OIDF Workshop at Verizon Media -- 9/30/2019 -- Continuous Access Ev...

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Continuous
Access
Evaluation
Protocol
Atul Tulshibagwale
Software Engineer, Google Cloud

● Enterprises migrating to a perimeter-free “zero-trust” architecture
● Attack focus shifting from network penetration to ...

3
● Current authentication sessions may last for
days, months or even years
● Access context can change within minutes
● U...

Multiple Sources of Truth
Modern networks are richer:
● Identity providers
● Device management services
● Endpoint protect...

5
A Limited
Publish and
Subscribe
Model
● Network peers express interest in shared
sessions
● Any change in information of...

6
1. Service Request
2. Express Interest and Context Updates
(part of CAEP)
3. Evaluation Updates (part of CAEP)
4. Remedi...

7
● Only information that needs to be shared is
communicated
● Effect is nearly instantaneous
● Decoupled from authenticat...

1. WiFi access point logs in user using their
device certiﬁcate
2. WiFi service expresses interest in the device
with the ...

1. Employee logs in using federated
authentication to a ﬁle sharing service
(SP)
2. IdP and SP express interest with each
...

Comparison with RISC
● Potential similarity in mechanisms, but applications are different
● Routine dynamic data about sub...

Current Status
● Mailing list with about 70 members from: Google, Microsoft,
Okta, VMWare, Cisco, Thales, Sailpoint, HPE, ...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

View on Slideshare

1 of 11 Ad

View on Slideshare

1 of 11 Ad