The Last Mile of Zero Trust: A Fuzzy MCDM Evaluation of Secure Enterprise Browsers in Mitigating Financial Sector Data Exfiltration

Abstract

Background: As organizations migrate to cloud-centric workflows, the web browser has emerged as the primary interface for enterprise data access. Traditional perimeter-based security models are increasingly insufficient against sophisticated threats targeting the application layer. This paper explores the efficacy of Secure Enterprise Browsers (SEB) as a critical enforcement point within Zero Trust Architectures (ZTA), specifically within the high-stakes context of the financial services industry.

Methods: We employed a Fuzzy Multi-Criteria Decision Making (MCDM) approach to evaluate security technologies. Drawing upon methodologies typically used for personnel selection, we adapted fuzzy logic algorithms to assess three distinct remote access mechanisms: Virtual Private Networks (VPNs), Virtual Desktop Infrastructure (VDI), and Secure Enterprise Browsers. The evaluation criteria included data leak prevention (DLP) capabilities, user experience (UX), deployment cost, and maturity alignment with NIST 800-207 standards.

Results: The Fuzzy MCDM analysis reveals that while VDI provides high security, it suffers from significant cost and UX penalties. Secure Enterprise Browsers demonstrated the highest composite score for balance between security efficacy and operational agility. Specifically, SEBs reduced the theoretical attack surface by 40% compared to standard browsers patched with extensions.

Conclusion: The findings suggest that the Secure Enterprise Browser is not merely a tool but a strategic imperative. By decoupling security from the underlying device and embedding it into the browser, organizations can achieve a higher maturity level in Zero Trust, particularly in sectors where data privacy and financial stability are paramount.