Zero trust in a hybrid architecture

Zero Trust in Hybrid Architectures
Patrick Sullivan
Director: Security Strategy
Akamai Technologies

Agenda
• Drivers of change in a Hybrid environment
• Zero Trust Overview
• How to incorporate Zero Trust into your transition to Cloud

©2017 AKAMAI | FASTER FORWARDTM
Golden Era of Network Perimeter
App #2
App #1
App #3
● Users & apps inside
● Inside = Trusted
● Walls work
● Threats remain outside

Applications Are Moving Outside
App #2
App #1
App #3
● IaaS & SaaS
● Hybrid
● Inconsistent visibility,
security & control
● Confusing end-user
experience

Users Have Moved Outside
App #2
App #1
App #3
● Mobile
● Digital ecosystem
● Global distribution
● Remote workers

Threats Are Moving Inside
App #1
App #2
App #3
● Security architecture
vulnerabilities leveraged
in complex attacks
● Malware, phishing &
data exfiltration
● Credential theft
● Single factor
authentication
● Lateral network
movement

Zero trust
Users & apps anywhere
Verify & never trust
Application access
App #1
App #2
App #3
There is no
inside...
Current Trends Require Zero Trust
App #2
App #1
App #3
Inside =
trusted
Users & apps inside
Trust at Network Layer
Full network access

“The data economy renders today's network,
perimeter-based security useless. As businesses
monetize information and insights across a complex
business ecosystem, the idea of a corporate perimeter
becomes quaint - even dangerous.”
Excerpt from Forrester’s Future-Proof your Digital Business
with Zero Trust Security

What’s Zero Trust?
Security model evangelized by Forrester Research
Key principles:
● The network is always assumed to be hostile.
● External and internal threats exist on the network at all
times.
● Network locality is not sufficient for deciding trust in
a network.
● Every device, user, and network flow is authenticated
and authorized.
● Policies must be dynamic and calculated from as many
sources of data as possible.
John Kindervag

Rob Joyce: Chief NSA TAO
USENIX Enigma 2016:”Disrupting Nation State Hackers”

Cloud, IoT, BYoD, Partner relationships all expand trust boundaries
“What are you doing to shore up the trust boundary of the things you really
must defend?”
“Most networks….Big castle walls…Hard outer shell….Soft gooey center”

Case Study: Google BeyondCorp

Akamai Architecture
Laptop
Micro Perimeter
Apps
Enterprise
App Access

Browser Based Access & No Public IP

Hybrid Zero Trust Architecture
Data Center
App #3
Cloud
App
SaaS
App
App #1
App #2
Branch
Roaming
Global Proxy Platform
> Performance Overlay
> WAF, AntiBot
Enterprise Connector
> Secure dial-out
> Deployed as VM or container
Global Proxy Platform
> Connection establishment
> Single sign-on
> Multi-factor authentication

Better Security and Better Performance
Before = 10.5 sec.
After = 5.5 sec.

Divorce Trust from Network Topology as you adopt Hybrid IT

Authenticate everything, Encrypt everything
Users, devices and apps - data in transit and at rest

Centralize policy definition,
but distribute policy enforcement

Treat trust as dynamic and situational

Always verify with full visibility and logging

Summary
• Zero Trust Security Architectures Reduce Risk and Complexity for a
Hybrid Architecture
• New Zero Trust Services are evolving very quickly
• Consider Cloud Migration as an opportunity to migrate to a Zero Trust
Architecture

Zero trust in a hybrid architecture

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Zero trust in a hybrid architecture

Similar to Zero trust in a hybrid architecture (20)

Recently uploaded

Recently uploaded (20)

Zero trust in a hybrid architecture