Rugged Reperimitersation
summary
Argues that the old perimeter — “bad outside, good inside” — is broken and cloud and microservices force an application‑centric perimeter built from VPCs, overlays, TLS and virtualised network functions (firewall, WAF, IDS) deployed per app. Notes Google moving internal apps to the internet and Netflix’s model as examples, cites 80% of security spend on the perimeter vs 20% inside. Shows virtual appliances plus orchestration and APIs work but raise complexity and demand monitoring, control metadata and auditability.
AI-written summary · about
chapters (8)
- 0:00Start
- 2:05Application Architecture
- 4:16Exemplars of Microservices Architectures
- 10:49Virtual Private Cloud
- 18:37Web Application Firewalls
- 19:36Application Delivery Controller
- 25:22The Audit Paradox
- 35:08The Threat Model
related talks
40mEnemy Inside the Gates: Securing the New Battleground
34mCloud Native Security: A New Paradigm for a New World
49mThe Perimeter Has Been Shattered
23mZero Trust: From Airports to Identity-Aware Proxies
40mBuilding Secure and Reliable Systems at Scale
50mPanel: Whither Security in a Cloud-Native World?
54mThe Perimeter Has Been Shattered: Attacking and Defending Mobility and IoT on the Enterprise Network
25mSecurity, Identity - Back to the Drawing Board?