基于零信任理念的私有云安全方案研究  

Research on Private Cloud Security Scheme Based on Zero Trust Concept

作　　者：蔺旋 王宏鼎[2] 徐宝辰 Lin Xuan;Wang Hongding;Xu Baochen(China Information Technology Designing&Consulting Institute Co.,Ltd.,Beijing 100048,China;Intelligent Network&Innovation Center of China Unicom,Beijing 100048,China)

机构地区：[1]中讯邮电咨询设计院有限公司,北京100048 [2]中国联通智网创新中心,北京100048

出　　处：《邮电设计技术》2022年第9期55-58,共4页Designing Techniques of Posts and Telecommunications

摘　　要：首先介绍了私有云技术及面临的安全风险,然后介绍了零信任技术架构及零信任体系中的软件定义边界(SoftwareDefinedPerimeter,SDP)和微隔离(MicroSegmentation,MSG),在此基础上设计了基于零信任理念的私有云优化安全解决方案,接着针对优化方案与传统安全方案进行对比总结,最后展望了零信任技术在云环境中的发展和应用前景。It first introduces the private cloud technology and the security risks it faces,and then introduces the zero-trust technology architecture,software defined perimeter(SDP)and micro segmentation(MSG)in the zero-trust system.On this basis,it designs a private cloud optimization security solutions based on the concept of zero trust,then it compares and summarizes the optimized solutions and traditional security solutions,and finally looks forward to the development and application prospects of zero-trust technology in the cloud environment.

关 键 词：私有云 零信任 SDP MSG 

分 类 号：TN915.08[电子电信—通信与信息系统]