Theory and Application of Zero Trust Security: A Brief Survey

Abstract

As cross-border access becomes more frequent, traditional perimeter-based network security models can no longer cope with evolving security requirements. Zero trust is a novel paradigm for cybersecurity based on the core concept of “never trust, always verify”. It attempts to protect against security risks related to internal threats by eliminating the demarcations between the internal and external network of traditional network perimeters. Nevertheless, research on the theory and application of zero trust is still in its infancy, and more extensive research is necessary to facilitate a deeper understanding of the paradigm in academia and the industry. In this paper, trust in cybersecurity is discussed, following which the origin, concepts, and principles related to zero trust are elaborated on. The characteristics, strengths, and weaknesses of the existing research are analysed in the context of zero trust achievements and their technical applications in Cloud and IoT environments. Finally, to support the development and application of zero trust in the future, the concept and its current challenges are analysed.

Master-slave Multi-chain with Risk Assessment based Access Control Model for Zero Trust Network

“…We use T i to represent the sum of the communication time between node i and other nodes on the chain, as shown in Eq. (3).…”

“…However, the rise of novel cyber threats such as insider threat attacks [1] and forged identity attacks [2] has rendered traditional network security models inadequate in ensuring current network security. Consequently, the concept of a zero trust network [3] was introduced.…”

“…(2) The principles of least privilege and dynamic allocation must be adhered to when assigning access rights to subjects in a zero trust network [7]. (3) In a zero trust network, continuous assessment of the access risk for each subject is necessary, based on the historical access behavior of that subject [8].…”