美国国防部零信任参考架构（英文版）

Department of Defense (DoD) Zero Trust Reference Architecture Version 2.0 July 2022Prepared by the Defense Information Systems Agency (DISA) and National Security Agency (NSA) Zero Trust Engineering Team CLEARED For Open Publication Department of Defense OFFICE OF PREPUBLICATION AND SECURITY REVIEW Sep 12, 2022ii July 2022 DISTRIBUTION STATEMENT A. Approved for public release. Distribution is unlimited.Document Prepared By Date Name: Robert Freter June 2022 DISA Zero Trust Program Lead (ID2) iii July 2022 Table of Contents 1 PURPOSE AND STRATEGIC GOALS ....................................................................... 9 1.1 Introduction ....................................................................................................... 9 1.2 Purpose .............................................................................................................. 9 1.3 Scope ............................................................................................................... 10 1.3.1 Stakeholders ................................................................................................. 10 1.3.2 Organization of the Reference Architecture .................................................. 10 1.3.3 Timeframe ..................................................................................................... 12 1.4 Vision and Goals (CV-1) .................................................................................. 13 1.4.1 Vision and High-Level Goals (CV-1) ............................................................. 14 1.4.2 Zero Trust Strategy ....................................................................................... 15 1.5 Cybersecurity (Transition) Problem Statement (OV-1) ................................ 16 1.6 Overall Target Environment (OV-1) ............................................................... 18 1.7 Assumptions ................................................................................................... 19 1.8 Constraints ...................................................................................................... 20 2 PILLARS AND PRINCIPLES .................................................................................... 20 2.1 Overview .......................................................................................................... 20 2.2 Concept and Tenets of Zero Trust ................................................................. 20 2.3 Pillars ............................................................................................................... 21 2.4 Reference Architecture Principles (OV-6a) ................................................... 23 3 CAPABILITIES .......................................................................................................... 25 3.1 Capabilities Taxonomy (CV-2) ........................................................................ 25 3.2 FFP: Pillars, Resources & Cap