零信任赢得网络战CSA中国-John Kindervag

AShotrIntroduiontoZeroTrust

JohnKindervag

ChiefEvangelist,Illumio

Advisor,theCloudSecurityAlliance

/documents/Forrester-No-More-Chewy-Centers.pdf

NMooreChewyCenters

Trustisadangerousvnerabyiatiseliedmiciousactors

ZEROTRUST

Astrategydesignedtostopdatabreachesand

preventothercyber-attacksfrombeing

successfulbyeliminatingtrustfromdigital

systems.

ZeroTrustis

aboutidentity

ZeroTrust

SomeZeroTrustMisconctions

meansmaking

asystemtrusted

ZeroTrustis

complicated

ThereareZero

Trustproducts

1.WhothePresidentis

2.WherethePresidentis

3.Whoshouldhaveaccess

tothePresident

Dw

Perimeter

Monoring

Micro-Perimeter

Contrs

ProtectSuace

ZEROTRUST

The5S-odolyforDlingZeroTrutsGuidesYouJrourn

Dication

s

Antifragile

veise

DefinetheSMaptheArchitectaZero

protectsurfacestransactionTrustEnvironment

flows

CreateZero

Trustpolicy

Monitorand

maintain

TailorMade

MMyissionC:haeeZeroTrutsNarive

FromIdentitytoSegmentationasthekeytechnologyfocus

SmeionisKeytoZeroTruts

“allfuturenetworksneedtobesegmentedbydefault”

Segmon

eway

Micro-perimeter

PCI

ZeroTrutsDnesNetwokrSmeion

Prect

Suace

1.Whyareyousegmenting?

2.Howareyouenforcing

Segmentation?

AutomionandOreion

“Whatifonlyamachinecan

defeatanothermachine?”

-TheImitationGame

BletchleyParkcode-breakingmachine:

/wiki/File:Bletchley_Park_09.jpg

FlatNwokrAsreDaerous

F。》o厂》加rs父m。石o加仁》。mr。s>》cr父加mc。s

>加c仁/o加/

活mrm仁。加r。》

ms。》s。

ZesZeroTrutsEa