Zero Trust Access Models Patrick Sullivan Sr Director

  • Slides: 13
Download presentation
Zero Trust Access Models Patrick Sullivan Sr. Director, Security Strategy Akamai Technologies @Akamai ©

Zero Trust Access Models Patrick Sullivan Sr. Director, Security Strategy Akamai Technologies @Akamai © 2018 AKAMAI | FASTER FORWARDTM

Agenda Review of Perimeter Security Model Zero Trust Access Architectures Questions and Answers ©

Agenda Review of Perimeter Security Model Zero Trust Access Architectures Questions and Answers © 2018 AKAMAI | FASTER FORWARDTM

Zero Trust and the Cyber Attack Lifecycle / Kill Chain © 2017 AKAMAI |

Zero Trust and the Cyber Attack Lifecycle / Kill Chain © 2017 AKAMAI | FASTER FORWARDTM

Bottom line: security perimeters belong in the past © 2018 AKAMAI | FASTER FORWARDTM

Bottom line: security perimeters belong in the past © 2018 AKAMAI | FASTER FORWARDTM

What’s Zero Trust? Key principles: ● Assume a hostile environment ● Don’t distinguish between

What’s Zero Trust? Key principles: ● Assume a hostile environment ● Don’t distinguish between external & internal ● Never trust and only deliver applications/data to authenticated & authorized users/devices ● Always verify with logging & behavioral analytics © 2018 AKAMAI | FASTER FORWARDTM

There is no INSIDE © 2018 AKAMAI | FASTER FORWARDTM

There is no INSIDE © 2018 AKAMAI | FASTER FORWARDTM

NO TRUSTED NETWORKS Google Beyond. Corp and moving beyond perimeter security © 2018 AKAMAI

NO TRUSTED NETWORKS Google Beyond. Corp and moving beyond perimeter security © 2018 AKAMAI | FASTER FORWARDTM

AKAMAI GLOBAL COMPUTING PLATFORM A “Zer 0 Trust” Network Since 1998 Strong Auth. N

AKAMAI GLOBAL COMPUTING PLATFORM A “Zer 0 Trust” Network Since 1998 Strong Auth. N Users Origin Server Strong Encryption Continuous Posture Assessment No Trust at Network Layer © 2018 AKAMAI | FASTER FORWARDTM

WHY NOT ZER 0 TRUST FOR OUR IT? IAP Zer 0 Trust Architecture Apps

WHY NOT ZER 0 TRUST FOR OUR IT? IAP Zer 0 Trust Architecture Apps Identity Aware Proxy Laptop Micro Perimeter © 2018 AKAMAI | FASTER FORWARDTM

DYNAMIC & CONTEXTUAL SECURITY Adaptive access and threat protection based on multitude of signals

DYNAMIC & CONTEXTUAL SECURITY Adaptive access and threat protection based on multitude of signals Device posture Passive bot detection Malware C&C traffic Request syntax Time of day Authentication state Reputation Biometrics Geo Presence/validity of client cert VISIBILITY & ADAPTIVE POLICY APPLICATION Rate controls Unsanctioned cloud storage usage © 2018 AKAMAI | FASTER FORWARDTM

r. DNS INSPECTION IS GREAT FOR CONTINOUS MONITORING SIMDA Botnet Family of backdoors capable

r. DNS INSPECTION IS GREAT FOR CONTINOUS MONITORING SIMDA Botnet Family of backdoors capable of stealing information such as user names, passwords, and certificates. It also executes backdoor commands, compromising the security of the infected systems Cryptojacking High risk to system availability and potential risk to system confidentiality due to malicious cryptocurrency mining © 2018 AKAMAI | FASTER FORWARDTM

No Inside No VPN No Passwords Every app seems like Saa. S Every office

No Inside No VPN No Passwords Every app seems like Saa. S Every office is a hotspot © 2018 AKAMAI | FASTER FORWARDTM

Zero Trust Adoption Best Practices 1 Consider a Zero Trust Architecture Assessment 2 Stop

Zero Trust Adoption Best Practices 1 Consider a Zero Trust Architecture Assessment 2 Stop accumulating technical debt 3 Begin migration of your Web apps 4 Migrate legacy apps 5 Decommision legacy access © 2018 AKAMAI | FASTER FORWARDTM