美国《国防部零信任参考架构》解读  

Interpretation of U.S.DoD Zero Trust Reference Architecture

作　　者：徐莉 陈倩[1] XU Li;CHEN Qian(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《信息安全与通信保密》2022年第1期38-44,共7页Information Security and Communications Privacy

摘　　要：零信任从基于网络的防御转变为以数据为中心的模型,并且不向用户授予隐性信任,以防止潜在的恶意行为体在网络中移动。美国《国防部零信任参考架构》是国防信息系统局、国家安全局、美国网络司令部和私营部门之间持续合作的产物,它为国防机构和IT部门提供了一个蓝图,为国防部大规模采用零信任设定了战略目的、原则、相关标准和其他技术细节,旨在增强美国国防部的网络安全并保持美军在数字战场上的信息优势,是美国国防部向零信任迈进的加速剂。Zero trust changes from network-based defense to data-centric model,and does not grant hidden trust to users to prevent potential malicious actors from moving in the network.The U.S.Department of Defense Zero Trust Reference Architecture is the product of continued cooperation between the Defense Information Systems Agency,the National Security Agency,the U.S.Cyber Command,and the private sector.It provides a blueprint for defense agencies and IT departments to set strategic objectives,principles,relevant standards,and other technical details for the Department of Defense’s large-scale adoption of zero trust.Aimed at enhancing the network security of the U.S.Department of Defense and maintaining the U.S.military’s information advantage on the digital battlefield,it is an accelerating agent for the U.S.Department of Defense to move towards zero trust.

关 键 词：零信任 零信任参考架构 网络安全 网络防御 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]