From Trust to Zero-Trust: Rethinking Privacy and Security in the Cloud Era

Information management across numerous domains is closely tied to Cloud Computing. Despite its many advantages, cloud environments pose significant risks to confidentiality, integrity, and availability, such as data loss, prolonged denial of access, information leakage, and malicious collusion. One of the key challenges is the design of secure and reliable systems that can effectively mitigate the uncertainties arising from security breaches, internal threats, or technical failures.
In this talk, we discuss the transition from the traditional concept of Trust to the Zero-Trust security model, moving away from perimeter-based security to a micro-perimeter approach with the "never trust, always verify" concept, with its benefits and drawbacks.
Unlike traditional models, where everything within a local computer/network is presumed safe, and threats are assumed to originate from outside, the Zero-Trust paradigm assumes that no user or device should be trusted by default, regardless of location within or outside the network.
We discuss methods and algorithms for supporting requirements of Privacy Preserving under unknown risks that are difficult or impossible to anticipate and cannot be managed proactively. They are based on adaptive security and reliability mechanisms to cope with user-provider preferences, workloads, system state, errors, fog-edge-cloud properties, et Information management across numerous domains is closely tied to Cloud Computing. Despite its many advantages, cloud environments pose significant risks to confidentiality, integrity, and availability, such as data loss, prolonged denial of access, information leakage, and malicious collusion. One of the key challenges is the design of secure and reliable systems that can effectively mitigate the uncertainties arising from security breaches, internal threats, or technical failures.
In this talk, we discuss the transition from the traditional concept of Trust to the Zero-Trust security model, moving away from perimeter-based security to a micro-perimeter approach with the “never trust, always verify” concept, with its benefits and drawbacks. Unlike traditional models, where everything within a local computer/network is presumed safe, and threats are assumed to originate from outside, the Zero-Trust paradigm assumes that no user or device should be trusted by default, regardless of location within or outside the network.
We discuss methods and algorithms for supporting requirements of Privacy Preserving under unknown risks that are difficult or i mpossible to anticipate and cannot be managed proactively. They are based on adaptive security and reliability mechanisms to cope with user-provider preferences, workloads, system state, errors, fog-edge-cloud properties, etc.