Skip to content
uencoder

Zero Trust

Zero trust is the "never trust, always verify" security model: no trust merely for being inside the network; every access verifies identity and authorization.

Purpose

To replace network-perimeter-based trust, preventing internal lateral movement and spread after perimeter breach.

Mechanism

Core principles: verify explicitly, least privilege, assume breach. Every request verifies identity, device state, and context. Microsegmentation isolates resources. SDP (software-defined perimeter) hides resources until authenticated. Trust is continuously re-evaluated.

Use cases

  • Cloud-native security architecture
  • Remote work access control
  • Inter-microservice authentication
  • Compliance (NIST 800-207)

Examples

  • Input 
    Verify identity + device + context per request
    Output 
    Authorize or deny

    No implicit trust

Common errors

Replacing the perimeter with identity checks but skipping microsegmentation
Combine identity + segmentation + least privilege

Related terms

PKI
PKI (Public Key Infrastructure) is the system managing digital certificates and public keys, comprising CAs, registration authorities, certificate repositories, and revocation mechanisms, underpinning TLS and signatures.
GLOSSARY
CA
A CA (Certificate Authority) is a trusted third party that issues digital certificates binding public keys to identities, serving as the trust root of PKI.
GLOSSARY
TLS
TLS (Transport Layer Security) provides encryption, integrity, and authentication at the transport layer; it replaced SSL and underpins HTTPS, SMTPS, and more.
GLOSSARY
OAuth
OAuth 2.0 is an authorization framework that lets third-party applications access a user's resources with the user's consent, without sharing passwords, by using tokens.
GLOSSARY

References