Dynamic Access Control and Authorization System based on Zero-trust architecture

Abordagem confiança zero aplicada a ambientes computacionais big data: um estudo de caso

“…Os autores [Yao et al 2020] apresentam um sistema dinâmico de controle de acesso e autorizac ¸ão a partir de retratos de comportamento dos usuários em tempo real para obtenc ¸ão de dinamismo no controle de acesso e refinamento na autorizac ¸ão. Os autores não aplicam em um contexto real.…”

Migrating to Zero Trust Architecture: Reviews and Challenges

“…Similarly, in October 2020, Yao et al [6] proposed a dynamic access control and authorization system for ZTA.…”

“…A subject accessing any resource outside its normal access pattern may raise a flag which can lead to a more thorough investigation. A good example of deploying a behavior-based approach in ZTA is presented by Yao et al [6] in 2020. In [6], the subject's behavior is continuously observed and calculated into a behavior trust (BT).…”

“…A good example of deploying a behavior-based approach in ZTA is presented by Yao et al [6] in 2020. In [6], the subject's behavior is continuously observed and calculated into a behavior trust (BT). Access to a resource is granted only if BT exceeds the trust threshold (TT) which may change dynamically depending on the environment.…”

“…Enterprises should exercise the least privilege policy [10] so that there is only the least amount of data and resources available to a subject. e least privilege policy can be applied with dynamic trust-based access control (see [5,6], for example) to provide granular visibility of data. Also, an individual resource should be protected at the border of that resource (using resource gateway, for example).…”