Cloud Agnostic Micro-Segmentation Approach using Open-Source Tools for a Zero Trust Foundation

Описание: Sunil Arora, Lead Cloud Security Architect, Humana Inc.
Parthasarathi Chakraborty, Associate VP, Head of Cloud Security, Innovation, R&D, Humana Inc.

Unsegmented, flat networks with a large blast radius in the enterprise carry a significant security risk and availability issues of critical information assets. The complex needs for applications and post-pandemic changes in workforce dynamics promoting the adoption of many 'as-a-service' solutions require embracing solid security foundations using the concepts of zero trust and segmentation. It has become imperative to segment the network and compute in a practical, effective, sustainable, and manageable way to improve security posture and reduce data exposure risk. The problem statement is simple, but the solution is complicated because of the increased adoption of containerized applications using state-of-the-art microservices and service mesh solutions. Industry offerings are not mature across all the compute options like physical, virtual, containers (managed Kubernetes), and serverless space. This presentation will focus on the real-life challenges of the enterprise, vendor roadmap issues and present a cloud-agnostic micro-segmentation approach using open-source tools and minimal automation.