InTrust: An Asset Monitoring, Analysis and Vulnerability Assessment System for Zero Trust Network
摘要
In the present day, as the number of connected devices increases exponentially, an organization faces challenges in monitoring, managing and detecting vulnerable devices. Moreover, by the introduction of Bring Your Own Device (BYOD) schemes in an organization, the device management and vulnerability assessment has become one of the key security requirements. The zero trust system uses both the user and device identity to provide the access to the requested resources. Hence, it is important to understand the security posture of the device before providing the requested resource access. ‘InTrust’ is an asset monitoring, analysis and vulnerability assessment system for zero trust network access system. InTrust automatically keeps track of the list of assets, operating system, services & their vulnerabilities and brings out the security posture. These inputs can be used to derive the dynamic trust score for a resource access in the Zero Trust network. As InTrust uses a non-intrusive and privacy-aware approach for data collection, it can cater to all enterprise and e-governance networks where security and transparency are critical to the organization.