基于Overlay技术的零信任网络研究  

A Zero Trust Network Research Based on Overlay Technology

作　　者：刘远 孙晨 张嫣玲[3] LIU Yuan;SUN Chen;ZHANG Yanling(China Petrochemical Corporation,Beijing 100728,China;Petro-cyber Works Information Technology Co.,Ltd.,Beijing 100007,China;MPS Information Classified Security Protection Evaluation Center,Beijing 100142,China)

机构地区：[1]中国石油化工集团有限公司,北京100728 [2]石化盈科信息技术有限责任公司,北京100007 [3]公安部信息安全等级保护评估中心,北京100142

出　　处：《信息网络安全》2020年第10期83-91,共9页Netinfo Security

基　　金：国家重点研发计划[2018YFB0803503]。

摘　　要：随着云计算、移动互联网、物联网和5G技术的飞速发展,企业加快了数字化转型和IT环境的演变。传统边界网络架构以及边界安全防御模型是针对日渐势微的传统业务架构设计的,无法满足当下数字业务的动态安全访问需求。企业需要积极的调整网络安全架构,以应对在新型网络架构下的安全需求。文章以构建无边界网络架构下的安全防御模型为研究目标,运用了Overlay网络技术和零信任安全模型,并结合实践经验,提出了一种建设企业新一代信息基础设施的方法,具有普遍参考意义。With the rapid development of cloud computing,mobile Internet,Internet of things,and 5G technology,enterprises have accelerated the digital transformation and the evolution of the IT environment.The traditional boundary network architecture and boundary security defense model are designed for the declining traditional business architecture,which can’t meet the dynamic security access requirements of digital services.Enterprises need to actively adjust the network security architecture to meet the security needs under the new network architecture.Based on the research goal of constructing the security defense model under the framework of borderless network and coupled with the combination of practical experience,this paper uses overlay network technology and zero trust security model and puts forward a method to build a new generation of information infrastructure in enterprises,which has universal reference significance.

关 键 词：零信任 OVERLAY网络 无边界网络 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]