Zero-Trust Networks: The Future Is Here - SANS Blue Team Summit 2019

The Blue Team Summit features presentations and panel discussions covering actionable techniques, new tools, and innovative methods that help cyber defenders improve their ability to prevent and detect attacks.
SANS Summit schedule: www.sans.org/u/DuS
Presenter: Randy Marchany, CISO, Virginia Tech; Instructor, SANS Institute
The traditional perimeter-based security architecture used in sectors ranging from education to government and communications has basically failed to protect internal assets. New technologies such as the Internet of Things and mobile devices will force a new approach to network security architecture. Zero-trust networks (ZTNs) assume that the network is hostile, attackers are already inside the net, and segmentation isn't sufficient to determine trust, among other characteristics. This talk will describe zero-trust network properties and how we are integrating this architecture with existing cybersecurity defense strategies. We believe all sectors will have to adopt this strategy in the near future. In this talk, we’ll explore ZTN components and their relationships, determine what off-the-shelf software can be used to build a ZTN, and help you improve your overall security posture by integrating ZTN concepts into your existing network architecture.

[@jacobk.rakgwasi4361]

Did you know? This is the guy who back in 2004 taught me a full course on Computer and Network Security, at VA Tech. Great guy he is, and he knows his stuff, and is solidly knowledgeable in the area he preaches about:Security. Way to go...Randy!!

[@nicholasdipiazza]

Can tell he is a professor. Super easy to understand

[@stevenknudsen7902]

LOL, not all professors say it like it is like this guy

[@matsol101]

One of the very best talks I ever heard in this space. Hats off!

[@mitsufisher6786]

Worth your time.

[@stormshadow0808]

Possibly the best video on ZTNA

[@biohackingalchemy7996]

The OSSTMM created what you are calling "zero trust" in 2000. Go read the OSSTMM, in this case Chapter 5 called "Trust"

[@NeonNotch]

This guy is so easy to understand!

[@garryholmberg6502]

Excellent!

[@santoshkarthedath3876]

This is the best Zero Trust 101

[@biohackingalchemy7996]

The OSSTMM created what you are calling "zero trust" in 2000. Go read the OSSTMM, in this case Chapter 5 called "Trust"

[@hadif3169]

sasn undertail

[@biohackingalchemy7996]

The OSSTMM created what you are calling "zero trust" in 2000. Go read the OSSTMM, in this case Chapter 5 called "Trust"

[@619sdbdub]

at 2:00 "stroke 32 and stoke 48" is mentioned. I am unfamiliar with that term and Google keeps bringing up the medical condition.

[@cheekybastard99]

I think he's referencing to CIDR ranges /32

[@noirth-security]

“Stroke” is what British folks would call “forward slash” or the slash character. So listen to it as /32 which would refer to CIDR