Zero Trust Networks: Building Secure Systems in Untrusted Networks 2nd Edition

This practical book provides a detailed explanation of the zero trust security model. Zero trust is a security paradigm shift that eliminates the concept of traditional perimeter-based security and requires you to "always assume breach" and "never trust but always verify." The updated edition offers more scenarios, real-world examples, and in-depth explanations of key concepts to help you fully comprehend the zero trust security architecture.

• Examine fundamental concepts of zero trust security model, including trust engine, policy engine, and context aware agents
• Understand how this model embeds security within the system's operation, with guided scenarios at the end of each chapter
• Migrate from a perimeter-based network to a zero trust network in production
• Explore case studies that provide insights into organizations' zero trust journeys
• Learn about the various zero trust architectures, standards, and frameworks developed by NIST, CISA, DoD, and others

這本實用的書籍提供了對零信任安全模型的詳細解釋。零信任是一種安全範式轉變，它消除了傳統基於邊界的安全概念，要求您始終假設遭受入侵，並且「永遠不要信任，但始終要驗證」。更新的版本提供了更多情境、實際案例和深入解釋關鍵概念，以幫助您充分理解零信任安全架構。

本書的內容包括：
- 探討零信任安全模型的基本概念，包括信任引擎、策略引擎和上下文感知代理
- 理解這個模型如何將安全嵌入系統操作中，每章末尾提供引導式情境
- 在生產環境中從基於邊界的網絡遷移到零信任網絡
- 探索提供組織零信任之旅見解的案例研究
- 了解由NIST、CISA、DoD等機構開發的各種零信任架構、標準和框架

請注意，以上內容僅為書籍摘要，詳細內容請參閱原書。