零信任架构在网络信任体系中的应用  

Application of Zero Trust Architecture in Network Trust System

作　　者：余双波 李春燕 周吉 薛艳珠 周佳 YU Shuang-bo;LI Chun-yan;ZHOU Ji;XUE Yan-zhu;ZHOU Jia(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2020年第10期2533-2537,共5页Communications Technology

基　　金：四川省科技计划资助(No.2018JY0377)。

摘　　要：网络信任体系作为网络信息安全的重要因素,是保障网络空间实体活动的核心基石;零信任架构作为一种新兴安全模式,以信任评估为基础,强调动态信任,为网络信任体系的建设应用提供了新的思路。通过分析网络信任体系和零信任架构模型的典型结构,总结零信任架构模型在不同网络信任体系环境中的应用情况,指出实际应用部署过程存在的不足和需要关注的重点,为零信任架构在我国党政军民各领域的具体实现提供有力支撑。As an important factor of network information security,network trust system is the core cornerstone to ensure the activities of cyberspace entities,and as an emerging security model,zero trust architecture based on trust evaluation,emphasizes dynamic trust and provides a new idea for the construction and application of network trust system.By analyzing the typical structure of network trust system and zero trust architecture model,the application of zero trust architecture model in different network trust system environments is summarized,and the shortcomings in the actual application and deployment process and the key points that need attention pointed out,so as to provide strong support for the specific realization of the zero trust architecture in the Party,government,military and civilian fields of China.

关 键 词：网络信任体系 零信任架构 信任评估 动态信任 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]