Dynamic Access Control and Authorization System based on Zero-trust architecture
Dynamic Access Control and Authorization System based on Zero-trust architecture
复制标题
基于零信任架构的动态访问控制与授权系统
DOI：
10.1145/3437802.3437824
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Jiaxuan Fei
中科院分区：
文献类型：
--
作者：
Qigui Yao;Qi Wang;Xiaojian Zhang;Jiaxuan Fei
随着云计算、人工智能、大数据等技术的发展，网络系统面临着越来越多的安全风险和威胁。传统的基于边防的安全体系结构已不能满足日益增长的安全防护要求。零信任安全体系结构具有连续身份认证和最小化权限分配的特点，能够适应当前大多数网络系统的安全防护要求。基于零信任安全体系结构，提出了一种动态访问控制和授权系统。根据用户行为生成用户画像和用户信任。系统采用不同场景下的实时分级控制，实现动态、细粒度的访问控制和授权。
With the development of cloud computing, artificial intelligence, big data and other technologies, network systems are facing more and more security risks and threats. The traditional security architecture based on border protection cannot meet the increasing security protection requirements. The zero-trust security architecture which has the characteristics of continuous identity authentication and minimized authority allocation can adapt to the security protection requirements of most current network systems. Based on the zero-trust security architecture, a dynamic access control and authorization system is proposed. User portraits and user trust are generated according to user behavior. Real-time hierarchical control in different scenarios is used in the system to achieve dynamic and fine-grained access control and authorization.