Zero Trust Security Model for Enterprise Networks

• Published in: Iraqi Journal of Information & Communication Technology Vol. 6; no. 2; pp. 68 - 77
• Main Authors: M. Habash, Rania, Khalel, Mahmood
• Format: Journal Article
• Language: English
• Published: College of Information Engineering 15.12.2024
• Subjects: Cybersecurity; Enterprise network; Never trust; Zero Trust model; Zero Trust security
• ISSN: 2222-758X; 2789-7362
• DOI: 10.31987/ijict.6.2.223

Zero Trust (ZT) is security model and follow the concept of ânever trust, always verifyâ. ZT require to strict identity verification for devise and clients trying to access recourses on private networks regardless of whether they are sitting within or outside the networks. As opposed to perimeter-based architecture, which makes the assumption that all internal network parties are trusted and all external network parties are untrusted. In enterprise network the internal network parties is automatically seen as trusted entities granting them access to network resources. The insider threat actor has been successful in exploiting their access. So that, enterprise networks become more exposed to inside and outside threads. As a result, we need to add the zero-trust principle to the enterprise network to protect it from the inside. In this paper, the ZT model, is assumed inside the militarized zone. There may be a threat to the sensitive data. Any internal company network users cannot manipulation on his computer without permission from the administrator this is done by the group policies that have been implemented in ZT. This model has been shown to be quite effective in protecting the sensitive data against unauthorized access and also the manipulation by the insider user. Following that, an attack originating from inside of the network was launched against the enterprise and zero trust network. In the enterprise network, the network was effectively attacked, and the attack’s validity was also increased to fully penetrate the enterprise. The attack did not succeed in the zero-trust network because the attacker cannot pass the User Account Control (UAC) to gain the NT authority.