Buzzword or Solid Strategy
summary
Zero trust centers on verified identity plus device posture rather than buzzwords: implementations use FIDO2 front door for low-friction access, step-up authentication for high‑privilege actions, and anchor credentials to devices so stolen keys are useless. Practical tech cited includes phishing‑resistant MFA, device certificates and signing, micro‑segmentation, PAM/IGA, EDR, MDM, and OIDC; NIST 800‑207 ABAC-style authorization is the hard part. Real problems include SIM‑swap risk, cross-team integration, and user training.
AI-written summary · about
chapters (11)
- 0:00Introduction to panel
- 1:05Defining zero trust
- 3:13Zero trust misconceptions
- 7:11Identity and access management
- 11:49Implementing zero trust
- 14:38Challenges in adoption
- 17:26Authorization in zero trust
- 19:13Platform authentication focus
- 20:39Defense after identity compromise
- 22:43Lateral movement prevention
- 24:07Platform authentication benefits
related talks
26mZero Trust: Continuous Verification in the Modern Enterprise
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
31mAttacking Zero Trust Designs in 2021
49mZero Trust Security
28mZero Trust Architecture - Now We Must, But What It Means?
34mZero Trust Best Practices in Government and Federal Industries
40mZero Trust and Privacy: Moving Security Closer to the Target
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security