Zero Trust Score-based Network-level Access Control in Enterprise Networks

Zero Trust security has recently gained attention in enterprise network security. One of its key ideas is making network-level access decisions based on trust scores. However, score-based access control in the enterprise domain still lacks essential elements in our understanding, and in this paper, we contribute with respect to three crucial aspects. First, we provide a comprehensive list of 29 trust attributes that can be used to calculate a trust score. By introducing a novel mathematical approach, we demonstrate how …

access access control attention contribute control cs.cr domain enterprise enterprise networks ideas key making network networks network security respect score security trust trust score understanding zero trust zero trust security