Tag-Based Trust Evaluation In Zero Trust Architecture

This paper proposed a new trust evaluation algorithm for Zero Trust Architecture (ZTA). Combined the score- based approach and the criteria-based approach, we introduced a Tag based Trust Evaluation (TBTE) framework. The tag generating process takes full consideration of the factors that affect the trust of an access subject, quantifying the security of the user behavior and the security posture of device. A simple trust evaluation rule is given by using the tag’s positive and negative feature, which improves interpretability of the trust result compared with the trust score-based evaluation and reduce the complexity of the authorization policy compared with the condition-based policy.