PROTOS
PROTOS is a probabilistic zero-trust framework for scientific cyberinfrastructure with formal guarantees and in-situ validation orientation, addressing the unique trust and access challenges of federated research environments.
Artifact Overview
Scientific cyberinfrastructure faces complex trust and access challenges across heterogeneous users, workloads, and federated environments. Traditional perimeter-based security models fail in these contexts.
NSF-funded scientific cyberinfrastructure, federated research environments, and multi-institutional collaborations.
FormalAnalysis3 metrics
1. Problem Statement & Operational Motivation
Scientific cyberinfrastructure faces complex trust and access challenges across heterogeneous users, workloads, and federated environments. Traditional perimeter-based security models fail in these contexts.
This problem arises in the context of nsf-funded scientific cyberinfrastructure, federated research environments, and multi-institutional collaborations. and reflects constraints commonly encountered in production systems, including scale, adversarial behavior, regulatory requirements, and operational continuity.
2. Artifact Description
PROTOS is a probabilistic zero-trust framework for scientific cyberinfrastructure with formal guarantees and in-situ validation orientation, addressing the unique trust and access challenges of federated research environments.
The artifact is designed to be identity-first, treating authentication, authorization, federation, and policy enforcement as the primary control plane. It is intended to function under real operational conditions rather than idealized assumptions.
3. Design Science Research Methodology (DSRM) Mapping
PROTOS follows DSRM with research contributions expressed as an operational artifact.
• Problem Identification & Motivation
The operational problem was defined based on observed risks and limitations in existing systems.
• Design & Development
PROTOS is built on the following design principles:
- Probabilistic trust assessment over binary decisions
- Identity-first access control for federated environments
- Formal verification of security properties
- In-situ validation for operational assurance
• Build
The framework defines probabilistic trust models, federation protocols, formal verification approaches, and validation methodologies for scientific CI environments.
• Demonstration
Demonstrated through formal property mapping and validation plan design aligned with NSF CI security requirements.
• Evaluation
Evaluated through formalization structure and validation plan; designed for funded program execution.
• Communication
The artifact is documented as a citable protocol object and connected to research notes, simulation plans, and deployment guidance.
4. Evaluation & Evidence
Evaluation Method: FormalAnalysis
Evaluation Metrics:
- Assurance property coverage
- Policy completeness
- Validation traceability
Evaluation Contexts:
- Formal property mapping and validation plan design
- Federation trust model analysis
The evaluation approach treats the environment as adversarial and constrained. PROTOS is not assessed on theoretical correctness alone; it is assessed on whether it can deliver trustworthy behavior under realistic deployment assumptions.
5. Applicability & Use Cases
PROTOS applies to:
Use cases include:
- Architecture design and review
- Security control implementation
- Research extension and replication
- Teaching and laboratory exercises
- Policy and governance analysis
6. Limitations & Scope
Full empirical validation requires execution within a target CI environment.
7. Iteration & Evolution
Maintained consistency with project descriptions and synergy activities.
8. How to Cite This Artifact
J. Nsoh, "PROTOS: Probabilistic Zero-Trust Framework for Scientific Cyberinfrastructure," Artifact, Nsoh Research, 2025. Available: https://jovita.io/artifacts/protos
9. Related Research & Teaching
10. License & Availability
License: TBD
Last Updated: 2025-10-15
Where applicable, reference implementations and simulation configurations will be published as linked materials under this artifact record.
PROTOS represents an applied research contribution produced through Design Science Research Methodology. Its value lies not only in correctness, but in whether it can be implemented, evaluated, and trusted in real operational environments.