3 ms·
BeyondCorp: A New Approach to Enterprise Security [pdf]
- mschuster91 11y agoWhat exactly considers a trustworthy device? This term is used frequently - but not adequately defined. Is it a corporate-issued device but fully manageable by the enduser (i.e. rooted)? Is it a locked-down device where admin privileges are held only by IT? How are devices like engineering laptops with requirements like "always has fresh kernel" or "this engineer needs root privileges for software xyz" handled? And how is integrity enforced, given that plugging in the HDD into a computer and manipulating /etc/sudoers essentially roots a device?