零信任架构的回望与未来发展研究  

A Retrospective and Future Development Study of Zero Trust Architecture

作　　者：王若晗 向继[1,2] 管长御 王雷 Wang Ruohan;Xiang Ji;Guan Changyu;Wang Lei(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100092;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049)

机构地区：[1]中国科学院信息工程研究所,北京100092 [2]中国科学院大学网络空间安全学院,北京100049

出　　处：《信息安全研究》2024年第10期896-902,共7页Journal of Information Security Research

基　　金：国家自然科学基金项目(62272455)。

摘　　要：随着互联网、大数据和云计算的快速发展,为了应对现代数字化的挑战,零信任架构作为一种新的安全范式被提出.该安全模型建立在从不默认信任任何内部或外部请求的原则上,强调必须通过持续的验证和监控授予访问权限.零信任的核心原则包括全面身份验证、访问控制、最小权限、普遍加密和持续的风险评估与应对.主要通过对零信任架构的发展历史进行回顾,以及对零信任机制的基本概念进行阐述,最后对零信任架构未来的发展进行总结.With the rapid development of the internet,big data,and cloud computing,the zero trust architecture has been proposed as a new security paradigm to address the challenges of modern digitalization.This security model is built on never inherently trusting any internal or external requests,emphasizing that access must be granted through constant verification and monitoring.The core principles of zero trust include comprehensive identity verification,access control,least privilege,pervasive encryption,and continuous risk assessment and response.This article primarily reviews the development history of zero trust architecture,elaborates on the basic concepts of the zero zrust mechanism,and finally summarizes the future development of zero trust architecture.

关 键 词：零信任 零信任架构 零信任机制 云计算 网络空间安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]