Public cloud has become more and more popular in the market due to its low cost and high flexibility. But then the cyber security is facing significant challenges. In order to solve the dilemma of the traditional network boundary protection center asset solution

this paper introduces the zero trust model

and examines the security defense strategy from a new perspective. It analyzes the advantages of zero trust on the attacked surface in the form of data

and introduces the exploration method of the strategy engine based on artificial intelligence. This paper also expounds the micro-segmentation application scheme based on the core idea of zero trust

and summarizes its difficulties. With the promotion of zero trust micro-segmentation

the public cloud security protection boundary will also be further broadened.