.png){kind=icon}
返回
ZTSFC: A Service Function Chaining-Enabled Zero Trust Architecture
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2023.3330706.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Recently, zero trust security has received notable attention in the security community. However, while many networks use monitoring and security functions like firewalls, their integration in the design of zero trust architectures remains largely unaddressed. In this article, we contribute with respect to this aspect a novel network security architecture called Zero Trust Service Function Chaining (ZTSFC). With ZTSFC, we achieve three main improvements over zero trust architectures: (1) the zero trust components can directly integrate other monitoring and security functions into their access decisions, (2) an efficient flow of information between zero trust components, monitoring, and security functions are achieved, and (3) ZTSFC improves the performance with respect to hardware load and user experience. As proof of concept, we implemented a publicly available ZTSFC prototype based on HTTPS and the policy language ALFA. Using this prototype, we demonstrate the achievement of all three improvements in representative use cases. In addition, our performance evaluation compares ZTSFC with a regular zero trust network without ZTSFC. The results indicate that ZTSFC can reduce CPU usage by 25% for specific monitoring and security functions in certain scenarios. Overall, we also observed a 30% decrease in the time it takes to access services with ZTSFC.
Keyword:
Zero Trust
IP networks
Authentication
Security
Inspection
Service function chaining
Network security
Network performance
network security
zero trust
access control
service function chaining
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
.png){kind=icon}
MOLECULAR DETECTION OF ASTROVIRUS USING REVERSE TRANSCRIPTASE QUANTITATIVE POLYMERASE CHAIN REACTION TECHNIQUE使用逆转录定量聚合酶链式反应技术进行星状病毒分子检测OAAI
OAAI分享收藏Efficient Provisioning of Security Service Function Chaining Using Network Security Defense Patterns
PREAI
分享收藏Radioisotope power systems in space missions: Overview of the safety aspects and recommendations for the European safety case空间任务中的放射性同位素动力系统: 安全方面概述和欧洲安全案例的建议
PREAI
分享收藏
分享收藏
查看更多内容