Security Sysadmin Google BeyondCorp Initiative - Zero Trust Framework

eva2000 · Mar 31, 2017

Anyone heard of Google's BeyondCorp Initiative and Zero Trust Framework ? Sounds interesting and something for long term integration into Centmin Mod for more secure access to servers/clusters ?

https://www.beyondcorp.com/

https://www.beyondcorp.com/faq/

https://www.scaleft.com/

https://duo.com/

http://www.tomshardware.com/news/duo-beyond-enterprise-security-framework,33611.html

Who Started BeyondCorp?
BeyondCorp is an initiative within Google that started around 2010, after a highly sophisticated APT attack named Operation Aurora attempted to gain access to the source code repositories of many large Enterprises.

Google first wrote about the concepts behind the BeyondCorp initiative in 2014, in a paper titled BeyondCorp: A New Approach to Enterprise Security. They wrote a follow up paper in 2016 titled BeyondCorp: Design to Deployment at Google that detailed their migration path and findings along the way. A third paper title #BeyondCorp: The Access Proxy goes into detail about some key components.
Click to expand...

ScaleFT https://www.scaleft.com/use-cases/linux/

Managing privileged access to infrastructure resources across all of your employees, contractors, and consultants is a cumbersome task. The traditional method of using static credentials can be problematic in case an SSH key is lost, stolen, or even just shared. A common approach is to implement a rigorous key rotation policy, but this is difficult to enforce and doesn’t fully protect against misuse.

ScaleFT Zero Trust Access Management greatly improves security for Linux server administration by eliminating static credentials altogether in favor or short-lived client certificates issued on every login attempt. With ScaleFT, you can better control who has access to what servers through a flexible RBAC model, manage Linux users and groups easily, and view team activity in a centralized location.
Click to expand...

http://www.tomshardware.com/news/duo-beyond-enterprise-security-framework,33611.html

‘Duo Beyond’
Duo Security is a fast-growing company that has doubled its user base every year for the past few years. You may know it for its two-factor authentication solutions. Duo is now also the first to package Google’s BeyondCorp framework and enterprise security philosophy into a commercial solution, Duo Beyond, that can be purchased by other companies to better secure their own IT infrastructures.

Duo Beyond shifts a company's security model from being firewall-based to being based on device information, device health, and the associated user. Because of this, companies can completely forego the use of a Virtual Private Network (VPN) when allowing users to access internal resources. Managers can also identify which devices are corporate or personal, control the apps to which users have access, and block untrusted endpoints.

According to Duo, deployment of its solution can be as fast as one hour. That’s how long it took Kayak, the travel company, to integrate the framework with its IT systems.
Click to expand...

Log in / Register

Forums

Join the community today

Security Sysadmin Google BeyondCorp Initiative - Zero Trust Framework

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

Security Sysadmin Google BeyondCorp Initiative - Zero Trust Framework

eva2000 Administrator Staff Member

.