Micro-isolation protection system adopting zero-trust architecture and protection method thereof

Abstract

The invention discloses a micro-isolation protection system and method adopting a zero-trust architecture, the system comprises a logic architecture and a physical architecture, the logic architecture comprises an execution layer, an collection layer, a persistence layer, a logic function layer and a display layer; the physical architecture comprises a strategy control center, a safety gateway and an Agent plug-in; according to the invention, based on full understanding of the cloud computing environment, under the idea of zero-trust safety, multiple safety technologies such as network micro-isolation, safety gateways and system environment perception are integrated, and the effects of south-north traffic safety admission, east-west traffic (adaptive management and control, and real-time network strategy association of the safety state of access equipment) are finally realized.

Description

technical field [0001] The invention belongs to the technical field of network security maintenance, and in particular relates to a micro-isolation protection system adopting a zero-trust architecture and protection thereof. Background technique [0002] With the emergence of new IT technologies such as cloud computing, the increasingly blurred network security boundaries, complex network access environment, and a large number of network assets have also brought new challenges to enterprise security; east-west traffic is difficult to control, huge The network policy is difficult to maintain, the north-south traffic lacks perfect access, and the security level of the access environment is decoupled from the network policy. Traditional protection solutions based on fixed boundaries have gradually begun to fail. [0003] Whether it is for the traditional intranet network environment or the current cloud host network environment, the current network security protection methods h...

AI Technical Summary

Problems solved by technology

[0004] In view of the above-mentioned deficiencies in the prior art, the micro-isolation protection system and method using the zero-trust architecture provided by the present invention solves the difficulty in realizing north-south traffic access control and business application resource access control in the existing network; Difficult to control, easy to trigger springboard attacks; one-time identity verification of network access devices, lack of real-time verification mechanism for device security environment

Images