# A Micro-Segmentation Method Based on VLAN-VxLAN Mapping Technology
## 2 Relation Work
### Zero Trust Architecture  
With the advancement of information technology, cyber security presents increasingly complex challenges. [PERSON] et al. proposed ZTA in 2016. They argued that conventional network security frameworks had various drawbacks, including the difficulty in defining a security device's interface as \"Trusted\", the challenge in effectively implementing \"Trust but Verify\", the tendency to trust malicious attackers who were previously considered trusted users, and the lack of trusted packets in cyberspace. As a result, they proposed a novel security architecture--ZTA. In ZTA, the distinction between trusted and untrusted networks is eliminated, and all network traffic is treated as untrusted, necessitating thorough examination and recording.  
In network security, several assumptions have been made, including the presence of external network attackers, the existence of attacked values on the internal network, the existence of insecure hosts on the internal network, and the presence of insiders or users with malicious intent. The article [7] proposed a comprehensive trust model based on the zero trust architecture. The article [8] proposed a ZTA protocol with a formal definition and security analysis that relies on authentication. It also evaluated the feasibility of this authentication method. However, achieving the desired outcomes in this experiment required clear instructions for the participants, which proves challenging in practice.  
Another article [9] proposed a model for proactive defence against extranet attacks that could minimize defence costs and optimize the allocation of limited defence resources to other aspects of the defence system. [PERSON], [PERSON] et al. [10] presented a zero trust solution that involves inserting a token into the first TCP connection for authentication and utilizing dynamic access control lists to link heterogeneous security devices for rapid blocking responses. The solution has been demonstrated to significantly surpass previous methods. But, these two articles mainly primarily addressed attacks originating from external networks, and they did not affect east-west traffic.  
In [11], a method for realizing zero trust by incorporating a network authentication token in the TCP connection request is proposed, effectively blocking unauthorized traffic from completing the request. The method necessitated business redesign, entailing substantial implementation costs.  
The article [12] proposed an end-to-end time-series anomaly detection, striking a balance between effective decomposition and precise anomaly detection. Authentication is a very important part of ZTA, but it also faces challenges in terms of identity forgery [13], theft of devices [14], etc.  
The survey [15] introduced a definition of ZTA and the key components that make up ZTA. In another article [16], the essential technologies for zero trust, such as authentication, access control, and trust evaluation, were identified, and the existing challenges and future directions of these technologies were analysed. This article also highlighted the advantages of utilizing machine learning for trust evaluation due to its high evaluation accuracy and strong awareness. Furthermore, a machine learning-based trust assessment model was proposed in [17] for quickly classifying untrusted objects; however, this algorithm did not consider the time dimension. Our paper extends previous research by incorporating time dimension into the machine learning-based trust assessment model. [PERSON] et al. [18] introduced a novel approach to address the issue of low anomalous data in the training process.