Regain faith- Internet’s zero trust architecture
summary
CrowdSec is an open source MIT engine that reads logs, normalizes events, matches them to scenarios and shares curated reputation decisions across users. It ships parsers for nginx, iptables and cloud trails, a nginx bouncer that blocks detected attackers in realtime, Metabase dashboards and Prometheus metrics, and a honeypot fleet used to bootstrap trust. Decisions share only IP+scenario+timestamp, trust ranks reduce poisoning, and IPs marked malicious revert to good after 7–72 hours. Demonstrated blocks and historical replay work as claimed.
AI-written summary · about
chapters (15)
- 0:00CrowdSec and zero trust
- 1:59Traditional security failures
- 3:22CrowdSec defense model
- 5:06Architecture workflow
- 7:13Live attack demo
- 9:59Nginx bouncer integration
- 10:41Adapting to infrastructure
- 11:23Attack visualization
- 12:46Testing historical logs
- 13:50Prometheus monitoring
- 14:12Crowd-sourced intelligence
- 15:56False positives and poisoning
- 16:40Predictive algorithms
- 17:43Privacy and GDPR
- 18:03CrowdSec future
related talks
32mImplementing Zero Trust
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
51mSecurity 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
20mCloudy with a Chance of Zero Trust: Navigating Security in the...
40mZero Trust: Regaining Trust in a Remote Work World
50mTowards a Holistic Approach in Building Intelligence to Fight Crimeware
35mAutomating Zero-Trust for Cloud Native Applications