{"id":39359,"date":"2019-10-31T22:30:52","date_gmt":"2019-10-31T19:30:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chto-takoe-zero-trust-model-bezopasnosti\/"},"modified":"2019-10-31T22:30:52","modified_gmt":"2019-10-31T19:30:52","slug":"chto-takoe-zero-trust-model-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/chto-takoe-zero-trust-model-bezopasnosti","title":{"rendered":"What is Zero Trust? The Security Model","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"What
\n
\nZero Trust (\"zero trust\") is a security model developed by former Forrester analyst John Kindervag<\/a><\/noindex> in 2010. Since then, the zero-trust model has become the most popular concept in cybersecurity. Recent massive data breaches only underscore the need for companies to pay more attention to cybersecurity, and the Zero Trust model may be the right approach.<\/p>\n

Zero Trust signifies a complete lack of trust in anyone\u2014 even users inside the perimeter. The model assumes that every user or device must verify their credentials every time they request access to any resource inside or outside the network. <\/p>\n

Read on if you want to learn more about the Zero Trust security concept.
\n<\/a><\/noindex><\/p>\n

How the Zero Trust Concept Works <\/h1>\n

\n\"What
\n
\nThe Zero Trust concept has evolved into a comprehensive approach to cybersecurity, encompassing various technologies and processes. The goal of the zero trust model is to protect the company from modern cybersecurity threats and data breaches while also achieving compliance with legal regulations on data protection and security.<\/p>\n

Let's analyze the key areas of the Zero Trust concept. Forrester advises organizations to focus on each of these points to build the best zero-trust strategy. <\/p>\n

Zero Trust Data:<\/strong> Your data is what attackers are trying to steal. Therefore, it is entirely logical that the first principle of the zero trust concept is data protection first and foremost, not last.<\/a><\/noindex>This means the necessity to analyze, protect, classify, track, and maintain the security of your corporate data. <\/p>\n

Zero Trust Networks:<\/strong> For information theft, attackers need to be able to move within the network, so your task is to make this process as difficult as possible. Segment, isolate, and control your networks using modern technologies, such as next-generation firewalls specifically designed for these purposes. <\/p>\n

Zero Trust Users:<\/strong> People are the weakest link in the security strategy. Limit, monitor, and strictly enforce principles of user access to resources within the network and internet. Set up VPN, CASB (Cloud Access Security Brokers), and other access options to protect your employees. <\/p>\n

Zero Trust Load:<\/strong> The term load is used by service and infrastructure control representatives to refer to the entire stack of applications and backend software that your clients use to interact with your business. Unpatched client applications are a common attack vector that needs to be defended against. Consider the entire technology stack\u2014from the hypervisor to the web frontend\u2014as a threat vector and protect it with tools that adhere to the 'zero trust' concept. <\/p>\n

Zero Trust Devices:<\/strong> With the rise of the Internet of Things (smartphones, smart TVs, smart coffee makers, etc.), the number of devices residing within your networks has sharply increased in recent years. These devices are also potential attack vectors and should be segmented and monitored like any other computer on the network.<\/p>\n

Visualization and Analytics:<\/strong> For the successful implementation of the 'zero trust' principle, provide your security and incident response staff with tools for visualizing everything happening in your network, as well as analytics for understanding the significance of events. Protection Against Advanced Threats<\/a><\/noindex> and User Behavior Analytics are key aspects in successfully combating any potential threats in the network.<\/a><\/noindex> Automation and Management:<\/p>\n

helps maintain the operability of all your systems under a 'zero trust' model and track compliance with Zero Trust policies. People simply cannot keep up with the volume of events required for the 'zero trust' principle.<\/strong> Automation<\/a><\/noindex> 3 Principles of the Zero Trust Model<\/p>\n

Require secure and verified access to all resources<\/h1>\n

\n\"What
\n<\/p>\n

The first foundational principle of the Zero Trust concept is\u2014 <\/h3>\n

\nauthentication and verification authentication and verification<\/a><\/noindex><\/strong> all access rights to all resources. Every time a user accesses a file resource, application, or cloud storage, it's necessary to perform re-authentication and authorization of that user for that specific resource.
\nYou should consider every<\/i> attempt to access your network as a threat until proven otherwise, regardless of your hosting model and the source of the connection. <\/p>\n

Use the principle of least privilege and control access <\/h3>\n

\nThe principle of least privilege<\/a><\/noindex><\/strong> is a security paradigm that limits each user's access rights to the level necessary for them to perform their job duties. By restricting access to each employee, you prevent an attacker from gaining access to a large amount of data through the compromise of a single account.
\nUse role-based access control (RBAC)<\/a><\/noindex><\/strong>, in order to achieve least privilege and give business owners the ability to manage permissions to their controlled data themselves. Regularly conduct assessments of rights and group membership. <\/p>\n

Monitor everything <\/h3>\n

\nThe principles of 'zero trust' imply controlling and verifying everything. Logging every network call, file access, or email for analysis of malicious activity is not something that a single person or an entire team can achieve. Therefore, use data security analytics<\/a><\/noindex><\/strong> on top of the collected logs to easily detect threats in your network, such as brute-force attacks<\/a><\/noindex>, malware, or silent data exfiltration. <\/p>\n

Implementing a zero trust model <\/h1>\n

\n\"What
\n
\nLet's highlight several key recommendations <\/i>for implementing a zero trust model:<\/p>\n

    \n
  1. Update every element of your cybersecurity strategy to align with the principles of Zero Trust: <\/strong> Review all parts of your current strategy for compliance with the aforementioned principles of 'zero trust' and adjust them as necessary. <\/li>\n
  2. Analyze the technology stack being used and check if it requires updates or replacements to achieve Zero Trust: <\/strong> Consult the manufacturers of the technologies used about their compliance with the principles of Zero Trust. Reach out to new vendors to explore additional solutions that may be required for implementing a Zero Trust strategy.<\/li>\n
  3. Adhere to a methodical and conscious approach when implementing Zero Trust: <\/strong> set measurable tasks and achievable goals. Ensure that new solution providers also align with the chosen strategy. <\/li>\n<\/ol>\n

    <\/p>\n

    Zero Trust Model: Trust Your Users<\/h1>\n

    \nThe term \u2018Zero Trust\u2019 is somewhat misleading; however, the phrase \u2018trust nothing, verify everything\u2019 doesn\u2019t quite capture its essence either. You do need to trust your users, if<\/i> (and that\u2019s a significant 'if') if they have passed an adequate level of authorization and your monitoring tools have not detected anything suspicious. <\/p>\n

    Zero Trust Principle with Varonis<\/h1>\n

    \nWhen implementing the Zero Trust principle, Varonis allows for a security-centric approach: data security:<\/i><\/p>\n