3 ms·
Is this what zero trust is supposed to protect against? It's weird to let everyone have free reign over critical infrastructure and data once you gain access to
by sorenjan 4y ago
Is this what zero trust is supposed to protect against? It's weird to let everyone have free reign over critical infrastructure and data once you gain access to the network.
Are there any network security that uses AI to automatically detect and flag unusual behavior? For example, a regular developer doesn't need to port scan the entire network, the receptionist's computer doesn't need to log in to admin resources, support personnel doesn't need to access source code, etc. This should be possible to flag and let a human verify.
- goodoldneon 4y agoZero trust doesn’t mean 0 network segmentation. Zero trust is supposed to be the opposite of walled gardens
- Sohcahtoa82 4y ago"Zero trust" is a buzzword with no real meaning, IMO.
- not1ofU 4y agoYes, - the tech is called UBA (user behaviour analytics.. or something) - over time it builds a baseline of what a user does in a typical day/ week/ month as part of their role, and if they deviate from that base pattern then an alert can be triggered on different thresholds - for example, why is a member of support downloading the entire production database (not that they should have access there, but you get my point)