Zero Trust Architecture (ZTA): A Comprehensive Survey

Syed, Naeem Firdous; Shah, Syed Wajid Ali; Shaghaghi, Arash; Anwar, Adnan; Baig, Zubair A.; Doss, Robin

doi:10.1109/access.2022.3174679

Cited by 60 publications

(18 citation statements)

References 145 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Na bateria de testes, utilizou-se a solução ZT com o framework PRITUNL-Zero que adota um algoritmo de confiança baseado em atributos [18]. Antes de serem executadas no PLC, as requisições foram validadas pela central ZT e implementadas por meio da biblioteca PyModBus, sendo apresentadas por meio de uma HMI em Flask ofertada ao navegador do operador/usuário.…”

Section: A Cenários Dos Experimentos E Métricasunclassified

Avaliação do Impacto da Arquitetura de Confiança Zero em Aplicações de Controle Industrial

Cruz,

Fonseca

2023

Anais Do XLI Simpósio Brasileiro De Telecomunicações E Processamento De Sinais

View full text Add to dashboard Cite

Resumo-A gestão eficiente dos equipamentos na indústria moderna é possibilitada pelo uso de aplicações de controle industrial para coletar e gerir dados. Com a integração de tecnologias de informação à tecnologia operacional, há um aumento significativo da malha de rede e a possibilidade de surgimento de vulnerabilidades. Este trabalho apresenta uma avaliação do impacto da arquitetura de segurança orientada a Confiança Zero em plantas industriais, utilizando métricas como latência, jitter e vazão na rede. Os resultados preliminares sugerem que a Confiança Zero permite um controle mais rigoroso na operação da rede, tendo pequena influência na resposta, no consumo de recursos computacionais e no desempenho da rede.Palavras-Chave-Redes industriais, Protocolo MODBUS TCP/IP, Confiança Zero, Segurança em redes de comunicação.

show abstract

Section: A Cenários Dos Experimentos E Métricasunclassified

Avaliação do Impacto da Arquitetura de Confiança Zero em Aplicações de Controle Industrial

Cruz,

Fonseca

2023

Anais Do XLI Simpósio Brasileiro De Telecomunicações E Processamento De Sinais

View full text Add to dashboard Cite

show abstract

“…He et al [20] provide a study on the advantages and disadvantages of access control models and authentication protocols and compare popular evaluation methods for trust. This work about access control methods and authenticating protocols in a network is also the focus of Syed et al [21]. They discuss the challenges to such an architecture and expand its scope towards software-defined perimeters and micro-segmentation.…”

Section: Comparison With Existing Survey Articlesmentioning

confidence: 99%

Security of Zero Trust Networks in Cloud Computing: A Comparative Review

et al. 2022

View full text Add to dashboard Cite

Recently, networks have shifted from traditional in-house servers to third-party-managed cloud platforms due to its cost-effectiveness and increased accessibility toward its management. However, the network remains reactive, with less accountability and oversight of its overall security. Several emerging technologies have restructured our approach to the security of cloud networks; one such approach is the zero-trust network architecture (ZTNA), where no entity is implicitly trusted in the network, regardless of its origin or scope of access. The network rewards trusted behaviour and proactively predicts threats based on its users’ behaviour. The zero-trust network architecture is still at a nascent stage, and there are many frameworks and models to follow. The primary focus of this survey is to compare the novel requirement-specific features used by state-of-the-art research models for zero-trust cloud networks. In this manner, the features are categorized across nine parameters into three main types: zero-trust-based cloud network models, frameworks and proofs-of-concept. ZTNA, when wholly realized, enables network administrators to tackle critical issues such as how to inhibit internal and external cyber threats, enhance the visibility of the network, automate the calculation of trust for network entities and orchestrate security for users. The paper further focuses on domain-specific issues plaguing modern cloud computing networks, which leverage choosing and implementing features necessary for future networks and incorporate intelligent security orchestration, automation and response. The paper also discusses challenges associated with cloud platforms and requirements for migrating to zero-trust architecture. Finally, possible future research directions are discussed, wherein new technologies can be incorporated into the ZTA to build robust trust-based enterprise networks deployed in the cloud.

show abstract

“…economic analysis [17], intrusion detection [4] and authentication [132]. Yan and Wang [151] reviews the key technologies in the components of ZTA, and their application in real-world scenarios.…”

Section: Existing Surveysmentioning

confidence: 99%

“…Since it is important to determine whether the subject requesting access is legitimate, authentication and authorization are fundamental considerations when trying to implement zero trust [132]. In this section, we provide an overview of AI-based techniques for access control.…”

Section: Contextual Continuous Access Controlmentioning

confidence: 99%

Automation and Orchestration of Zero Trust Architecture:Potential Solutions and Challenges

Cao¹,

Pokhrel²,

Zhu³

et al. 2022

Preprint

View full text Add to dashboard Cite

<p>Zero Trust Architecture (ZTA) is a paradigm shift in how we protect data, stay connected, and access resources. ZTA is non-perimeter based defense, which has been emerging as a promising revolution in the cybersecurity field. It can be used to continuously maintain security by safeguarding against attacks both from inside and outside of the network system. However, automation and orchestration ZTA, an essential direction towards its seamless deployments over real-word networks, have been poorly understood in literature. In this paper, we first identify the bottlenecks, discuss the background of ZTA and compare it with traditional perimeter-based security architectures. More importantly, we present a comprehensive direction towards the automation and orchestration of ZTA by employing AI techniques. In other words, the key potential and roles of celebrates AI techniques for the automation and orchestration of ZTA are demonstrated for further exploration. Overall, in this review paper, we develop a foundational view on the challenges and potential enablers for the automation and orchestration of ZTA.</p>

show abstract

Zero Trust Architecture (ZTA): A Comprehensive Survey

Cited by 60 publications

References 145 publications

Avaliação do Impacto da Arquitetura de Confiança Zero em Aplicações de Controle Industrial

Avaliação do Impacto da Arquitetura de Confiança Zero em Aplicações de Controle Industrial

Security of Zero Trust Networks in Cloud Computing: A Comparative Review

Automation and Orchestration of Zero Trust Architecture:Potential Solutions and Challenges

Contact Info

Product

Resources

About