제1금융권의 제로트러스트 보안 모델 연구 -보안 모델, 기술적 요구사항 중심으로-

Abstract

This paper explores the Zero Trust security model as a response to the increasing cyber threats and vulnerabilities accompanying the digital transformation (DX) of Tier-1 financial institutions. The Zero Trust security model addresses the limitations of traditional perimeter-based security, including insider threats, lateral movement, boundary ambiguity, and sophisticated attack scenarios, by presenting a new paradigm in security. Through this model, the paper proposes implementation strategies for Tier-1 financial institutions, such as micro-segmentation for fine-grained access control to sensitive data and systems, continuous authentication, least privilege enforcement, automated threat response, and dynamic policy application. It also examines the maturity levels, considerations for adoption, and other key aspects of Zero Trust implementation. Based on the fundamental concepts and principles of Zero Trust, this paper provides detailed insights into the security models and technical requirements necessary to establish an effective Zero Trust environment for Tier-1 financial institutions.