Microsoft: Zero Trust security just hit the mainstream

guest · Nov 10, 2021

The role of visibility and analytics in zero trust architectures
November 10, 2021
https://www.helpnetsecurity.com/2021/11/10/visibility-analytics-zero-trust/

Zero trust architecture (ZTA) is not a new concept, but with the White House Executive Order published earlier this year, many in the networking space have started to ask about how network visibility analytics fits into the equation. To answer that, we first need to look at what’s driving this shift.

Section 3 of the EO states that agencies (and organizations working with them) must adopt security best practices, advance toward ZTA, and accelerate movement to secure cloud services SaaS, IaaS and PaaS. It called for government agencies to update existing plans to prioritize resources for the adoption and use of cloud technology, and to develop plans to implement ZTA (using NIST’s migration steps)
Click to expand...

It also called on the Cybersecurity and Infrastructure Security Agency (CISA) to modernize to be fully functional with cloud-computing environments with ZTA, and for FedRAMP to develop security principles governing cloud service providers for incorporation into agency modernization efforts.

With all the vendor confusion around what is and is not ZTA, I’d like to explore its impact on network visibility (and the requirements).
Click to expand...

guest · Nov 10, 2021

#BHEU: Zero Trust Protects Against Ransomware, Claims Engineer
November 10, 2021
https://www.infosecurity-magazine.com/news/bheu-future-cybersecurity-zero/

“A zero trust architecture can protect against ransomware” was the resounding claim made by Ben Jenkins, senior solutions engineer at ThreatLocker, during a session at Black Hat Europe 2021.

The session titled 'Moving Beyond Threat Detection - A Look at The Future of Cybersecurity with Zero Trust,' focused on the state of cybersecurity and how to protect against ransomware with a zero trust architecture.
The session began with a thorough exposition of software – the tagline being that its possibilities are “endless." Additionally, "there is good software and bad software,” stressed Jenkins, and “yes, malware is just software.”
Click to expand...

With all of this, “how can we solve the problem?” asked Jenkins. “There are solutions,” he continued, which focus on the human side, control side and detection side of a security stack. “Zero trust is that solution,” commented Jenkins, which is “primarily about least privilege.” Crucial constituents of a zero trust approach include application whitelisting, elevation control and storage control.

Overall, “the only way to offer a proper defense,” remarked Jenkins, is to “change the paradigm of endpoint security.”
Click to expand...

guest · Nov 11, 2021

Zero trust: Now is the time
November 11, 2021
https://www.computerweekly.com/opinion/Zero-trust-Now-is-the-time

Several key trends are driving innovation and change in the cyber security market as software, hardware and service providers seek to respond to the changing cyber security needs of businesses operating in a highly competitive global market.

The active adoption of a zero-trust approach to cyber security is one of the greatest of these trends in a rapidly digitising post-Covid world because as users, devices and application workloads move outside the confines of the corporate network, the traditional model of enforcing security at the network perimeter is no longer appropriate.
Click to expand...

Zero trust fits modern cyber security requirements
Zero trust is the most relevant security model in this regard. It fits today’s security requirements well and is growing in popularity. Although the concept of zero trust is not new, it is finally an established paradigm for cyber security thinking in which breach is assumed and all identity and access must be verified.

In contrast to the traditional model, where all users are trusted once past the network perimeter, in the zero-trust model, no user or device is trusted just because they have been allowed onto the network.
Click to expand...

Zero trust meets remote working
The usefulness and importance of the zero-trust approach to security has increased as IT environments have become increasingly distributed.
Click to expand...

guest · Nov 13, 2021

US Department of Defense to Launch Zero Trust Office
Move Comes as Agencies Accelerate Adoption of the Model in Wake of SolarWinds
November 12, 2021
https://www.databreachtoday.com/us-department-defense-to-launch-zero-trust-office-a-17905

In an effort to streamline the adoption of zero trust cybersecurity architectures, the U.S. Department of Defense in December will launch an office dedicated to zero trust, according to a senior DOD official.

This announcement comes as federal agencies move to modernize their systems following the monthslong SolarWinds cyberespionage campaign that was first detected in late 2020, in which threat actors allegedly backed by the Russian government pushed out a malicious software update and breached some 100 organizations globally. This included nine U.S. federal agencies - including the Treasury, Commerce, State, Energy, and Homeland Security departments.

Speaking at C4ISRNET's CyberCon event this week, McKeown said, "We're standing up a portfolio management office that will … rationalize all network environments out there, prioritize and set each one of them on a path of zero trust over the coming five, six, seven years."
Click to expand...

'Implementing at a Fast Pace'
The "never trust, always verify" model suggests that devices - even those previously verified on corporate networks - cannot be trusted by default. It advocates for the principle of least privilege, in which access to applications and services is based on necessity, user behavior and additional authentication.

McKeown said this week that the Defense Department has adopted some components that, collectively, will achieve zero trust status, and has taken that approach for its enclaves.
Click to expand...

"By focusing on zero trust, the Pentagon sends a clear message to cybercriminals that they are taking cybersecurity seriously," says Felipe Duarte Domingues, a security researcher for the firm Appgate. "This should be a wake-up call to all organizations that haven't adopted zero trust yet. The best way to contain the damage from a ransomware or a spyware attack is to implement [the model]."
Click to expand...

guest · Nov 22, 2021

How Nvidia aims to demystify zero trust security
November 22, 2021
https://venturebeat.com/2021/11/22/how-nvidia-aims-to-demystify-zero-trust-security/

Nvidia sees how vulnerable its enterprise customers’ datacenters are, leading them to fast-track their zero-trust platform to close growing cybersecurity gaps.

Many enterprise datacenters rely on decades-old security infrastructure that stops at the perimeter. For bad actors and cybercriminals, this is the equivalent of leaving datacenters’ doors unlocked. As a result, Nvidia sees datacenter attack risks grow in complexity, speed, and severity to customer’s operations, combined with a need to support AI and data science workloads.
Click to expand...

[...] latest release of Nvidia Morpheus. Designed to detect threats and breach attempts using unsupervised machine learning algorithms, Nvidia Morpheus is a continuously learning cybersecurity framework that adapts and modifies workflows based on accumulated data patterns.

“The rise of transformative innovations such as AI, 5G, and smart devices has dramatically expanded traffic moving through the modern datacenter, making it more difficult to identify potential breaches and attacks,” said Kevin Deierling, senior vice president of networking at Nvidia.
“Nvidia’s three-pillar zero-trust security platform allows developers to create fully secure environments that protect virtually every aspect of the cloud-native datacenter, in real-time.”
Click to expand...

Doubling down on DOCA development this year, Nvidia used GTC 2021 to announce the 1.2 release supports new authentication, attestation, isolation, and monitoring features, further strengthening Nvidia’s zero-trust platform.
Morpheus enables zero trust at scale in datacenters
Nvidia Morpheus is an AI-based cybersecurity framework built on Nvidia RAPIDS and Nvidia AI. It’s designed to provide DevOps tools to cybersecurity developers and practitioners implementing cybersecurity applications, systems, and networks.

The latest release of the Nvidia Morpheus framework provides zero-trust developers and partners with the tools and frameworks they need to create and fine-tune customized models tailored to specific cybersecurity scenarios.
Click to expand...

guest · Sep 6, 2022

VMware, Nvidia partner on zero-trust protected servers
SC Staff - September 6, 2022

VMware and Nvidia announced at the VMware Explore 2022 conference in California that they are collaborating to create a new data center platform that has built-in AI inference, AI modeling and zero-trust security capabilities, which are needed for the coming era of AI, according to ZDNet.

The companies plan to bring VMware's vSphere 8 enterprise workload platform, which was newly announced at the event, together with the newest PowerEdge servers by Dell and Nvidia's BlueField-2 data processing units, AI enterprise software and GPUs, with all elements to be made accessible through Nvidia LaunchPad.
Click to expand...

guest · Jan 24, 2023

Gartner: Zero Trust Won't Mitigate Over Half of Attacks
Phil Muncaster UK / EMEA News Reporter, Infosecurity Magazine - January 24, 2023

Just one in 10 large enterprises will have a “mature and measurable” zero trust program in place by 2026, and even those that do will increasingly find its controls unable to mitigate the impact of attacks, according to Gartner.
Click to expand...

The analyst claimed that take-up of Zero Trust would increase slowly from just 1% today, indicating the difficulty of turning plans into reality.

However, it’s by no means a silver bullet. Gartner warned that over the coming three years, more than half of all cyber-attacks will be focused in areas that zero trust controls don’t cover and can’t mitigate.

“The enterprise attack surface is expanding fast and attackers will quickly consider pivoting and targeting assets and vulnerabilities outside of the scope of zero trust architectures (ZTAs),” said Jeremy D’Hoinne, VP analyst at Gartner.
Click to expand...

Despite this, however, the approach will still offer a valuable way to reduce risk and limit the impact of many threats, Gartner said.

“Many organizations established their infrastructure with implicit rather than explicit trust models to ease access and operations for workers and workloads. Attackers abuse this implicit trust in infrastructure to establish malware and then move laterally to achieve their objectives,” said John Watts, Gartner VP analyst.
“Zero Trust is a shift in thinking to address these threats by requiring continuously assessed, explicitly calculated and adaptive trust between users, devices and resources.”
Click to expand...

Gartner Predicts 10% of Large Enterprises Will Have a Mature and Measurable Zero-Trust Program in Place by 2026

January 23, 2023
Zero trust is top of mind for most organizations as a critical strategy to reduce risk, but few organizations have actually completed zero-trust implementations. Gartner, Inc. predicts that by 2026, 10% of large enterprises will have a mature and measurable zero-trust program in place, up from less than 1% today.
Click to expand...

Log in or Sign up

Microsoft: Zero Trust security just hit the mainstream

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Microsoft: Zero Trust security just hit the mainstream

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches