零信任赢得网络战CSA中国-John Kindervag

AShortIntroductiontoZeroTrustJohn

KindervagChief

Evangelist,

IllumioAdvisor,

the

Cloud

Security

AllianceNoMoreChewyCenters/documents/Forrester-No-More-Chewy-Centers.pdfTrustisadangerousvulnerabilitythatisexploitedbymaliciousactorsZEROTRU

STA

strategy

designed

to

stop

data

breaches

andprevent

other

cyber-attacks

from

beingsuccessful

by

eliminating

trust

from

digitalsystems.Zero

TrustZero

Trust

ismeans

makinga

system

trustedabout

identitySomeZeroTrustSomeZeroTrustMisconceptionsMisconceptionsThere

are

ZeroTrust

productsZero

Trust

iscomplicated1.

Who

the

President

is2.

Where

the

President

is3.

Who

should

have

accessto

the

President7PerimeterMonitoringMicro-

PerimeterControlsProtectSurface8ZEROTRU

ST9The5-

StepMethodologyforDeployingZeroTrustGuidesYourJourneyAntifragileataDApplicationsssetsAerviceSsDefine

theprotect

surfaceMap

thetransactionflowsArchitect

a

ZeroTrust

EnvironmentCreate

ZeroTrust

policyMonitor

andmaintainTailor

Made10MyMission:ChangetheZeroTrustNarativeFrom

Identity

to

Segmentation

as

the

key

technology

focus11SegmentationisKeytoZeroTrust“all

future

networks

need

to

be

segmented

by

default”12ZeroTrustDefinesNetworkSegmentation1.

Why

are

you

segmenting?2.

How

are

you

enforcingSegmentation?ProtectSurface13AutomationandOrchestration“What

if

only

a

machine

candefeat

another

machine?”-

The

Imitation

GameBletchley

Park

code-breaking

machine:

/wiki/File:Bletchley_Park_09.jpg14FlatNetworksAreDangerous15ZeroTrustSegmentationCreatesProtectSurfacesDataCenterPublicCloudUsers16ZTSMakesZeroTrustEas