نهج مقترح لتطبيق سياسات الوصول للبيانات وفق انعدام الثقة ودمجها بأمن الوصول السحابي لمواجهة التصيد الاحتيالي الخفي

This study proposes a security framework integrating Zero Trust data access policies with a Cloud Access Security Broker (CASB) to mitigate shadow phishing. It combines continuous identity and device verification, contextual risk assessment, traffic inspection, and data loss prevention. The proposed methodology covers application discovery, behavioral baselining, policy formulation, CASB integration, and controlled attack simulations. Candidate machine learning methods support anomaly detection, traffic classification, and content analysis. Planned evaluation measures include blocking rates, false positives, latency, and session revocation time. Expected benefits are tighter control of unauthorized transfers and reduced lateral movement. The contribution is architectural; effectiveness and performance remain subject to implementation and comparative testing.