Security of Zero Trust Networks in Cloud Computing: A Comparative Review

Abstract

Recently, networks have shifted from traditional in-house servers to third-party-managed cloud platforms due to its cost-effectiveness and increased accessibility toward its management. However, the network remains reactive, with less accountability and oversight of its overall security. Several emerging technologies have restructured our approach to the security of cloud networks; one such approach is the zero-trust network architecture (ZTNA), where no entity is implicitly trusted in the network, regardless of its origin or scope of access. The network rewards trusted behaviour and proactively predicts threats based on its users’ behaviour. The zero-trust network architecture is still at a nascent stage, and there are many frameworks and models to follow. The primary focus of this survey is to compare the novel requirement-specific features used by state-of-the-art research models for zero-trust cloud networks. In this manner, the features are categorized across nine parameters into three main types: zero-trust-based cloud network models, frameworks and proofs-of-concept. ZTNA, when wholly realized, enables network administrators to tackle critical issues such as how to inhibit internal and external cyber threats, enhance the visibility of the network, automate the calculation of trust for network entities and orchestrate security for users. The paper further focuses on domain-specific issues plaguing modern cloud computing networks, which leverage choosing and implementing features necessary for future networks and incorporate intelligent security orchestration, automation and response. The paper also discusses challenges associated with cloud platforms and requirements for migrating to zero-trust architecture. Finally, possible future research directions are discussed, wherein new technologies can be incorporated into the ZTA to build robust trust-based enterprise networks deployed in the cloud.

PALANTIR: An NFV-Based Security-as-a-Service Approach for Automating Threat Mitigation

“…Despite significant advances in security enforcement, attackers are still able to compromise organisations’ computing resources [ 55 ], explained by the increasing management complexity handled by security teams [ 56 ]. In our approach, the FSMs open the opportunity to formalise and personalise the policy decisions related to user behaviour, organisational systems, and data in all access contexts.…”

Techniques and protocols for enhancing data privacy in cloud computing: A review

“…Security of customer data is a prerequisite, as well as being a daily function. Hence, cloud services use security systems [80], [81], [82], [83] that utilize a distributed architecture that can absorb, filter, and deflect malicious requests that pose a threat to the system [61], [71].…”

“…Manpower is freed to engage in other tasks, creating economic value. However, their reliance on the cloud providers for data security and lack of control over their data in the cloud creates a security and data privacy problem as they do not know where the data is stored or even how it is handled at the storage location [61], [85].…”

“…Authors in [61] in their work 'Security of Zero Trust Networks in Cloud Computing: A Comparative Review.' observe that despite the network shift from traditional in-house servers to third-party-managed cloud platforms for costeffectiveness and increased accessibility, these networks remains reactive and relatively un-accountable for its overall data security.…”

“…As most business activities shift to online, cloud security issues continue to skyrocket. The ever-increasing activities of malicious criminals highlight many cloud flaws including; remote access, end-user education and awareness especially, against social engineering , mis-configured cloud systems, BYOD policies, social engineering attacks such as phishing, phishing with malware payloads and brute force attacks and Distributed Denial-of-Service (DDoS) [58], [60], [61].…”