How Google Protects Its Corporate Security Perimeter without Firewalls
•
2 likes•620 views
The increasing mobility of professional users has brought an end to the traditional corporate security perimeter. Google has reinvented its security perimeter around devices through its groundbreaking "BeyondCorp" initiative. In this talk, two Google security leaders will share how this transformation took place, where it's headed and how you can apply this approach to your organization. (Source: RSA Conference USA 2017)
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to How Google Protects Its Corporate Security Perimeter without Firewalls
Similar to How Google Protects Its Corporate Security Perimeter without Firewalls (20)
More from Priyanka Aash
More from Priyanka Aash (20)
Recently uploaded
Recently uploaded (20)
How Google Protects Its Corporate Security Perimeter without Firewalls
- 1. SESSION ID:SESSION ID: #RSAC Heather Adkins BeyondCorp - How Google Protects Its Corporate Security Perimeter without Firewalls TECH-T11 Director of Security Google Rory Ward Site Reliability Engineering Manager Google
- 3. #RSAC How your Enterprise is probably set up
- 4. #RSAC A convergence of issues 4
- 5. #RSAC WALLS WORK DON’T Google’s realization ... WALLS DON’T WOR K
- 7. #RSAC BeyondCorp Principles ... #1 Connecting from a particular network must not determine which services you can access.
- 8. #RSAC BeyondCorp Principles ... #2 Access to services is granted based on what we know about you and your device.
- 9. #RSAC BeyondCorp Principles ... #3 All access to services must be authenticated, authorized and encrypted.
- 10. #RSAC Our Six Year Mission To have every Google employee work successfully from untrusted networks without use of a VPN.
- 11. #RSAC#RSAC Implementing BeyondCorp How we did it and guidelines for how you can do it.
- 13. #RSAC Get intimate with your Users User Inventory
- 14. #RSAC Get intimate with your Devices Device Inventory
- 15. #RSAC Build a Dynamic Trust Repository Trust Repository
- 16. #RSAC Build and Enforce Access Policy Access Control Engine User Inventory Device Inventory Trust Repository
- 17. #RSAC Enable Access from anywhere Access Proxy Access Control Engine Single Sign On
- 18. #RSAC#RSAC Migrating to BeyondCorp How we did it and guidelines for how you can do it.
- 20. #RSAC Deploy an Unprivileged Network
- 23. #RSAC#RSAC Outreach Telling the broader community about BeyondCorp
- 24. #RSAC BeyondCorp described to the Industry
- 25. #RSAC#RSAC Lessons Learned What six years has taught us
- 26. #RSAC Lessons Learned • Get, and retain, executive support.
- 27. #RSAC Lessons Learned • Data Quality is key.
- 28. #RSAC Lessons Learned • Enable Painless Migration.
- 29. #RSAC Lessons Learned • Clear User Communications.
- 30. #RSAC Lessons Learned • Run Highly Reliable Systems.
- 31. #RSAC Applying BeyondCorp 1. Have zero trust in your network. 2. Base all access decisions on what you know about the user and their device. 3. Migrate carefully so as not to break existing users.
- 32. #RSAC Questions and Answers ...