{"id":43107,"date":"2025-07-24T16:04:20","date_gmt":"2025-07-24T08:04:20","guid":{"rendered":"https:\/\/www.asuscloud.com\/?p=43107"},"modified":"2025-08-25T16:24:49","modified_gmt":"2025-08-25T08:24:49","slug":"%e9%9b%b6%e4%bf%a1%e4%bb%bb%e6%99%82%e4%bb%a3%e4%be%86%e8%87%a8%ef%bc%8c%e7%95%b6%e4%bc%81%e6%a5%ad%e6%af%8f%e5%80%8b%e8%b3%87%e6%96%99%e5%8d%b3%e6%98%af%e9%82%8a%e7%95%8c%ef%bc%8c%e5%a6%82%e4%bd%95","status":"publish","type":"post","link":"https:\/\/www.asuscloud.com\/en\/20250724\/43107\/","title":{"rendered":"Zero-trust era has arrived. How can organizations build an ultimate security architecture?"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

With digital transformation, remote work, and cloud adoption blurring traditional \u201ctrust boundaries,\u201d Zero Trust has become the cornerstone of modern cybersecurity. Taiwan is moving fast: the Financial Supervisory Commission\u2019s Cybersecurity Action Plan 2.0 makes Zero Trust a core goal, while the National Cybersecurity Research Institute is urging top-tier government agencies to speed up adoption. Globally, Gartner reports that more than 60% of enterprises have already implemented Zero Trust. Yet many organizations still struggle with a lack of integrated defense services and cybersecurity expertise\u2014leaving them vulnerable to emerging threats.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Never trust, always verify.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Traditional defenses such as firewalls, intrusion detection, and prevention systems are no longer sufficient, as enterprise boundaries now extend far beyond on-premises systems. Based on the principle of \u201cNever trust, always verify,\u201d Zero Trust assumes that threats may exist both inside and outside the network. No user, system, or device is trusted by default. Its core principles include:<\/span>
1.Assume breach<\/b>: Every network request is treated as a potential threat and must be verified.
2.<\/span>Least privilege:<\/b>Users and devices receive only the minimum access required.<\/span>
3.<\/span>Continuous monitoring:<\/b>Access policies are dynamically adjusted through real-time detection.<\/span><\/span><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Challenges to Zero Trust Adoption<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Dr. Chase Cunningham, \u201cthe father of Zero Trust,\u201d highlights three major obstacles for enterprises:<\/span><\/p>

1. Lack of interoperability:<\/b>Existing infrastructure often cannot support identity, segmentation, and real-time monitoring integration.<\/span>
2.High cost and resource demand:<\/b>Deploying Zero Trust requires significant investment, especially for SMEs lacking expertise. Starting with high-risk areas like data access is recommended.<\/span>
3.Cultural resistance:<\/b>Zero Trust is a risk management strategy, not a sign of mistrust. Successful adoption requires leadership support, employee education, and clear communication.<\/span><\/p>

According to Fortinet\u2019s Zero Trust Report, enterprises relying on multiple legacy security products face higher risks of vulnerabilities and rising operational costs, slowing Zero Trust progress.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

OmniStor: From Passive Defense to Proactive Governance<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To strengthen Zero Trust practices in data security, ASUS Cloud developed OmniStor, a Zero-Trust File Management System (ZTF). OmniStor delivers enterprise-grade private cloud architecture for multilayered data governance and protection. Covering identity authentication, data access, and threat defense, it offers flexible deployment models and a unified, compliant, and secure approach to file management.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

OmniStor in Action: Mapping to Zero Trust Principles\u00a0<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Echoing the three core principles of Zero Trust \u2014 \u201cNever trust, always verify,\u201d \u201cLeast privilege,\u201d and \u201cContinuous monitoring\u201d \u2014 OmniStor provides the following corresponding features:<\/span><\/p>
Principles<\/td>OmniStor feactures<\/td><\/tr>
Never trust, always verify.<\/span><\/td>
  • Two-factor authentication (2FA)<\/span><\/li>
  • Mobile PIN verification<\/span><\/li>
  • Login via DB, LDAP(s), SAML, or OIDC<\/span><\/li>
  • BYOD controls with account-device binding<\/span><\/li><\/ul><\/td><\/tr>
Least Privilege<\/span><\/td>
  • Role-based admin controls<\/span><\/li>
  • IP whitelisting for backend access<\/span><\/li>
  • Download\/export restrictions with approval workflows<\/span><\/li>
  • Sharing controls with black\/whitelists<\/span><\/li>
  • File format and privacy safeguards<\/span><\/li>
  • Configurable external access (e.g., FTP)<\/span><\/li><\/ul><\/td><\/tr>
Continuous Monitoring<\/span><\/td>