Zero Trust is an increasingly common term that is heard in the security industry. It’s both a mindset for thinking about security as well as a well-architected solution that helps to minimize risk in a fluctuating work environment and ever-evolving attack surface..
Zero trust is an active approach and model that integrates continuous, context- aware analysis and verification of trust, in an effort to help ensure that users and devices on a network are not doing anything malicious.
The basic idea behind zero trust is the assumption that all devices and users are untrustworthy until proven otherwise.
Even after a user or entity is proven to be trustworthy once, zero trust models do not by default trust the same user or device the next time they are seen by the system. Trust in the zero-trust model is never taken for granted, but is based on observation and regular authentication to help limit risks.