Software-based, zero trust information security