应用零信任的未来：实际应用与陷阱.pdf

1、A ZERO TRUST FUTURE FOR APPLICATIONS:PRACTICAL IMPLEMENTATION AND PITFALLS1Presented by Ashish Rajan CISO,Kaizenteq Ltd Host of Cloud Security PodcastHOW REAL IS ZERO TRUST?MY PROMISE TO YOU-WHAT YOU WILL WALK AWAY WITH FROM THIS PRESENTATION2Professionally14yrs in CyberSecurityLast 7+yrs spent help

2、ing companies move securely to Public CloudMasters in CyberSecurityCISO for a EdTech companyLast 4+yrs-Host of Cloud Security Podcast PersonallyFrom Melbourne,AustraliaNow in London,UKTalk Great Coffee&Mens Fashion Recently discovered for Cloud Security Training WHO AM I?3ZERO TRUST(ZT)BASICS4Zero T

3、rust-ZT the guiding principle for workflow,system design and operations to build environments to an acceptable security standard-It is a journey to an approach where we-Verify first and then TrustZero Trust Architecture-A zero trust architecture(ZTA)is an enterprise cybersecurity architecture that i

4、s based on zero trust principles and designed to prevent data breaches and limit internal lateral movement”-This is not a prescriptive architecture instead guiding principles again.ZERO TRUST(ZT)DEFINITIONS5ZERO TRUST COMPONENTS6Source:U.S.National Security Agency(NSA)Last Reviewed:08 March 2024LOCA

5、L SOURCE 7Source:National Cyber Security Centre(NCSC)Last Reviewed:23 July 202160%ORGANISATION IN PUBLIC SECTOR WILL HAVE EMBRACED ZT AS A STARTING POINT OF SECURITY BY 20258Source:Gartner$3.99 BILLIONMARKET IN 20279Source:Gartner ZERO TRUST(ZT)PRACTICAL FOUNDATIONS105 Pillars of Zero Trust-Identity

6、-Device-Network/Environment-Application Workload-DataZERO TRUST(ZT)PILLARS11Source:US Federal CISA Last Reviewed:June 202112Source:US Federal CISA Last Reviewed:June 2021SAMPLE-ZERO TRUST ARCHITECTURE(ZTA)-Solid Approach to Identity and Access ManagementZERO TRUST(ZT)FOUNDATIONS13-Solid Approach to