Dear Son (EN)

1. The Origins of Zero Trust 1.1. What Is Zero Trust Zero Trust is a security model based on the principle of " never trust by default, and always verify every access request " . 1.1.1. Never Trust, Always Verify Never trust, always verify Users, devices, and network locations are not trusted by default. Even the internal network is not assumed to be safe. Every access request is always subject to Authentication and Authorization. 1.1.2. Least Privilege Access Principle of Least Privilege Users are granted only the minimum permissions necessary to perform their job. Unnecessary access privileges are not permitted. 1.1.3.  Assume Breach Assume Breach Systems are designed on the premise that they may already have been compromised. Systems are designed to prevent the spread of an attack even if one occurs. 1.2. The Background of Zero Trust In 2010, a large-scale cyberattack known as Operation Aurora took place. Overview...

1. RBI Server Implementation Technologies RBI (Remote Browser Isolation) goes beyond simply "running a browser remotely" and is an architecture where  server infrastructure, networking, streaming, and security technologies are combined . It requires a system architecture designed for large-scale scalability and integration with cloud infrastructure, and it must provide stable service across multiple access points. 1.1. Server Technologies 1.1.1. Edge Computing  RBI minimizes network latency by running the browser on edge nodes geographically close to users. In this model, edge servers function not as simple content caches, but as the actual execution location of browser instances. Technology Elements Multi-region edge node deployment and region-based traffic routing Global load balancing based on Geo DNS or Anycast Distribution of service touchpoints through PoP (Point of Presence) configuration 1.1.2. Screen Streaming The browser screen running on...

1. RBI Overview RBI (Remote Browser Isolation) is a security technology that does not run the browser in the user's local environment. Instead, it runs the browser on a server or in an isolated remote environment and delivers only the rendered screen. The browser runs in a server-side isolated environment, and users receive only the visual output. User input events are sent to the server to control the remote browser. 1.1. Limits of Web Security Today, most business activities are centered around web browsers. Web browsers have become both the most commonly used work environment and the primary entry point attackers target first. Traditional web security frameworks mostly rely on website blocking, URL categorization, and detection-stage filtering. These methods are effective against known threats but have limitations against new phishing attacks or uncategorized malware. Also, it is practically impossible to b...

1. Definition of SASE SASE (Secure Access Service Edge) is a service architecture concept and marketing term introduced by Gartner . Formalized in the report "The Future of Network Security Is in the Cloud" (2020)           1.1. Background In the past, work was done within headquarters data centers, but today users (remote workers) and business data (SaaS, cloud) are increasingly distributed. For this reason, organizations are now facing a situation where they must handle multiple incompatible technologies, increasing both complexity and cost. Traditional VPN approaches route traffic to headquarters first and then send it bac...