关键词: 云服务, 无边界网络, 零信任架构, 网络安全架构, 横向攻击

Abstract: With the rise of cloud services， IoT， and other technologies， the boundaries in traditional network architecture have become more complicated and hazier. Firstly， adhering to the principle of "never trust， always verify"， a network security architecture based on zero-trust multi-dimensional dynamic verification is proposed to better adapt to the borderless trend of today’s network and improve the protection ability of sensitive data and business systems. Secondly， in view of the problem that most researches on zero trust are still in the theoretical stage， this paper proposes migration methods for enterprises to implement zero trust， such as business migration and workflow allocation. Finally， the security performance of the zero-trust architecture is analyzed to verify its effectiveness. The zero-trust architecture for marketing system effectively improves the security performance of the system， solves the shortcoming of the traditional boundary-based network architecture that is vulnerable to lateral attack after being breached by the attacker， and provides a low-risk implementation and migration method， which supports the smooth landing of the theory.

Key words:  , cloud services, borderless network, zero-trust architecture, cyber security architecture, lateral attack