Quantitative Comparative Analysis of Traditional, Virtualized, and Cloud-Based DMZ Architectures for Securing Local Area Networks

الملخص

Demilitarized Zone (DMZ) architectures are widely deployed to protect Internet-facing services in local area networks. However, their quantitative security effectiveness across physical, virtualized, and cloud-based environments remains insufficiently documented. This study presents a structured and reproducible quantitative comparison of these DMZ architectures using controlled and simulated cyberattack scenarios. Security performance was evaluated using measurable indicators including intrusion probability, recovery time, and service availability. The experimental analysis demonstrates that DMZ deployment significantly reduces successful intrusion probability and improves network resilience compared to non-segmented architectures. Physical DMZ architectures provide the highest isolation level, while virtualized and cloud-based environments DMZs offer improved scalability and faster recovery capabilities. The results contribute a quantitative evaluation framework to support secure network architecture design and provide insights for integrating DMZ with modern security paradigms such as Zero Trust.