Cyber Security

Intrusion Detection System (IDS)

Zero Trust Security Model (+MCQs)

By Vanka Manikanth, on April 12, 2020

What is Zero Trust Security Model?

The original Zero Trust model was developed by Forrester in 2010, but not fully incorporated until Google successfully developed and implemented their version of Zero Trust, Beyond Corp, almost six years later. Let's understand what exactly the Zero Trust model is and what it means to implement one?

In this security landscape who and what you trust is key to your security, privacy, and anonymity.

The less you trust the lower your risk. If you want to minimize the risk do not trust even yourself unless you make sure what you are doing with multiple checks this is what the Zero Trust Model.

To protect your asset we have to make choices about trust. We have to select the Operating system. Software, encryption process, storage management, Internet service provider, password manager, etc. Evaluate instead of having trust, because there is no such 100 percent security and 0 percent risk. Everything represents some level of risk some acceptable while some not. We can mitigate the risk by distributing trust.

In simple words, Zero Trust is a security model centered on the belief that organizations should not automatically trust anything inside or outside its perimeters and instead must verify anything and everything trying to connect to its systems before granting access. Micro-segmentation has to be followed- giving minimal access to specific modules. It is effective for mobile and cloud apps

Before Zero Trust we have Castle and Moat Security where Access will be given to full modules for authenticated users

Let us understand deep about it.

Suppose you wanted to store files or sync all your data into cloud storage like dropbox, syncing service. You should not trust that it will not get hacked; you should not trust your data will not be modified. So you have to take a risk choice or assessment basing upon the Zero Trust Model. Ask yourself how important the data is for you? If it is more important then have a backup at a separate location and encrypt the files with the key which you alone have. This way you are distributing the trust to alternatives to add up layers of security to your confidential information.