Zero trust using Network Micro Segmentation
Nabeel Sheikh, Mayur M Pawar, Victor B. Lawrence
Abstract
Current enterprise infrastructures are undergoing significant security transformations as traditional infrastructures and data centers are being replaced by cloud computing environments hosting dynamic workloads. Current network security best practices are not well suited for traditional data centers where network micro segmentation is required. In this paper, we present a novel network security architecture that supports zero trust approach, based on a concept that inspects network traffic for port and protocol information to allow authorized communication. This approach is demonstrated in a cloud computing data center environment.
Topics & Concepts
Computer scienceCloud computingComputer networkComputer securityNetwork architectureNetwork securityArchitectureDistributed computingOperating systemArtVisual artsSoftware-Defined Networks and 5GCloud Computing and Resource ManagementCaching and Content Delivery