Download as PDF, PPTX
Uploaded byPriyanka Aash
How Google Protects Its Corporate Security Perimeter without Firewalls
The document outlines Google's BeyondCorp initiative, which enables secure access to corporate resources without traditional firewalls, emphasizing a zero trust architecture. Key principles include user and device verification for access, authenticated and encrypted service interactions, and enabling access from untrusted networks. It also shares implementation guidelines, lessons learned over six years, and best practices for migrating towards this model.
More Related Content
Similar to How Google Protects Its Corporate Security Perimeter without Firewalls
How Google Protects Its Corporate Security Perimeter without Firewalls
- 1. SESSION ID:SESSION ID: #RSAC HeatherAdkins BeyondCorp - How Google Protects Its Corporate Security Perimeter without Firewalls TECH-T11 Director of Security Google Rory Ward Site Reliability Engineering Manager Google
- 2.
- 3. #RSAC How your Enterpriseis probably set up
- 4. #RSAC A convergence ofissues 4
- 5.
- 6.
- 7. #RSAC BeyondCorp Principles ... #1Connecting from a particular network must not determine which services you can access.
- 8. #RSAC BeyondCorp Principles ... #2Access to services is granted based on what we know about you and your device.
- 9. #RSAC BeyondCorp Principles ... #3All access to services must be authenticated, authorized and encrypted.
- 10. #RSAC Our Six YearMission To have every Google employee work successfully from untrusted networks without use of a VPN.
- 11. #RSAC#RSAC Implementing BeyondCorp How wedid it and guidelines for how you can do it.
- 12.
- 13. #RSAC Get intimate withyour Users User Inventory
- 14. #RSAC Get intimate withyour Devices Device Inventory
- 15. #RSAC Build a DynamicTrust Repository Trust Repository
- 16. #RSAC Build and EnforceAccess Policy Access Control Engine User Inventory Device Inventory Trust Repository
- 17. #RSAC Enable Access fromanywhere Access Proxy Access Control Engine Single Sign On
- 18. #RSAC#RSAC Migrating to BeyondCorp Howwe did it and guidelines for how you can do it.
- 19.
- 20. #RSAC Deploy an UnprivilegedNetwork
- 21.
- 22.
- 23. #RSAC#RSAC Outreach Telling the broadercommunity about BeyondCorp
- 24. #RSAC BeyondCorp described tothe Industry
- 25. #RSAC#RSAC Lessons Learned What sixyears has taught us
- 26. #RSAC Lessons Learned • Get,and retain, executive support.
- 27. #RSAC Lessons Learned • DataQuality is key.
- 28. #RSAC Lessons Learned • EnablePainless Migration.
- 29. #RSAC Lessons Learned • ClearUser Communications.
- 30. #RSAC Lessons Learned • RunHighly Reliable Systems.
- 31. #RSAC Applying BeyondCorp 1. Havezero trust in your network. 2. Base all access decisions on what you know about the user and their device. 3. Migrate carefully so as not to break existing users.
- 32.