Identity - The Cornerstone of Information Security
0 likes63 views
The document discusses the importance of identity in information security and introduces the concept of zero-trust and least privilege as essential strategies to block a significant percentage of threats. It highlights recent high-profile security breaches, emphasizes the need for adaptable security measures across various technologies and environments, and advocates for comprehensive identity management strategies. The document concludes by stressing the necessity of placing identity at the center of security management to ensure effective monitoring and access control.
Identity - The Cornerstone of Information Security
- 1. Identity The Cornerstone of Information Security Ben Boyd | Sr. Security Architect | Integration Partners
- 2. YOU CAN BLOCK 95-100% of THREATS No machine learning No artificial intelligence No quantum cryptography
- 4. The End
- 6. A Native Nebraskan Knew in 1936
- 7. It’s as easy as 1,2,3….. 4 • Identify • Subjects, Objects, Actions… verbs? • Decide • Allow/Deny/Challenge (Know, Have, and Are) • Grant • Permissions, Authority, Access • Watch • Monitor, Record, Timed Access
- 8. But what about the last 4 months? • September 2017 • SEC – Non public filings (Remote Code Execution) GRANT • Equifax – 143M records of PII (Remote Code Execution) GRANT • Deloitte – 100% of emails (Admin Account..OMG 2FA) DECIDE • July 2017 • Verizon – 14M records of PII (Insecure publically facing) GRANT/WATCH • CA Assoc. of Realtors – 250K Credit Cards (Malware) GRANT/WATCH • June 2017 • Deep Root Analytics – 198M records of PII (unsecured cloud) GRANT/WATCH • Washington State University – 1M records of PII (stolen safe) GRANT/WATCH
- 9. Ok… The last 6 months? • May 2017 • Kmart – 1M Credit Cards (Malware) • OneLogin– 100% of customers (Private Key Loss) • Gmail – 1M Users Email Accounts (phishing) • April 2017 • Chipotle– 1M+ Credit Cards (Malware) • IHG – 1M+ Credit Cards (Malware) • FAFSA IRS Tool – 100K records of PII (Public Tool Abuse)
- 10. Identity. The new (old) perimeter. Yesterday’s Reality Today’s Reality Monolithic, Contained, Rigid Employees Perimeter Security, VPN THE WORLD BEFORE Distributed, Mobile, Hybrid Insecure, Fragmented THE WORLD TODAY Partners Employees Contractors Customers
- 11. Start Now! • The attack surface is spreading • Target and HVAC • Toasters and Cars coming soon! • Wait, Dyson is making a car?
- 12. So, I should just grill everyone?
- 14. Where does Identity Matter?
- 15. Context Matters • Geo-location • Device specific • Corporate Asset • Registered BYOD • Unregistered “Bad Guy” • IP/Location Reputation • Time Sensitive
- 16. Beside the Obvious Workstations (End Users) Servers Seriously? Why are we still giving these people admin rights?! User namespaces (Jails) Containers
- 17. Firewalls • Perimeter, Core, Virtual? D. All of the above • User-based FW is a MUST • User-based policies are a MUST
- 18. Applications • Put identity at the center of everything! • Network effect on access – Scale from 1 to millions • Stay neutral! Lifecycle Management Mobility Management Universal Directory Adaptive Multi-Factor Authentication Developer SDKs Single Sign-On API Access Management Extensible Profiles, Attribute Transformations, Directory Integration and AD Password Management Secure SSO for All Your Web Apps, On-prem and Cloud, with Flexible Policy, from Any Device Contextual Access Policies, Modern Factors, Adaptive Authentication, Integrations for Apps and VPNs Lifecycle Management, Cloud & On-prem App Integration, Mastering from Apps, Directory Provisioning, Rules, Workflow, Reporting Tight User Identity Integration, Device Based Contextual Access, Light-weight Management OAuth 2.0 API authorization, Flexible identity-driven policy engine, Easy & centralized administration across APIs SDKs simplify the process of managing your Okta org. Use our REST APIs easily.
- 19. How about both? (Sponsor Time!)
- 20. Where else? • Data Analytics • Info from everything • Network Gear • Servers • Endpoints • Clouds • Wireless • Toasters? • Aware, Alert, Alarm • Churn baby churn!
- 21. Questions
- 22. Thank You!