Services for Zero Trust Architectures - A Research Roadmap

Bertino, Elisa; Brancik, Kenneth

doi:10.1109/icws53863.2021.00016

Cited by 8 publications

(6 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this phase, those users will operate by the unprivileged simulation in audit mode for a well-defined period to ensure qualified traffic. Then, users and devices having qualified traffic for a defined period can be activated and assigned to the unprivileged network [5], [18]. The results from the migration of the pilot program need to be validated to ensure that users can successfully be migrated to the Zero Trust environment or that the migration encounters any issues.…”

Section: • Phase 2: Validate Pilot Resultsmentioning

confidence: 99%

“…The results from the migration of the pilot program need to be validated to ensure that users can successfully be migrated to the Zero Trust environment or that the migration encounters any issues. If experiencing issues, the migration team should switch back to the old technologies and test the systems to ensure that the migration of the pilot program can continue as planned [18], [20].…”

Section: • Phase 2: Validate Pilot Resultsmentioning

confidence: 99%

“…It can be challenging for an enterprise to develop valid, consistent, comprehensive ZT policies to support ZT decisions. The ZT policies must be up-to-date with the context changes and access restrictions [18]. Many enterprises use simple access control policies, such as RBAC or ABAC.…”

Section: ) Zero Trust Policiesmentioning

confidence: 99%

“…Then, risk management should be planned to address the identified risks. The results of a risk assessment can be used to identify security patterns in the ZT ecosystem [3], [18]. Furthermore, performing a security risk assessment can assist the enterprise in identifying actors and assets that must be protected, as well as considering migration with low-risk processes [13].…”

Section: 12) Perform Security Risk Assessmentmentioning

confidence: 99%

See 3 more Smart Citations

A Comprehensive Framework for Migrating to Zero Trust Architecture

Phiayura

Teerakanok

2023

IEEE Access

View full text Add to dashboard Cite

Migrating to Zero Trust Architecture (ZTA) is a strategic approach to strengthen the enterprise's security postures. The shift to ZTA requires changes across the enterprise which can be challenging to achieve. Utilizing an effective framework for migrating from the old security architecture to ZTA can help ensure smooth transitioning to the Zero Trust journey. In previous research, the effective frameworks and processes for migrating to ZTA have not been achieved in an integrated and comprehensive manner. This study introduces a comprehensive framework for migrating to ZTA. The methodology of this study is to analyze and synthesize published studies relating to ZTA migration. The findings from existing knowledge construct a process-driven for the ZTA migration. In addition, the study addresses migration challenges and gaps in existing ZTA migration approaches. As a result, a comprehensive Zero Trust migration framework is developed to construct streamlined processes. The proposed framework can be used as a reference model for effective transitioning to ZTA.

show abstract

Section: • Phase 2: Validate Pilot Resultsmentioning

confidence: 99%

Section: • Phase 2: Validate Pilot Resultsmentioning

confidence: 99%

Section: ) Zero Trust Policiesmentioning

confidence: 99%

Section: 12) Perform Security Risk Assessmentmentioning

confidence: 99%

See 2 more Smart Citations

A Comprehensive Framework for Migrating to Zero Trust Architecture

Phiayura

Teerakanok

2023

IEEE Access

View full text Add to dashboard Cite

show abstract

“…AI technologies are considered as enablers for the Security Orchestration, Automation and Response (SOAR) solutions designed to automate and integrate different security tasks and processes in response to incidents [74]. SOAR is also one of the functions to be considered in the execution of ZTA [12],…”

Section: Introductionmentioning

confidence: 99%

Automation and Orchestration of Zero Trust Architecture:Potential Solutions and Challenges

Cao¹,

Pokhrel²,

Zhu³

et al. 2022

Preprint

View full text Add to dashboard Cite

<p>Zero Trust Architecture (ZTA) is a paradigm shift in how we protect data, stay connected, and access resources. ZTA is non-perimeter based defense, which has been emerging as a promising revolution in the cybersecurity field. It can be used to continuously maintain security by safeguarding against attacks both from inside and outside of the network system. However, automation and orchestration ZTA, an essential direction towards its seamless deployments over real-word networks, have been poorly understood in literature. In this paper, we first identify the bottlenecks, discuss the background of ZTA and compare it with traditional perimeter-based security architectures. More importantly, we present a comprehensive direction towards the automation and orchestration of ZTA by employing AI techniques. In other words, the key potential and roles of celebrates AI techniques for the automation and orchestration of ZTA are demonstrated for further exploration. Overall, in this review paper, we develop a foundational view on the challenges and potential enablers for the automation and orchestration of ZTA.</p>

show abstract

Automation and Orchestration of Zero Trust Architecture: Potential Solutions and Challenges

Cao,

Pokhrel,

Zhu

et al. 2024

Mach. Intell. Res.

View full text Add to dashboard Cite

Zero trust architecture (ZTA) is a paradigm shift in how we protect data, stay connected and access resources. ZTA is non-perimeter-based defence, which has been emerging as a promising revolution in the cyber security field. It can be used to continuously maintain security by safeguarding against attacks both from inside and outside of the network system. However, ZTA automation and orchestration, towards seamless deployment on real-world networks, has been limited to be reviewed in the existing literature. In this paper, we first identify the bottlenecks, discuss the background of ZTA and compare it with traditional perimeter-based security architectures. More importantly, we provide an in-depth analysis of state-of-the-art AI techniques that have the potential in the automation and orchestration of ZTA. Overall, in this review paper, we develop a foundational view on the challenges and potential enablers for the automation and orchestration of ZTA.

show abstract

Services for Zero Trust Architectures - A Research Roadmap

Cited by 8 publications

References 16 publications

A Comprehensive Framework for Migrating to Zero Trust Architecture

A Comprehensive Framework for Migrating to Zero Trust Architecture

Automation and Orchestration of Zero Trust Architecture:Potential Solutions and Challenges

Automation and Orchestration of Zero Trust Architecture: Potential Solutions and Challenges

Contact Info

Product

Resources

About