EP106 Beyond BeyondProd - How Do You Zero Trust Your Workloads?

Описание: Guest:


• Anoosh Saboori, former Product Manager at Google Cloud


Topics:


• We had zero trust episodes before and definitions vary! When we say zero trust, what do we mean?


• What about zero trust for workloads in production? When you say "workload," what do you mean?

• What is BeyondProd, for those that are unfamiliar with it? And how is this different from BeyondCorp?

• How has BeyondProd actually been implemented at Google?

• What threats does it help with? Is this real threats or compliance?

• Why is now a good time to be thinking about zero trust for production systems?

• Companies have many security tools deployed, including microsegmentation and firewalls, how does this toolset fit? Does it replace anything they have deployed?


Resources:


• BeyondProd papers (https://cloud.google.com/docs/securit...)

• "Zero Trust: Fast Forward from 2010 to 2021" (https://cloud.withgoogle.com/cloudsec...) (ep8)

• "Gathering Data for Zero Trust" (https://cloud.withgoogle.com/cloudsec...) (ep4)

• "Google Workspace Security: from Threats to Zero Trust" (https://cloud.withgoogle.com/cloudsec...) (ep99)

• "Zero Trust: So Easy Even a Government Can Do It?" (https://cloud.withgoogle.com/cloudsec...) (ep59)

• "Is This Binary Legit? How Google Uses Binary Authorization and Code Provenance" (https://cloud.withgoogle.com/cloudsec...) (ep66)