引入内生安全的零信任模型

Introduction of Endogenous Security of Zero Trust Model

零信任安全架构是对传统边界网络安全架构进行评估和审视,要求结合多种来源的信息资源和判别机制进行认证授权访问。然而由于零信任安全架构采用控制中心的体系架构来进行系统搭建,导致单一零信任系统核心组件和数据库易遭受攻击。将内生安全体系引入零信任安全架构,通过动态异构冗余机理将系统组件异构化改造,使得零信任安全架构获得了内生安全增益。安全性分析和动态性分析表明本系统架构具有普适性,能够集约化地实现网络服务、可靠性保障与安全防御等功能。

Zero-trust security architecture was used to evaluate and examine the security architecture of traditional border networks.It required the combination of information resources and discrimination mechanisms from multiple sources for authentication and authorization access.Due to the use of the control center architecture,the core components and databases of zero-trust system were vulnerable to attack.To solve these two problems,the endogenous security architecture was introduced into the zero-trust security architecture,and retrofitted the system components by the dynamic heterogeneous redundancy mechanism,so that the zero-trust security architecture obtained the endogenous security gain.The security analysis and dynamic analysis showed that the proposed system architecture was universal,and could intensively realize the functions of network service,assure the reliability,and increase the security defense.