Cloud computing is the development drift of the IT industry. This modern cloud computing has grabbed remarkable attention in recent days owing to its high-quality on-demand service accessibility and flexible nature. It not only has huge advantages but also has numerous security shortcomings that no organization can afford to overlook. The security perspective of cloud computing infrastructure is often viewed to be the prime element, as data and services of the cloud are not confined to a single organization. Therefore, cloud security plays a crucial role to establish trust among the cloud service providers and the multiple cloud service consumers. Subsequently, trust management ensures both security and privacy in the cloud computing infrastructure. However, in the traditional cloud computing infrastructure all the cloud entities once authorized can get access to the cloud services throughout the life cycle of the session. As a result, it is vulnerable to insider attack. Therefore, in this paper, we have proposed a Zero Trust Network Access (ZTNA) architecture that intends to continuously verify a cloud entity throughout the lifecycle of the session, regardless of the fact that the entity is inside/outside the cloud computing infrastructure. Further, we have analyzed the security aspects of the proposed architecture that ensure our architecture is well-secured against relevant security attacks.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Zero Trust Network Access (ZTNA) Architecture: A Novel Perspective to Cloud Security

  • Priyanka Das,
  • Sangram Ray,
  • Mahesh Chandra Govil

摘要

Cloud computing is the development drift of the IT industry. This modern cloud computing has grabbed remarkable attention in recent days owing to its high-quality on-demand service accessibility and flexible nature. It not only has huge advantages but also has numerous security shortcomings that no organization can afford to overlook. The security perspective of cloud computing infrastructure is often viewed to be the prime element, as data and services of the cloud are not confined to a single organization. Therefore, cloud security plays a crucial role to establish trust among the cloud service providers and the multiple cloud service consumers. Subsequently, trust management ensures both security and privacy in the cloud computing infrastructure. However, in the traditional cloud computing infrastructure all the cloud entities once authorized can get access to the cloud services throughout the life cycle of the session. As a result, it is vulnerable to insider attack. Therefore, in this paper, we have proposed a Zero Trust Network Access (ZTNA) architecture that intends to continuously verify a cloud entity throughout the lifecycle of the session, regardless of the fact that the entity is inside/outside the cloud computing infrastructure. Further, we have analyzed the security aspects of the proposed architecture that ensure our architecture is well-secured against relevant security attacks.