CASTLES IN THE CLOUD: A ZERO TRUST APPROACH TO NETWORK ACCESS

摘要

Businesses that once relied on the data centre as a bastion to secure data and services are now reliant on a multi-cloud architecture to deliver applications and workloads to a myriad of consumers and users. The castle and moat analogy is apt at describing the way we used to think about security - place a firewall to guard the perimeter, deploy a de-militarised zone to act as a moat and control access to a vault holding data from inside via a drawbridge controller. In the emerging multi-cloud world with its ephemeral borders, it becomes difficult to apply this model as trust cannot be assured through proximity and data no longer resides in a single place.