The Diana Initiative 2021

Zero Trust Network is a paradigm shift from the existing security infrastructure, which proposes **“Trust no one, Inspect everyone”.**

The current scenario of Network Security highly depends on the assumption that if a client has a set of “good” credentials, they can be trusted with access to all or at least some confidential resources of the network.
Back to reality – with exponential data usage nowadays, there is a definite increase in the degree of a data breach in an organization. So, with the conventional checks, any “authenticated” client, making a connection from “outside” or “inside” can access this data and possibly exploit it. Most of the time, unknowingly.
Having just a single security layer solution like VPNs or 1st Gen Firewalls but still relying on the good old dictionary credentials for SSH is evidently not good enough.

The Zero Trust approach involves a combination of stronger authentication methods like MFA, profiling, posturing of the client device, and performing stronger encryption checks.
Only after complete holistic verification of the entity, “thou shall pass!”.

So how does it do a better job? How scalable is it? And why trust the “Zero Trust”?