Research on Zero Trust Architecture Based on SDN
Geng Liang, Peisheng Han, Shihai Zhao · 2024
In response to the current challenges of deploying zero-trust networks, which include high difficulty, numerous devices, and complex management, this study explores the implementation of zero-trust mechanisms based on Software-Defined Networking (SDN). An SDN-based zero-trust architecture has been designed; research has been conducted on a single-packet identity authentication mechanism implemented using switches; a method combining Long Short-Term Memory (LSTM) networks with Support Vector Data Description (SVDD) has been employed for internal threat detection; and the application of the architecture in scenarios such as campus networks and enterprise networks has been explored. Experimental results indicate that the model can achieve detection of user abnormal behavior.