Zero Trust Security: From Beginner to Mastery

Name: Zero Trust Security: From Beginner to Mastery
ISBN: 9787121471162

陈本峰 / 贾良钰 / 魏小强 / 董雁超Publishing House of Electronics Industry · ChinaJan 2024

3.5

Word count: 288K words
Chapters: 83
ISBN: 9787121471162

Report an error Find this book

Summary

“Zero Trust,” a buzzword in the security industry, is rapidly moving from a marketing concept to a practical one, transitioning from a security paradigm to implemented practice, and is gradually proving its effectiveness and forward-looking value against new security threats. This book first introduces the origins and concepts of Zero Trust, then presents its key technologies and frameworks, next lists some practical applications of Zero Trust, and finally summarizes and looks ahead to Zero Trust. In addition, the book reviews several industry application cases of Zero Trust, aiming to provide reference and inspiration for enterprises planning to implement Zero Trust and for security practitioners. There is no “silver bullet” in the security industry, and Zero Trust is no exception. Zero Trust is still evolving and improving, and there is much room for improvement; for example, many challenges remain to be resolved during implementation. In choosing Zero Trust, one must also approach it rationally. Zero Trust is a strategy, and implementing it will be a long journey. We invite readers to join us in exploring, thinking about, and growing together on the road to Zero Trust in the years ahead.

Editor's review

This book is organized around Zero Trust as a security paradigm, moving from the origins of the concept to key technologies, frameworks, and practical implementation. Its structure balances theoretical grounding with a review of industry cases, making it accessible to readers who want a systematic overview of Zero Trust. Its value lies in translating an industry buzzword back into understandable technical logic and practical pathways, while candidly acknowledging that Zero Trust is not a panacea and that implementation still faces challenges; this restraint helps readers rationally assess their own needs. The book’s organization of Zero Trust practices and industry cases can provide reference and inspiration for enterprises planning to implement Zero Trust and for security practitioners. It is suitable as a conceptual primer in the early stages of enterprise security construction, and also for security teams to align their understanding before discussing solutions. When reading, it is advisable to compare the content with your organization’s network architecture and business scenarios rather than directly applying the frameworks in the book; the key technology chapters merit repeated reading, while the case studies can be read selectively by industry.

Who it's for

A good fit for

Enterprise security leaders who need to assess whether Zero Trust suits their organization
Security engineers and architects who want a systematic understanding of Zero Trust technologies and frameworks
IT managers who plan to clarify concepts before driving a security paradigm shift
University students and entry-level practitioners interested in Zero Trust

Not a good fit for

Frontline operations staff seeking ready-to-use configuration manuals
Readers hoping for specific product selection and procurement checklists
Readers with no cybersecurity background who are unwilling to build foundational concepts

Reading tips

Read the concept and framework chapters first, then select cases from your industry for close reading, rather than giving equal weight to every chapter.
When reading the key technology sections, take notes against your organization’s existing security architecture and mark possible gaps.
Compile the book’s discussion of Zero Trust’s limitations into a separate risk list for later solution discussions.
Consider having the security team read the book chapter by chapter together and hold an internal workshop on implementation challenges.

About the publisher

Publishing House of Electronics Industry China · Founded in 1982

The Publishing House of Electronics Industry is a comprehensive publisher distinguished by its focus on electronic information and related fields. Judging from the more than 3,000 titles in its catalogue, its publishing covers programming and design, artificial intelligence, computer science, finance and economics, photography, and social sciences, attending both to cutting-edge technology and to general readers. Representative titles include Factor Investing: Methods and Practice, x86 Assembly Language: From Real Mode to Protected Mode, The RISC-V Reader, Artificial Intelligence: Speech Recognition, Understanding and Practice, Phased Array Radar Technology, Radar Target Characteristics, and 100 Go Mistakes and How to Avoid Them, most of which centre on technical methods and engineering practice. Its authors include Shi Chuan, Li Zhong, Wang Xiaobo, David Patterson, Andrew Waterman, and Yu Zihao, among others from China and abroad. Owing to limited public information, no further publishing features are elaborated here.

版权信息
内容简介
“云安全联盟丛书”概述
“云安全联盟丛书”编委会
本书编委会及致谢
序一
序二
专家点评
前言
第1章为什么是零信任
1.1 网络安全不断演进
1.2 传统安全防御体系面临挑战
1.3 零信任安全是网络安全的新选择
1.4 本章小结
第2章零信任概述
2.1 零信任的发展现状
2.2 国家层面对零信任的关注
2.3 零信任的基本概念
第3章身份管理与访问控制（IAM）
3.1 身份管理与访问控制现状
3.2 身份管理与访问控制的基本概念
3.3 身份管理
3.4 身份认证
3.5 访问控制
3.6 审计风控
3.7 IAM发展趋势展望
第4章软件定义边界（SDP）
4.1 SDP的基本概念
4.2 SDP技术架构与通信协议
4.3 SDP技术架构部署模型
4.4 SDP与传统网络安全产品的关系
4.5 SDP应用实践
4.6 SDP安全远程接入（替代VPN）
4.7 SDP帮助企业安全上云
4.8 SDP防御分布式拒绝服务（DDoS）攻击
第5章微隔离（MSG）
5.1 网络安全挑战
5.2 微隔离的基本概念及其技术的发展趋势
5.3 微隔离的价值
5.4 微隔离的4种技术路线
5.5 微隔离的技术趋势
5.6 微隔离的部署实施
5.7 微隔离最佳实践
第6章零信任应用场景
6.1 应用场景概述
6.2 企业内部的安全访问场景
6.3 企业与外部的协作场景
6.4 系统间的安全访问
6.5 物联网安全连接
6.6 安全与合规要求
6.7 敏感数据的零信任方案
第7章零信任的战略规划与实施
7.1 零信任战略综述
7.2 确立零信任战略愿景
7.3 编制零信任战略行动计划
7.4 零信任建设成效评估
7.5 零信任实施问题及解决思路
7.6 本章小结
第8章零信任落地部署模式——SASE
8.1 SASE简介
8.2 SASE的系统架构
8.3 SASE的核心特征
8.4 SASE的核心技术
8.5 SASE的现状与应用
8.6 SASE技术总结
第9章零信任行业评估标准
9.1 零信任专家认证
9.2 零信任能力成熟度模型
第10章零信任实践案例
10.1 Google BeyondCorp实践案例
10.2 政企行业的零信任实践案例
10.3 金融行业的零信任实践案例
10.4 运营商行业的零信任实践案例
10.5 制造业的零信任实践案例
10.6 能源行业的零信任实践案例
10.7 医疗行业的零信任实践案例
10.8 互联网行业的零信任实践案例
第11章零信任总结与展望
11.1 网络安全技术的演进历程
11.2 零信任理念及技术
11.3 零信任架构的潜在威胁
11.4 网络安全技术发展展望
附录A 缩略语

FAQ

Can readers without a security background understand this book?

The book starts from the origins and concepts of Zero Trust and makes some allowances for beginners, but the middle and later sections involve key technologies and frameworks and still require basic cybersecurity knowledge. Readers with no background at all are advised to first build foundational networking and security knowledge, or focus on the concept chapters in the first part before gradually moving into the technical chapters.

Can this book directly guide an enterprise in implementing Zero Trust?

The book reviews practical applications and industry cases of Zero Trust and can provide reference and inspiration for enterprises planning to implement it, but the author also clearly states that Zero Trust is still developing and improving and that implementation faces many challenges. Readers should treat it as a cognitive framework and case reference rather than an implementation manual to be copied directly; actual implementation still requires assessment against their own architecture.

What attitude does the book take toward Zero Trust?

The author takes a rational stance: the book introduces Zero Trust’s effectiveness and forward-looking value while also emphasizing that there is no silver bullet in the security industry, that Zero Trust itself is still evolving and improving, and that challenges remain to be resolved during implementation. The book reminds readers to approach Zero Trust rationally and to view it as a long strategic journey rather than a problem that can be solved by a one-time purchase.

Comments

Find this book

This site is an index: you start “Search all sources” in your browser, and the entries it lists all point to third-party sites; please judge their availability yourself.

About the author

陈本峰 Author

Chen Benfeng is a Chinese-language author of books on computing. Publicly available information about him is currently limited, and his English name, nationality, dates of birth and death, and specific professional background cannot be confirmed. Judging from the two works included in the database, Zero Trust Network Security: A Technical Architecture Guide to Software-Defined Perimeter (SDP) and Zero Trust Security from Beginner to Mastery, his writing focuses on network security, particularly zero trust architecture and software-defined perimeter (SDP) technology. Both books take zero trust security as their core theme and combine analysis of technical architecture with introductory material, serving both architects and developers who need to understand SDP principles and readers new to the field. The works are commonly classified under programming and design and general computing, reflecting an approach that links security concepts with engineering practice. Given the limited information, his writing can be seen as an effort to organize specialized security concepts into clear, layered content for readers, thereby helping to introduce and present the zero trust paradigm to Chinese-language audiences.

贾良钰 Author

Jia Liangyu's publicly available information is currently limited. The only known work is Zero Trust Security: From Beginner to Mastery, a technical book catalogued under general computing. Judging by its title, the book is aimed at readers who want a systematic understanding of zero trust security, covering the subject from basic concepts to more advanced practice, balancing accessibility for newcomers with the needs of practitioners. With cybersecurity attracting growing attention, zero trust has become a notable security architecture approach; by organizing the content along a progression "from beginner to mastery," Jia Liangyu shows an emphasis on clarity, readability and practical use. As no reliable public record of the author's education, career or research focus is available, further biographical inferences are inappropriate. The book can serve as an introductory reference for understanding zero trust security concepts and methods.

魏小强 Author

Wei Xiaoqiang is an author who has written in both the fields of finance and computer science. His publicly available personal information is currently rather limited, and details such as his nationality, dates of birth and death, and educational background cannot be verified. Judging from the two works included in the database, his writing spans two directions: research on the digitalization of small and medium-sized enterprises and network security. The former, in the form of a blue book, reviews the current state and trends of digital transformation among Chinese SMEs and belongs to finance-oriented research aimed at industry practice; the latter systematically explains the concept of zero trust security, progressing from introductory knowledge to more advanced content, and reflects an intent to popularize computer security technology. This choice of topics, combining industrial observation with technical explanation, suggests that he attends to issues at both the management and technical ends of the digitalization process. His writing emphasizes practicality and the organization of knowledge, and is suitable for business managers, practitioners, and introductory readers.

董雁超 Author

Dong Yanchao is an author about whom limited public information is currently available; details such as his background, nationality, and dates of birth and death have not been clearly recorded. According to the library's holdings, he has only one work, Zero Trust Security: From Beginner to Mastery, which is categorized under general computer science. The title suggests that it is a book covering the concept of zero trust security, from introductory material to more advanced practice, aimed at readers who wish to understand and implement zero trust architectures. In his writing, the author appears to focus on systematically laying out foundational knowledge and gradually moving into technical key points, helping readers build an overall understanding of zero trust security. Because relevant materials are scarce, the author's life experience, professional background, and writing style cannot yet be fully assessed, and readers are advised to learn more through the content of the book itself.