4 ms·
Zero Trust is really just defense in depth[0]. All the things it implements are DiD solutions that have existed way before the term Zero Trust emerged. [0] htt
by gravitate 4y ago
Zero Trust is really just defense in depth[0]. All the things it implements are DiD solutions that have existed way before the term Zero Trust emerged.
[0] https://www.forcepoint.com/cyber-edu/defense-depth https://www.forcepoint.com/cyber-edu/defense-depth
- pid-1 4y agoI also like the term "Onion Approach to Security"
- jameshart 4y agoDefense in depth, combined with abandoning the pretense that certain things that were regarded as security perimeters (like ‘having an IP address on a specific subnet’) we’re not really defenses in the first place.
- bee_rider 4y agoAs someone not working in security -- nobody working in security actually believed in that kind of stuff, right? Even my dumb self knows that the network is fundamentally full of evil nodes.
- jameshart 4y ago.... wish I could tell you 'no'. It's not so much that servers would be left wide open to be hit by anything that plugged into the LAN (although, sure... some of that, too), but more that there was no need seen for things like endpoint firewalls on user desktop machines plugged in to the LAN, because they were 'behind the firewall'. And honestly even today we still see that thinking in datacenter ops and even virtual cloud ops. I've seen people say 'I don't need to worry about those mongo credential compromises because I'm running mongo on a secure VPC'.
- fulafel 4y agoA surprisingly large share of people "working in security" are actually just checking boxes, and are very risk averse so resist all change, especially taking out any boxes.