Zero Trust is a relatively new security model that many corporations are starting to use. As the name indicates, this model seeks to reduce or eliminate security breaches for an organization by trusting absolutely nothing by default. In fact, the credo of this approach is "never trust; always verify." Zero Trust was created by John Kindervag of Forrester Research. He realized that traditional security models operate on the silly assumption that everything inside an organization's network should be trusted. With models based on this assumption, once a network attacker has gained access, that user account is trusted. The Zero Trust model views trust as a vulnerability. Zero Trust is implemented using many different technologies in a network, including the following:
- Segmenting the network
- Preventing lateral movement
- Providing Layer 7 threat prevention
- Simplifying granular user access control