Defense Through Invisibility: Zero Trust Security for the Enterprise
summary
Claims that TCP/IP’s implicit-trust model fails and that a Software-Defined Perimeter flips connect-first to authenticate-first, making unauthorized hosts invisible. Uses agents + gateway PEPs talking to a policy decision point that consults MFA, PKI/HSM certificates, device posture, CMDB, SIEM and threat feeds to enforce least privilege policies. Notes a surprising measurement: 4.5 million RDP servers exposed. Demo flow shows port scans blocked, infected endpoints quarantined, and service‑desk ticketed admin access granted then revoked — the enforcement model works in practice.
AI-written summary · about
chapters (13)
- 0:00Intro
- 1:52The bad news
- 3:21TCPIP
- 11:39What is Zero Trust
- 14:47Zero Trust Concepts
- 18:20Zero Trust Example
- 23:20Prepare Zero Trust
- 25:33Identify Zero Trust
- 28:18Contain Zero Trust
- 30:38Eradication
- 31:14Recovery
- 32:04Lessons Learned
- 32:55Conclusion
related talks
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
23mZero Trust: From Airports to Identity-Aware Proxies
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
45mZero Trust: Getting to Step One..and What to Do When You Get There
02h 48mZero Trust: the new normal!
39mBuilding With Zero Trust Architecture
40mZero Trust: Regaining Trust in a Remote Work World