零信任数据安全白皮书（2023）.pdf

（2023） - 1- 零信任产业标准工作组和云计算开源产业联盟零信任实验室 联合发布 引言 1. 数据安全面临严峻挑战·······································1 2.零信任的定义和应用场景····································3 2.1 零信任术语··················································3 2.2 零信任常见的应用场景概述·····································4 3.零信任应对数据安全之道····································5 3.1 零信任和数据安全的关系·······································5 3.2 零信任视角下的数据安全风险····································6 3.3 零信任应对数据安全风险的关键点································7 4.零信任应用于数据安全合规···································10 4.1 国外数据合规的现状··········································10 4.2 我国数据合规的现状··········································10 4.3 零信任数据安全在合规领域的应用场景····························10 5.零信任应用于数据安全攻防···································13 5.1 零信任理念用于数据安全访问控制·······························13 5.2 终端侧数据安全保护··········································13 5.3 数据传输通道安全保护········································15 5.4 敏感文件流转过程信任控制·····································16 5.5 业务访问信任控制············································16 5.6 服务端侧数据安全保护········································17 6.零信任数据安全应用需求场景···································19 6.1 金融证券数据安全管控场景···································19 -2 - 6.2 证券行业零信任远程安全接入场景·······························21 6.3 电网行业多网隔离防护场景·····································24 6.4 政务文档跨部门共享数据防泄密场景······························29 6.5 关键数据识别与保护场景·······································33 6.6 高科技行业零信任数据安全防护场景······························35 6.7 研发场景···················································36 6.8 工业互联网场景·············································40 6.9 远程办公场景···············································42 6.10企业数据服务API安全防护场景·································47 7. 结束语···········································