The appeal of the approach lies in the changing nature of cyberattacks. Traditional security systems often rely on known signatures, fixed rules or a perimeter separating a supposedly safe internal network from an untrusted outside world. That model becomes fragile when employees work remotely, applications run across multiple clouds and billions of devices exchange data. Attackers can also exploit stolen credentials, compromised endpoints or trusted connections that remain active long after a user’s behavior has changed. Zero-trust architecture, commonly summarized as “never trust, always verify,” responds by treating every access request as potentially risky. Rather than granting broad, permanent privileges, it evaluates identity, device condition, location, behavior and the sensitivity of the requested resource.

Artificial intelligence could make those evaluations faster and more dynamic. Machine-learning models can analyze network flows, login patterns, system calls, file access, process activity and other telemetry to identify behavior that differs from an established baseline. In a zero-trust environment, an anomaly might trigger stronger authentication, reduce a user’s permissions, isolate a device or block a connection. The technical challenge is that the most useful evidence is distributed across many organizations and devices. A hospital may observe one kind of attack, a bank another and an industrial facility a third. Sharing raw logs could expose personal information, trade secrets or security weaknesses, but keeping them isolated limits the data available for training robust detection models.

Federated learning is intended to solve part of that problem by moving the model rather than the data. In a typical federated-learning process, participating devices or organizations train a local copy of a machine-learning model using their own telemetry. They then send model updates—such as changes to neural-network weights—to a coordinating service, which aggregates the updates into a new global model. The raw data remains at its original location. The updated model can subsequently be distributed back to participants, allowing systems in different environments to learn from one another without creating a central warehouse of sensitive logs. This arrangement can support near-real-time threat intelligence while reducing some privacy risks associated with conventional centralized training.

Keeping data local, however, does not make federated learning automatically secure. Model updates can leak information, especially when an attacker analyzes repeated contributions or deliberately manipulates the training process. A compromised participant might send poisoned updates designed to make malware appear benign, while a malicious coordinator could attempt to reconstruct characteristics of local data. The review therefore places federated learning inside a broader security framework involving secure communication, participant authentication, anomaly checks on updates and, where appropriate, privacy-enhancing methods such as differential privacy or secure aggregation. Secure aggregation allows a coordinator to combine contributions without directly inspecting each individual update, although these protections can add computational overhead and may reduce model accuracy.

The proposed integration also extends to identity and access management, or IAM. IAM systems determine who can access which resources, under what conditions and for how long. AI-based IAM could use behavioral signals to supplement passwords, tokens and multifactor authentication. For example, an access request from a familiar account might still be treated as suspicious if it arrives from an unusual device, at an abnormal time, with an unfamiliar sequence of commands or alongside a sudden attempt to retrieve large quantities of data. Federated models could learn these patterns across distributed environments, while zero-trust controls could convert the resulting risk assessment into an immediate decision. In principle, this would allow access permissions to change continuously rather than remaining fixed until an administrator reviews them.

One of the most difficult targets described in the review is fileless malware. Unlike conventional malware, which may install a recognizable program on disk, fileless attacks can use legitimate tools already present on a system. Malicious instructions may be injected into memory, delivered through scripts, hidden in registry entries or executed through administrative utilities such as PowerShell. Because there may be little or no malicious file to scan, signature-based antivirus software can miss the attack. Detection instead requires behavioral analysis: monitoring parent-child process relationships, command sequences, memory activity, script execution, privilege changes, network connections and other events that, taken together, suggest abuse of a trusted tool.

Machine-learning systems can search this high-dimensional stream of endpoint and network telemetry for combinations of events associated with compromise. Supervised models learn from labeled examples of benign and malicious activity, whereas unsupervised or semi-supervised models identify unusual patterns when labeled attacks are scarce. Deep-learning systems can capture complex relationships across sequences of events, but they may be difficult to interpret and vulnerable to changes in the operating environment. A zero-trust response could limit the suspicious process, revoke a token, require fresh authentication or quarantine the endpoint while an incident-response team investigates. The review emphasizes that automated prevention must be carefully governed: an incorrect decision could interrupt a hospital system, halt an industrial process or lock out legitimate users.

The authors frame telemetry as the connective tissue linking detection and enforcement. Telemetry includes the continuously generated records of what devices, users, applications and services are doing. In a distributed architecture, these signals may be produced at endpoints, gateways, cloud workloads, containers and edge devices. AI can transform them into risk scores, while federated learning can help models improve across organizational boundaries without routinely exporting the underlying records. Zero-trust policy engines can then use the scores to make granular decisions about access. Such a system could be particularly valuable in industrial internet-of-things networks, healthcare platforms, financial services and other settings where systems are geographically distributed and the consequences of delayed detection are high.

The review is not a report of a completed deployment or a benchmark showing that the combined approach outperforms existing security products. No datasets were generated or analyzed, and the paper instead synthesizes prior research, compares the roles of AI, federated learning, zero trust and IAM, and identifies unresolved obstacles. These include communication costs between participants, inconsistent data quality, model drift as attacks evolve, false alarms, limited computing power on edge devices and the difficulty of explaining automated access decisions. Attackers may also target the learning process itself through poisoning, evasion or adversarial examples. Future systems will need stronger defenses against these attacks, standardized evaluation datasets, transparent policies, human oversight and tests in realistic operational environments. The central message is that privacy-preserving collaboration could make AI-driven zero trust more responsive, but the combination should be treated as a security research direction—not yet as a universal cure for cybercrime.

Subject of Research: Integration of federated learning and AI-based zero-trust architecture for cybersecurity, privacy, telemetry, identity and access management, and fileless-malware detection and prevention

Article Title: Federated learning and AI-based ZTA for security, privacy, telemetry, IAM and fileless malware detection and prevention framework: an in-depth review

Article References: Rahman, M.M., Hossain, S. “Federated learning and AI-based ZTA for security, privacy, telemetry, IAM and fileless malware detection and prevention framework: an in-depth review.” International Journal of Data Science and Analytics 22, 283 (2026). Original research page

Image Credits: AI Generated

DOI: 10.1007/s41060-026-01254-y

Keywords: federated learning, zero-trust architecture, artificial intelligence, identity and access management, fileless malware, cybersecurity, privacy-preserving machine learning, network telemetry

Quantum key distribution is heralded as one of the most secure methods for encrypting information, leveraging the principles of quantum mechanics to enable two parties to share cryptographic keys with unconditional security. Unlike traditional encryption, where the security depends on computational complexity, QKD exploits the quantum properties of particles such as photons, ensuring that any attempt at eavesdropping invariably disturbs the quantum state, thus revealing the presence of an intruder. However, scaling QKD to function over large, complex networks introduces significant challenges, including the need for highly optimized routing strategies that account for quantum signal degradation and resource allocation.

The Preferential Path Attachment model proposed in this latest research cleverly draws inspiration from network science principles, particularly those concerning the growth and evolution of complex networks. In classical network theory, preferential attachment describes the phenomenon where new nodes are more likely to connect to already well-connected nodes, leading to a scale-free network topology. Applying this concept to QKD networks, the researchers hypothesize that paths with historically higher reliability and capacity should be favored for establishing secure quantum communication links, thus enhancing overall network performance in a realistic operational environment.

Critically, the model goes beyond simple preferential node attachment by incorporating path-level preferences, which represent the cumulative risk and quality metrics associated with quantum channels. Since quantum links are subject to noise, decoherence, and photon loss, the model evaluates these parameters dynamically, favoring paths that maintain the integrity of the quantum keys during transmission. This granular approach ensures that the network is resilient not only under ideal conditions but also adapts effectively to varying real-world operational disturbances.

The researchers’ methodological framework integrates quantum physical constraints with advanced network theory algorithms. They utilize simulations of network growth where new QKD nodes emerge and establish connections based on probabilistic preferences, influenced by prior successful quantum transmissions. This simulation environment allows for the exploration of emergent network topologies and their impact on key parameters such as secret key rates, quantum bit error rate (QBER), and network throughput. Such comprehensive modeling provides vital insights into optimizing large-scale QKD infrastructures and informs hardware deployment strategies.

One of the compelling outcomes from this study is the demonstration that quantum networks constructed under the Preferential Path Attachment model naturally develop a heterogeneous structure, with high-capacity quantum hubs interspersed with peripheral nodes. This structure parallels classical communication networks like the internet but optimized under quantum mechanical principles. The emergence of such hierarchical topologies could facilitate more efficient routing protocols that minimize latency and maximize the utilization of limited quantum resources like entangled photon pairs and quantum repeaters.

Furthermore, the study explores how the model responds to dynamic network conditions, such as node failures, channel noise fluctuations, and targeted attacks. The adaptive preferential attachment mechanism provides inherent fault tolerance by rerouting quantum keys through alternative high-quality paths, thereby preserving the security and reliability of communication despite environmental perturbations. In this way, the model contributes not only to the design of resilient quantum networks but also advances understanding of risk management in quantum information systems.

Technically, the researchers also delved into the mathematical formulations underpinning the path preference metric. By integrating graph theory metrics such as edge betweenness centrality and conditional fidelity estimates, the model quantifies the desirability of each candidate path for QKD. This dual consideration encapsulates both network geometry and quantum channel characteristics, representing a holistic measure that guides new connections optimally. The introduction of such a sophisticated metric advances previous QKD network models that often relied solely on node degrees or static channel evaluations.

Importantly, the study situates its findings within the imminent landscape of quantum internet development. As various institutions and corporations worldwide strive to establish metropolitan and global-scale quantum communication infrastructures, managing the complexities of large-scale QKD deployment is a pivotal challenge. The Preferential Path Attachment model offers a strategic blueprint to guide quilted networks that combine classical and quantum links, balancing cost, security, and scalability considerations.

Complementing its theoretical contributions, the research team has also validated the model using experimental data from existing QKD testbeds, confirming its predictive accuracy regarding network growth tendencies and path selection. This empirical grounding enhances the credibility and practical relevance of the model, paving the way for pilot implementations in future quantum internet projects. The authors emphasize that collaboration between quantum physicists, network engineers, and cybersecurity experts is essential to realize the full potential of such integrated models.

Moreover, the implications of this research extend beyond communication. Secure quantum key distribution can underpin a broad range of applications such as distributed quantum computing, secure cloud services, and privacy-preserving data exchanges. Hence, optimizing quantum network architectures as done through the Preferential Path Attachment model can accelerate the advent of these transformative technologies, ushering in a new era where data privacy is guaranteed by the laws of physics rather than computational complexity.

Another intriguing dimension of the study involves the prospects of incorporating machine learning techniques into the model’s framework. Adaptive learning algorithms could dynamically recalibrate path preferences in response to real-time network performance feedback and evolving threats. This would enable quantum networks to maintain optimal performance autonomously, even in hostile or rapidly changing environments, significantly bolstering their security and efficiency.

Complementary research to this study could investigate multimodal quantum networks where various types of quantum resources—such as continuous-variable states and discrete-photon entanglement—are interconnected. The Preferential Path Attachment model’s path-centric philosophy might be extended or tailored to these diverse quantum modalities to create unified, hybrid quantum network paradigms. This approach could broaden the scope and applicability of the model, addressing future challenges in global-scale quantum communication.

In conclusion, the Preferential Path Attachment model represents a pivotal step forward in the design and management of quantum key distribution networks. Its innovative incorporation of path-focused attachment rules embodies an evolution of network modeling that aligns closely with the unique constraints of quantum communication channels. The model’s capacity to enhance robustness, optimize routing, and enable scalable growth of QKD networks positions it as a foundational framework for the forthcoming quantum internet age. As quantum technologies march toward maturity, such research heralds a profound transformation in how societies will secure and transmit information.

Significantly, the model’s adaptability and theoretical sophistication resonate well with contemporary challenges in quantum communication, promising to inspire further research efforts and technological innovations. Considering the accelerating pace of quantum technology integration into everyday life, this research equips stakeholders with essential insights and tools for building secure, efficient, and resilient quantum communication infrastructures. The eventual realization of these advanced quantum networks will not only upgrade global cybersecurity standards but also catalyze unprecedented advancements across information sciences and technology sectors.

The scientific community eagerly anticipates subsequent studies building on this foundational work, exploring diverse implementations, potential extensions, and cross-disciplinary applications. Through continued innovation in quantum networking models such as the Preferential Path Attachment, the vision of an ultra-secure, universally accessible quantum internet becomes increasingly tangible—promising a future where the confidentiality and integrity of digital information are guaranteed at the quantum level.

Subject of Research: Quantum key distribution networks and their optimization through preferential path attachment modeling.

Article Title: Preferential path attachment model for quantum key distribution networks.

Article References:
Weiss, J., Lucki, M., Mařík, R. et al. Preferential path attachment model for quantum key distribution networks. Sci Rep (2026). https://doi.org/10.1038/s41598-026-43414-x

Image Credits: AI Generated

Quantum Connected represents an extensive partnership among academic institutions, industry leaders, government entities, and nonprofit organizations, unified in their mission to build a quantum-secure cyber infrastructure. If awarded funding, potentially up to $160 million over a decade, the coalition plans to establish state-of-the-art quantum cybersecurity technologies reflecting the urgency for next-generation solutions that transcend the limitations of classical cryptography. This initiative addresses a critical national priority as advancements in quantum computing pose both risks and opportunities for information protection across all sectors.

David Awschalom, the Liew Family Professor of Molecular Engineering at the University of Chicago and CQE director, emphasizes that quantum technology is the cornerstone for future defense mechanisms in information security. He points out that traditional cybersecurity tools falter against threats empowered by quantum algorithms, necessitating a paradigmatic shift to quantum-resilient protocols. The region’s unique ecosystem combines cutting-edge research institutions, quantum startups, and physical infrastructure, creating fertile ground for innovation. However, securing NSF Engines funding is pivotal to translate these capabilities into tangible economic and security advantages on a national scale.

The CQE’s Midwest region, often referred to as the Quantum Prairie, spans Illinois, Wisconsin, and Indiana, and has developed into a vibrant quantum technology hub. Home to renowned universities and national laboratories, it hosts over twenty quantum-focused startups actively advancing quantum hardware, software, and algorithm development. Among its assets are commercialization centers such as Purdue University Northwest’s Roberts Impact Lab and Hyde Park Labs, which provide shared quantum equipment and collaborative spaces designed to accelerate technology transfer from research to application.

Integral to the region’s quantum ecosystem is the Chicago Quantum Network, a formidable infrastructure enabling researchers and industry participants to access quantum devices and conduct experiments at scale. Supporting this network is the National Quantum Algorithm Center, tasked with pioneering algorithmic breakthroughs essential for practical quantum advantage. Furthermore, the upcoming Illinois Quantum & Microelectronics Park will house the DARPA-Illinois Quantum Proving Ground, offering specialized cryogenic facilities and testbeds to validate emerging quantum hardware under realistic operational conditions.

The Chicago Quantum Summit, hosted by the CQE, is an annual congregation of leaders bridging science, government policy, and industry innovation. By fostering dialogue and collaboration, the summit strengthens the regional and national quantum community, aligning efforts toward shared goals. Scheduled for November 3 and 4, this event attracts top talent and decision-makers, signaling the Midwest’s ongoing commitment to quantum leadership.

The NSF Engines initiative itself is a transformative endeavor, designed to scale regional innovation ecosystems through broad coalitions that integrate diverse sectors. It targets emerging technologies with the potential to confer competitive economic and strategic advantages to the United States. Quantum technology exemplifies this goal, with its capacity to revolutionize communication security, optimization problems, and computational science. The NSF Engines’ support enables the maturation of nascent technologies into commercially viable and nationally impactful solutions.

Quantum Connected’s progress benefits from a foundation laid by a prior NSF Development Award received in 2024, which enabled deeper partnership cultivation and workforce development strategies across the tri-state region. Building on this momentum, the coalition is poised to accelerate the translation of quantum research into security solutions that can resist future quantum-enabled cyber intrusions, addressing one of the most pressing challenges in digital defense.

In parallel with NSF support, CQE also leads the US Economic Development Administration-designated Bloch Quantum Tech Hub. This initiative accelerates quantum technology development with a strong emphasis on strengthening the US economic and national security landscape. The Bloch Tech Hub notably facilitated the entry of Bluefors, a global leader in cryogenic measurement systems critical to quantum hardware, into the US market by establishing the first Bluefors Lab services domestically, enhancing local quantum infrastructure capabilities.

The potential impact of the Quantum Connected coalition is substantial, given the rapidly evolving landscape of cyber threats. Traditional cryptographic systems, underpinning global digital communications, are vulnerable to quantum attacks capable of rendering current encryption obsolete. Quantum Key Distribution (QKD), post-quantum cryptography, and other quantum-safe protocols under development within this coalition promise to establish new standards for secure information transfer, ensuring the resilience of critical national infrastructure.

Looking forward, the NSF Engines program anticipates announcing awardees by early 2026. Should Quantum Connected secure funding, the Midwest region will receive not only financial resources but also a strategic platform to spearhead innovations that maintain US competitiveness. This vision aligns with national imperatives to lead in emerging technology domains vital to economic growth and security. The coalition’s efforts exemplify how synergistic academia-industry-government collaborations can address complex technological challenges and create economic opportunities.

Ultimately, the progress of Quantum Connected underscores the imperative for sustained investment and coordinated regional innovation ecosystems in the quantum domain. As quantum technologies mature from laboratory curiosities to deployable solutions, initiatives like this will define the trajectory of national cybersecurity capabilities. With cybersecurity threats evolving rapidly, quantum advantage may represent the critical breakthrough needed to secure data integrity, privacy, and trust in digital systems worldwide, affirming the Midwest as a pivotal player in the quantum revolution.

Subject of Research: Quantum technology for cybersecurity and regional innovation ecosystems.

Article Title: Midwest Quantum Coalition Advances to NSF Engines Final Round to Secure National Cybersecurity.

News Publication Date: June 2024.

Web References:
– https://www.nsf.gov/funding/initiatives/regional-innovation-engines
– https://chicagoquantum.org/NSFEngine
– https://chicagoquantum.org/midwest-quantum-region
– https://chicagoquantum.org/quantum-economy/quantum-companies-region
– https://whova.com/portal/registration/2qOszmV50Ty8Uh0lAWyH/3hfauzr9
– https://chicagoquantum.org/resources/whatisquantum
– https://chicagoquantum.org/news/chicago-region-designated-us-tech-hub-quantum-technologies-biden-harris-administration
– https://quantumcomputingreport.com/bluefors-opens-cryogenic-lab-facility-in-chicago-to-support-quantum-technology-development/

Image Credits: Chicago Quantum Exchange

Keywords

Scientific community; Quantum information; Applied sciences and engineering; Science careers; Research programs; Geographic regions; North America; Applied physics