The ZT (Zero Trust) model is proposed to make information systems secure. Here, all the operations from subjects are assumed to be not trustworthy. Authorization decisions for the operations are made in a trust algorithm. Here, types of information on an operation is checked. However, how to prevent the illegal information flow is not made clear. In this paper, we newly propose an information flow control in the ZT model. We consider the sets of objects whose data flow to subjects and objects. Based on these sets, the current behaviors trusts of subjects are decided in the trust algorithm. If the trust is larger than the threshold for an object, the operation is performed. In the evaluation, most of the illegal information flow can be prevented in the ZT model with the information flow control while about 43% of operations are implying the illegal information flow in the ZT model without the information flow control.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Zero Trust Model with the Information Flow Control

  • Shigenari Nakamura,
  • Lidia Ogiela,
  • Makoto Takizawa

摘要

The ZT (Zero Trust) model is proposed to make information systems secure. Here, all the operations from subjects are assumed to be not trustworthy. Authorization decisions for the operations are made in a trust algorithm. Here, types of information on an operation is checked. However, how to prevent the illegal information flow is not made clear. In this paper, we newly propose an information flow control in the ZT model. We consider the sets of objects whose data flow to subjects and objects. Based on these sets, the current behaviors trusts of subjects are decided in the trust algorithm. If the trust is larger than the threshold for an object, the operation is performed. In the evaluation, most of the illegal information flow can be prevented in the ZT model with the information flow control while about 43% of operations are implying the illegal information flow in the ZT model without the information flow control.