基于零信任理念的企业端到端安全解决方案研究  

Research on End-to-End Zero Trust Security Solutions for Enterprises

作　　者：蔺旋 李长连 徐宝辰 贺译册 余思阳 Lin Xuan;Li Changlian;Xu Baochen;He Yice;Yu Siyang(China Information Technology Designing&Consulting Institute Co.,Ltd.,Beijing 100048,China;Intelligent Network&Innovation Center of China Unicom,Beijing 100046,China)

机构地区：[1]中讯邮电咨询设计院有限公司,北京100048 [2]中国联通智网创新中心,北京100046

出　　处：《邮电设计技术》2023年第8期14-18,共5页Designing Techniques of Posts and Telecommunications

摘　　要：随着数字化转型和业务上云的发展需求日益增长,企业在云原生背景下的防护能力成为其安全建设的重点,传统的网络安全架构无法满足技术架构和业务模式变革下的安全需求。通过整合零信任核心技术,提出了一种满足企业端到端的零信任安全解决方案。首先介绍了企业IT架构变化下的安全需求及零信任理念和其核心技术,并在此基础上设计了企业端到端零信任安全解决方案。随后对零信任安全解决方案和传统的安全方案进行了对比分析,最后展望了零信任安全在云原生环境下的应用前景。With the growing demand for Digital transformation and cloud based business development,the protection capability of enterprises in the cloud native background has become the focus of their security construction.The traditional network security architecture can not meet the security needs under the technical architecture and business model change.A zero trust security solution that meets the end-to-end needs of enterprises has been proposed by integrating zero trust core technologies.It first introduces the enterprise security requirements under the changes in enterprise IT architecture,as well as the zero trust concept and its core technologies.Based on this,an end-to-end zero trust security solution for enterprises is designed.Subsequently,it compares and analyzes zero trust security solutions with traditional security solutions,and finally looks forward to the application prospects of zero trust security in cloud native environments.

关 键 词：零信任 虚拟安全域 SDP MSG 

分 类 号：TN915.08[电子电信—通信与信息系统]