互联网应用前后置分离架构与零信任技术融合架构研究

Research on Integration Architecture of Internet Application Front&Rear Separation and Zero Trust Technology

核电关键信息基础设施关系国家安全。为了解决在云计算和远程办公兴起的背景下,核电企业很难保护日益分散的环境和并不严密的边界;数据在多个服务、设备、应用和人员中生成、存储和共享访问的网络安全和数据安全威胁,文章探讨了一种新的网络安全融合架构的构建方法,通过互联网应用前后置分离设计融合零信任技术的体系架构,实现内置于系统设计和运营中的内生安全,试图解决能源行业网络空间普遍存在的新的安全共性问题。

The critical information infrastructure of nuclear power is related to national security.This paper explores a new method for constructing a network security integration architecture to address the difficulty of protecting the increasingly dispersed environment and loosely defined boundaries of nuclear power enterprises in the context of the rise of cloud computing and telecommuting.Data can be generated,stored,and shared across multiple services,devices,applications,and personnel,which poses a threat to network security and data security.By using a system architecture that separates the front and rear of Internet applications and integrates zero-trust technology,it can achieve endogenous security built into the system design and operation,and attempt to solve the common security problems existing in the cyberspace of the energy industry.