In the present day, as the number of connected devices increases exponentially, an organization faces challenges in monitoring, managing and detecting vulnerable devices. Moreover, by the introduction of Bring Your Own Device (BYOD) schemes in an organization, the device management and vulnerability assessment has become one of the key security requirements. The zero trust system uses both the user and device identity to provide the access to the requested resources. Hence, it is important to understand the security posture of the device before providing the requested resource access. ‘InTrust’ is an asset monitoring, analysis and vulnerability assessment system for zero trust network access system. InTrust automatically keeps track of the list of assets, operating system, services & their vulnerabilities and brings out the security posture. These inputs can be used to derive the dynamic trust score for a resource access in the Zero Trust network. As InTrust uses a non-intrusive and privacy-aware approach for data collection, it can cater to all enterprise and e-governance networks where security and transparency are critical to the organization.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

InTrust: An Asset Monitoring, Analysis and Vulnerability Assessment System for Zero Trust Network

  • N. Muraleedharan,
  • Hrishikesh Rajendra Neve,
  • Samar Sarkar,
  • Balaji Rajendran

摘要

In the present day, as the number of connected devices increases exponentially, an organization faces challenges in monitoring, managing and detecting vulnerable devices. Moreover, by the introduction of Bring Your Own Device (BYOD) schemes in an organization, the device management and vulnerability assessment has become one of the key security requirements. The zero trust system uses both the user and device identity to provide the access to the requested resources. Hence, it is important to understand the security posture of the device before providing the requested resource access. ‘InTrust’ is an asset monitoring, analysis and vulnerability assessment system for zero trust network access system. InTrust automatically keeps track of the list of assets, operating system, services & their vulnerabilities and brings out the security posture. These inputs can be used to derive the dynamic trust score for a resource access in the Zero Trust network. As InTrust uses a non-intrusive and privacy-aware approach for data collection, it can cater to all enterprise and e-governance networks where security and transparency are critical to the organization.