Zero Trust Network Access (ZTNA) to Secure Website Applications Based on ISO 25023

Traditional perimeter-based security models are increasingly inadequate, therefore a method to secure sensitive applications while maintaining optimal performance is needed. This study evaluates the implementation of Zero Trust Network Access (ZTNA) as a modern security framework for enhancing enterprise application protection in the face of advanced cyber threats. Focusing on XYZ's Corporate Legal Application, the research examines ZTNA's impact on website application performance, particularly response time, system efficiency, and overall security. ZTNA operates on the principle of “never trust, always verify,” incorporating continuous authentication and real-time data inspection to restrict access to verified users and devices. Using ISO 25023 performance standards, this study employs JMeter for controlled response-time tests and Firewall Tools Monitoring to evaluate the reduction in attack surface. Results demonstrate that ZTNA significantly enhances application security by mitigating threats such as bot attacks and Distributed Denial of Service (DDoS) attacks. The added security layers introduce a minor increase in response time but within acceptable limits.