Cloud-Based Zero Trust Access Control Policy: An Approach to Support Work-From-Home Driven by COVID-19 Pandemic

Abstract

The ubiquitous cloud computing services provide a new paradigm to the work-from-home environment adopted by the enterprise in the unprecedented crisis of the COVID-19 outbreak. However, the change in work culture would also increase the chances of the cybersecurity attack, MAC spoofing attack, and DDoS/DoS attack due to the divergent incoming traffic from the untrusted network for accessing the enterprise’s resources. Networks are usually unable to detect spoofing if the intruder already forges the host’s MAC address. However, the techniques used in the existing researches mistakenly classify the malicious host as the legitimate one. This paper proposes a novel access control policy based on a zero-trust network by explicitly restricting the incoming network traffic to substantiate MAC spoofing attacks in the software-defined network (SDN) paradigm of cloud computing. The multiplicative increase and additive decrease algorithm helps to detect the advanced MAC spoofing attack before penetrating the SDN-based cloud resources. Based on the proposed approach, a dynamic threshold is assigned to the incoming port number. The self-learning feature of the threshold stamping helps to rectify a legitimate user’s traffic before classifying it to the attacker. Finally, the mathematical and experimental results exhibit high accuracy and detection rate than the existing methodologies. The novelty of this approach strengthens the security of the SDN paradigm of cloud resources by redefining conventional access control policy.

Avaliação do Impacto da Arquitetura de Confiança Zero em Aplicações de Controle Industrial

“…A arquitetura de ZT é uma tendência crescente na área de segurança cibernética, que tem ganhado destaque, em especial após os eventos pandêmicos [14]. A arquitetura ZT se baseia na premissa de que nenhum dispositivo é confiável por padrão e as permissões devem ser avaliadas continuamente.…”

Pengaruh Corporate Image dan Trust terhadap Word-of-Mouth Konsumen

“…Bentuk referal yang ada di pelanggan sering membuka saluran baru yang mengizinkan penjual untu kberkomunikasi dengan prospek yang sebelumnya tidak dapat dijangkau. Studi menunjukan bahwa ketika hubungan antar perusahaan dan pelanggan kuat, konsumen lebih bersedia untuk melakukan pembelian ulang terhadap penawaran perusahaan dan merekomendasikannya kepada yang lain (Guo et al, 2018); (Mandal et al, 2021). Mempertahankan hubungan pelanggan yang baik dapat meningkatkan kesediaan mereka untuk memberikan referal (Dawes, 2009).…”

A Survey on Zero Trust Architecture: Challenges and Future Trends

“…However, it does not standardize the format and semantics of the context in ZTF and cannot operate the authorization server and the identifier used when the context cannot be shared. In the same year, Mandal [41] et al proposed a cloud-based zero trust access control strategy by establishing a MAC spoofing defense mechanism in the SDN framework of the cloud architecture to support the work-from-home approach driven by COVID-19. When changes for the access control strategy of the enterprise structure are required, it shows greater accuracy by examining source TCP/IP traffic and corresponding MAC addresses, collecting individual network traffic from untrusted zones.…”