面向高等院校的零信任建设方案研究

Research on Zero-Trust Construction Plan for Higher Education Institution

随着网络威胁态势的持续增加,我国高等院校所采用的网络安全架构暴露出一定程度的不足。基于零信任安全模型,以零信任理念为核心优化高等院校的网络安全架构,制定网络访问控制策略,实现基于身份、行为和上下文的持续验证与授权管理,确保任何实体在网络中的活动都处于严格的监控与管控之下,从而大幅提升高等院校整体的网络安全防护能力,为高校营造一个更为稳固且可信赖的网络生态环境,以保障我国高等教育信息化建设的安全运行与发展。

With the continuous intensification of cyber threats,the cyber security architecture adopted by Chinese higher education institutions has also exposed certain deficiencies.By drawing on and practicing the zero-trust security model,and optimizing and upgrading the cyber security of higher education institutions in a comprehensive and in-depth manner with the zero-trust concept as the core,this paper refines the design of network access control policies in order to achieve continuous verification and authorization management based on identity,behavior,and context,and to ensure that the activities of any entity in the network are strictly monitored and controlled,so as to significantly enhance the overall cyber security protection ability of higher education institutions,and to build a more stable and reliable network ecological environment for higher education institutions,and thus guarantee the safe operation and development of China’s higher education informationization construction.