification, strong isolation, least-privilege access, and policy-driven enforcement throughout the entire application lifecycle, from user authentication and document ingestion to analysis execution and result storage. The system incorporates modern cloud security primitives including; role-based access control, centralized key management, encryption in transit and at rest, and controlled integration with cloud-based data processing services, ensuring that sensitive artifacts remain protected and accessible only to authorized users. We discuss the usage of Lockbox in processing highly sensitive cybersecurity reports and demonstrate how this architecture enables organizations to safely adopt advanced capabilities, including AI-assisted processing, without weakening their security posture.

Metadata

arXiv ID: 2603.09025
Provider: ARXIV
Primary Category: cs.CR
Published: 2026-03-09
Fetched: 2026-03-11 06:02

Related papers

Raw Data (Debug)
{
  "raw_xml": "<entry>\n    <id>http://arxiv.org/abs/2603.09025v1</id>\n    <title>Lockbox -- A Zero Trust Architecture for Secure Processing of Sensitive Cloud Workloads</title>\n    <updated>2026-03-09T23:45:00Z</updated>\n    <link href='https://arxiv.org/abs/2603.09025v1' rel='alternate' type='text/html'/>\n    <link href='https://arxiv.org/pdf/2603.09025v1' rel='related' title='pdf' type='application/pdf'/>\n    <summary>Enterprises increasingly rely on cloud-based applications to process highly sensitive data artifacts. Although cloud adoption improves agility and scalability, it also introduces new security challenges such as expanded attack surfaces, a wider radius of attack from credential compromise, and challenges maintaining strict access controls across users, services, and workflows. These challenges are especially acute for applications that handle privileged data and execute security-critical analysis, where traditional trust boundaries and ad hoc safeguards are insufficient. This paper presents Lockbox; a Zero Trust architecture designed for secure processing of sensitive cloud workloads under strict enterprise security and governance requirements. Lockbox applies explicit trust verification, strong isolation, least-privilege access, and policy-driven enforcement throughout the entire application lifecycle, from user authentication and document ingestion to analysis execution and result storage. The system incorporates modern cloud security primitives including; role-based access control, centralized key management, encryption in transit and at rest, and controlled integration with cloud-based data processing services, ensuring that sensitive artifacts remain protected and accessible only to authorized users. We discuss the usage of Lockbox in processing highly sensitive cybersecurity reports and demonstrate how this architecture enables organizations to safely adopt advanced capabilities, including AI-assisted processing, without weakening their security posture.</summary>\n    <category scheme='http://arxiv.org/schemas/atom' term='cs.CR'/>\n    <category scheme='http://arxiv.org/schemas/atom' term='cs.DC'/>\n    <category scheme='http://arxiv.org/schemas/atom' term='cs.SE'/>\n    <published>2026-03-09T23:45:00Z</published>\n    <arxiv:primary_category term='cs.CR'/>\n    <author>\n      <name>Vamshi Krishna Thotempudi</name>\n    </author>\n    <author>\n      <name>Mahima Agarwal</name>\n    </author>\n    <author>\n      <name>Raghav Batta</name>\n    </author>\n    <author>\n      <name>Anjali Mangal</name>\n    </author>\n  </entry>"
}