Research on online training security system based on zero-trust architecture
Qin Wenyuan，An Ning
SASAC Education and Training System
Abstract： The rapid development of digital intelligence technology in the new era has made online training an important tool for enterprises to publicize their corporate spirit and learn new technologies. In this paper, against the background of the extensive application of online education and training, with the main research line of guaranteeing the platform′s full-process support for training business, relying on the concept of the existing zero-trust architecture, we construct a six-pronged security platform with trusted terminal environment awareness, trusted network environment awareness, trusted agent, dynamic access control, trust assessment, and fine-grained access control of the database. The platform senses the environment state in real time, dynamically grants users the lowest privilege, continuously monitors user behavior, and enables it to achieve the goals of continuous verification, dynamic authorization, and global defense during operation. The platform introduces the self-attention mechanism in the trust assessment module to improve the efficiency of trust assessment, ensure the safe operation of the training platform, and build an information security fortress for the training organizations.
Key words : online education and training;zero-trust security architecture; trust assessment; database security policy
