3 ms·
The 'BeyondCorp' approach is the opposite to a firewall, and is designed to limit the damage of successful phishing attacks. For example, if you have a 'truste
by enneff 7y ago
The 'BeyondCorp' approach is the opposite to a firewall, and is designed to limit the damage of successful phishing attacks.
For example, if you have a 'trusted' network, a successful phishing attack gets you access to that network. If you have a 'zero trust' network, that attack only gets you access to the compromised user.
- kerng 7y agoBeyondCorp != Zero Trust Zero Trust includes heavily leverageing attack surface limitation to prevent lateral movement. This means even if an attacker has stolen passwords, cookies or whatever single factor token that is needed to move laterally, they can't - because no connectivity.