融合媒体转型中零信任架构在网络安全中的研究与实践

Research and Practice of Zero-trust Architecture under Convergence Media Transformation

为应对新IT时代网络安全挑战的全新战略,在借助融合媒体转型的机遇下舟山广播电视总台(以下简称舟山广电)针对网络、应用、数据进行了零信任架构的改造探索,可概括为以身份为中心的动态访问控制,是在不可信的现代网络环境下,以身份为中心,通过动态访问控制技术,以细粒度的应用、接口、数据为核心保护对象,遵循最小权限原则,构筑端到端的逻辑身份边界,从而促进网络安全技术系统的完善,提升舟山广电生产工作效率。

To cope with the new strategy of network security challenges in the new IT era,Zhoushan Radio and Television Station(hereinafter referred to as Zhoushan Radio and Television)has carried out the transformation and exploration of zero-trust architecture for networks,applications and data.This can be summarized as identity centered dynamic access control,which is centered on identity in an untrusted modern network environment,using dynamic access control technology to protect fine-grained applications,interfaces,and data as the core objects,following the principle of minimum permissions,and constructing end-to-end logical identity boundaries,thereby promoting the improvement of network security technology systems and improving the production efficiency of Zhoushan Radio and Television.