Zero Trust - A Vision for Securing Cloud and Redefining Security by Vandana Verma

Vandana Verma
President @Infosecgirls , Board-BoD @owasp , Leader @OWASPBangalore , WoSec, Work @IBM Co-organizer @bsidesdelhi

Zero Trust - A Vision for Securing Cloud and Redefining Security
Abstract: Zero Trust – A Vision for Securing Cloud Delivered Business The success of early stories of adoption pushed many organizations not only to take the cloud seriously but also to make it the priority.
Many ideas of digitizations are built on the cloud. COVID-19 pandemic has further accelerated it in an unprecedented way, primarily due to almost all workforce working remotely, and applications meant for deployed over the closed network are increasingly opened for remote access—however, decisions of moving to the cloud is always contested on the basis of security and privacy. People and devices coming on the corporate network is the critical concern. The security is architected on believing everyone inside the network is trusted—but nowhere remains true in the current paradigm. Trust will never be deterministic based on pre-decided criteria. It has to be earned every time, and at every instant, you seek access.

In the talk, we will explore the concept of zero trust and will try to demystify zero trust models. The talk will focus on implementation and deployment scenarios of zero trust for organizations, How should the business prepare for the transition, what are the architectural requirements and what policies are required to be implemented? Also what Red teamers can take away and leverage the framework to see the security flaws in an organisation.