Zero Trust in Plain Language

Name: Zero Trust in Plain Language
ISBN: 9787121435812

冀托Publishing House of Electronics Industry · ChinaJun 2023

3.5

Word count: 194K words
Chapters: 73
ISBN: 9787121435812

Report an error Find this book

Summary

Zero trust has been a hot topic in security in recent years and has moved into implementation across several industries. For zero trust, the important challenges we face include which scenarios to start from, how to build it methodically, how to transition safely and stably, and how to use and operate it once built.

This book explores these questions and summarizes lessons from practice, offering reference for the actual planning and construction of enterprise networks.

The book mainly introduces the history, current state, architecture, and components of zero trust, summarizes zero trust's defense methods against various security threats, and presents the architecture and features of zero trust in ten application scenarios. Through the implementation results and deployment experience of several typical cases, it explains how to plan and build a zero trust network according to actual conditions and how to use zero trust for overall security operations.

This book is suitable for practitioners in the cybersecurity industry, enterprise technical personnel, and anyone interested in cybersecurity.

Editor's review

The value of Plain-Language Zero Trust lies in pulling zero trust back from conceptual slogans to engineering implementation. The author does not stop at architecture diagrams and stacks of terminology but instead addresses the practical questions enterprises care about most: which scenarios to start from, how to build in phases, how to ensure a smooth business transition, and how to sustain operations after completion. The book sorts through the history and current state, architecture, and components of zero trust and maps defense methods against various security threats to architecture designs across ten application scenarios, giving abstract principles a referable form of implementation. The typical case section sets out implementation experience and results, which is especially useful for planners. The writing follows a plain-language approach with relatively restrained technical expression, making it suitable as a team-wide alignment read. When reading, it is advisable to compare each scenario architecture with your own organization's current network and jot down a gap list as you go; this yields more than a single cover-to-cover read.

Who it's for

A good fit for

Cybersecurity practitioners who need a systematic understanding of zero trust architecture and its implementation path
Enterprise IT and security leaders who are planning or advancing zero trust initiatives
Technical personnel interested in zero trust who want to build an overall understanding starting from scenarios
Presales and implementation staff at security vendors who need reference architectures and case experience across multiple scenarios

Not a good fit for

Technical experts seeking in-depth protocol details and code-level implementation
Readers with no foundation who lack basic networking and security concepts will struggle
University researchers looking for academic theoretical reviews or cutting-edge research materials

Reading tips

Read the history and architecture sections first to build a framework, then closely read the chapters corresponding to your industry's scenarios
When reading each scenario architecture, compare it with your organization's current state and list gaps and renovation priorities
For the case chapters, you can first look at implementation experience and results, then revisit the earlier architecture designs
When reading as a team, assign chapters to lead readers and organize discussions around transition and operations issues

About the publisher

Publishing House of Electronics Industry China · Founded in 1982

The Publishing House of Electronics Industry is a comprehensive publisher distinguished by its focus on electronic information and related fields. Judging from the more than 3,000 titles in its catalogue, its publishing covers programming and design, artificial intelligence, computer science, finance and economics, photography, and social sciences, attending both to cutting-edge technology and to general readers. Representative titles include Factor Investing: Methods and Practice, x86 Assembly Language: From Real Mode to Protected Mode, The RISC-V Reader, Artificial Intelligence: Speech Recognition, Understanding and Practice, Phased Array Radar Technology, Radar Target Characteristics, and 100 Go Mistakes and How to Avoid Them, most of which centre on technical methods and engineering practice. Its authors include Shi Chuan, Li Zhong, Wang Xiaobo, David Patterson, Andrew Waterman, and Yu Zihao, among others from China and abroad. Owing to limited public information, no further publishing features are elaborated here.

版权信息
作者介绍
内容简介
前言
1 零信任的历史
1.1 零信任理念的诞生
1.2 最早的零信任实践——谷歌BeyondCorp
1.3 国外零信任行业的大发展
1.4 零信任行业技术标准
1.5 令人眼花缭乱的国内市场
1.6 过热之后必然经历幻灭和重生
2 零信任的概念
2.1 零信任的假设
2.2 零信任的原则
2.3 拿传染病防控打个比方
2.4 对零信任的几个误解
2.5 零信任的价值
2.6 零信任的风险及应对措施
3 零信任架构
3.1 当前网络架构
3.2 零信任网络架构
3.3 零信任安全能力地图
3.4 零信任的典型用例
3.5 零信任的量化评价指标
4 零信任组件技术
4.1 零信任的隐身黑科技
4.2 零信任安全网关
4.3 动态权限引擎
4.4 风险与信任评估
4.5 零信任的终端安全闭环
4.6 微隔离
4.7 统一身份管理
4.8 SASE与ZTE
5 零信任攻防案例
5.1 从一个模拟案例看零信任的作用
5.2 从4次黑客大赛看SDP的战斗力
5.3 零信任VS勒索病毒
5.4 零信任VS黑客攻击链
5.5 攻防能力总结表
6 零信任的应用场景
6.1 员工安全远程办公
6.2 多租户统一接入平台
6.3 第三方人员的轻量级接入门户
6.4 零信任的旁路模式
6.5 零信任数据安全
6.6 云上应用的防护
6.7 API数据交换的安全防护
6.8 物联网的安全防护
6.9 零信任与等保合规
6.10 安全开发和运维
7 零信任落地案例精选
7.1 某零售企业的典型SDP案例
7.2 某金融企业的分级访问控制体系
7.3 某互联网企业的全球接入平台
7.4 谷歌的零信任网络安全体系
8 零信任建设最佳实践
8.1 成熟度自测
8.2 建设路线规划
8.3 如何获取各方支持
8.4 零信任如何融入现有架构
8.5 无感知的用户体验
8.6 资源有上千个，权限怎么配置
8.7 渐进式的灰度上线
8.8 保障业务可用性
8.9 零信任自身被攻陷了怎么办
9 零信任安全运营指南
9.1 制定安全制度
9.2 如何处理安全事件
9.3 常见风险的自动响应
9.4 如何优化异常检测模型
9.5 攻防演练
9.6 总结汇报
参考文献

FAQ

Can I understand this book without a security background?

The book follows a plain-language approach with relatively restrained terminology, but it still assumes readers have basic networking and security concepts. Those with no foundation at all should first acquire common knowledge such as network layering, identity authentication, and access control before reading; otherwise they may get stuck in the architecture and components sections. People with operations or IT experience will find it relatively smooth to get started.

What exactly are the ten application scenarios in the book?

The materials indicate that the book presents the architecture and features of zero trust in ten application scenarios but do not list the scenario names one by one. They can be understood as a categorized discussion covering common enterprise access and connectivity situations. When reading, focus on the scenarios closest to your own business forms and compare architecture features to judge applicability; there is no need to give equal weight to all.

Can this book directly guide a zero trust project?

It can serve as a planning reference. The book discusses which scenarios to start from, how to build methodically, how to transition safely and stably, and how to operate after completion, and it introduces implementation results and deployment experience through typical cases. However, specific plans still need to be evaluated in light of your organization's current network, business dependencies, and budget; the book's experience should be used as reference rather than copied wholesale.

Which industries do the cases in the book cover?

The materials only state that several typical cases are used to introduce implementation results and deployment experience, without listing specific industries. When reading, do not fixate on industry labels; what is more worth attention is the thinking and trade-offs in planning, construction, transition, and operations in the cases, and these lessons are transferable to most industries.

Comments

Find this book

This site is an index: you start “Search all sources” in your browser, and the entries it lists all point to third-party sites; please judge their availability yourself.

About the author

冀托 Author

Ji Tuo is the author of Baibai Zero Trust (Zero Trust in Plain Language), a book usually classified under general computing. Public information about the author is limited: his nationality, dates of birth and death, English name, and professional background are all unconfirmed, and only this one work of his is included in the collection. Judging from the title and category, the book is aimed at readers interested in network security and zero-trust architecture and seeks to explain this specialized technical concept in accessible language. The name Ji Tuo shows no indication of being an institutional byline, so he is treated as an individual author. Because so little is known about him, any assessment of his writing style and influence must rest on the positioning of this single book: the emphasis on plain language suggests that he values lowering the barrier to entry, preferring to clarify concepts in straightforward terms rather than piling up jargon or listing products. This approach is friendly to general readers who want an initial understanding of zero-trust ideas, while further details about his other writing, industry role, and the book's reception await more public information.