Research on the Application of Network Security Office Under Zero-Trust Architecture

This paper explores the usage of the zero trust security concept and its key technologies in network security for office use, aiming to address the various risks present in existing network security architectures. Focusing on risks related to office terminals, secure office environments, remote working, digital identity security, and internal network security, zero trust employs a range of technical means such as user-device binding, device fingerprinting, periodic and event-based measurements, terminal sandboxing, and digital identity management to provide a more precise and dynamic security defense mechanism. The zero trust security model emphasizes the core principle of "continuous verification, never trust," breaking away from the traditional network security architecture based on boundaries and achieving a shift from a "network-centric" to a "data-centric" approach. Through key technologies such as Software-Defined Perimeter (SDP), Identity and Access Management (IAM), and micro-segmentation (MSG), the zero trust architecture demonstrates significant advantages in enhancing network resilience and dynamic security management, offering a safer and more reliable solution for mobile office scenarios.