mc.fly: Perimeter security is dead, get over it.

Security

Reimagining security in a digital era: it's time to abandon outdated perimeter-based approaches and adopt a zero-trust model that verifies every request, every time, and controls access based on context.

Key takeaways

Perimeter security is dead, and we must stop relying on outdated concepts like “the perimeter”
Modern threats can bypass traditional security measures, such as firewalls and VPNs, by using lateral movement tactics
In the digital age, a castle with walls is no longer a secure solution; instead, we must adopt a “zero trust” approach
Traditional security measures are not sufficient; we need to rethink our approach to security and move towards a “post-perimeter” world
The “new” approach involves verifying users and devices, rather than relying on IP addresses or network segmentation
Zero-trust networks involve verifying every request, every time, and controlling access based on context, not just location
Traditional approaches to security, such as “love to have to have a strong perimeter” are no longer effective
We must adapt to the changing threat landscape and move towards a more agile and flexible approach to security
Today, we have software developers, management, and other users working from anywhere, so we need to rethink our approach to security
We need to focus on controlling access to data, not just controlling where people are physically
We need to stop trying to protect the network and start protecting the data, regardless of where it is
The current approach to security is not sustainable; we need to move towards a more dynamic and adaptive approach
Companies are challenging the traditional security paradigm, and we need to adapt to this new reality
The perimeter is not dead, it’s just being redefined

mc.fly: Perimeter security is dead, get over it.

More talks