Project, 2024.07

Design and Development of a Cloud Access Security Broker Prototype for Zero Trust Cloud

This ITRC project at PNU's Zero Trust Cloud Security Research Center designed and built a Cloud Access Security Broker (CASB) prototype for zero-trust access to cloud resources. A CASB server works with a Cloud PEP Agent on the cloud side and opens or closes OpenVPN sessions on the server's request, controlling access between user devices and cloud instances; the plan then added MFA login, UEBA, and anomaly detection. As a participating researcher, Joonho Seo developed the Cloud Agent in 2024 and the UEBA system in 2025. The first week of development confirmed the VPN session setup and teardown flow between server and agent, and by the end of 2024 sign-up with VPN key issuance, Google MFA login, and client-to-instance VPN tunneling were recorded as complete.

Where

PNU ITRC (Zero Trust Cloud Security)

My role

Participating researcher