How Google Protects Its Corporate Security Perimeter without Firew...

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Heather Adkins
BeyondCorp -
How Google Protects Its Corporate
Security Perimeter without Fire...

#RSAC
Story time

#RSAC
How your Enterprise is probably set up

#RSAC
A convergence of issues
4

#RSAC
WALLS
WORK
DON’T
Google’s realization ...
WALLS DON’T
WOR
K

#RSAC
A different approach

#RSAC
BeyondCorp Principles ...
#1 Connecting from a particular network must not determine which
services you can access.

#RSAC
BeyondCorp Principles ...
#2 Access to services is granted based on what we know about
you and your device.

#RSAC
BeyondCorp Principles ...
#3 All access to services must be authenticated, authorized
and encrypted.

#RSAC
Our Six Year Mission
To have every Google employee
work successfully from untrusted networks
without use of a VPN.

#RSAC#RSAC
Implementing BeyondCorp
How we did it and guidelines for how you can do it.

#RSAC
High Level
Access
Proxy
Single
Sign On
Access
Control
Engine
User
Inventory
Device
Inventory
Trust
Repository

#RSAC
Get intimate with your Users
User Inventory

#RSAC
Get intimate with your Devices
Device Inventory

#RSAC
Build a Dynamic Trust Repository
Trust
Repository

#RSAC
Build and Enforce Access Policy
Access
Control
Engine
User
Inventory
Device
Inventory
Trust
Repository

#RSAC
Enable Access from anywhere
Access
Proxy
Access
Control
Engine
Single
Sign On

#RSAC#RSAC
Migrating to BeyondCorp
How we did it and guidelines for how you can do it.

#RSAC
Migrating to BeyondCorp

#RSAC
Deploy an Unprivileged Network

#RSAC
Analyse our Traffic

#RSAC
Safely Migrate Devices

#RSAC#RSAC
Outreach
Telling the broader community about BeyondCorp

#RSAC
BeyondCorp described to the Industry

#RSAC#RSAC
Lessons Learned
What six years has taught us

#RSAC
Lessons Learned
• Get, and retain, executive
support.

#RSAC
Lessons Learned
• Data Quality is key.

#RSAC
Lessons Learned
• Enable Painless Migration.

#RSAC
Lessons Learned
• Clear User Communications.

#RSAC
Lessons Learned
• Run Highly Reliable Systems.

#RSAC
Applying BeyondCorp
1. Have zero trust in your network.
2. Base all access decisions on what you know about the user...

#RSAC
Questions and Answers ...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 32 Ad

View on Slideshare

1 of 32 Ad