Layered Security: What Aviation Safety and Cheese Can Teach Us About Zero Trust
summary
Systems suffer holes that align so breaches happen every 37 seconds and perimeter checks are insufficient; the concrete fix is elevating authorization as a layered control, externalizing it to a policy decision point, and logging every decision for audits. Examples include aviation Swiss Cheese Model, triple modular redundancy voting, running a PDP as a Serbos sidecar or in‑process, returning allow/deny plus context and query plans, and using spiffy and spire identities with audit trails.
AI-written summary · about
chapters (14)
- 0:00Layered security and zero trust
- 1:49Cyber threats and zero trust
- 3:54Swiss cheese in aviation
- 6:38Swiss cheese for software
- 8:45Zero trust in Kubernetes
- 11:13Missing authorization layer
- 13:40Scaling authorization challenges
- 20:23Compliance and audit logs
- 23:56Microservices authorization
- 26:25Externalizing authorization
- 31:19Authorization in practice
- 33:26BeyondCorp authorization
- 35:09Advantages and trade-offs of externalized authorization
- 35:32Q&A
related talks
46mThe Swiss Cheese Security Pattern
39mBuilding With Zero Trust Architecture
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
45mZero Trust: Getting to Step One..and What to Do When You Get There
02h 48mZero Trust: the new normal!
10mEconomics of Zero Trust
23mZero Trust: From Airports to Identity-Aware Proxies
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security