Modern Access Security: Ditch Passwords, Implement 0-Trust & Secure APIs - Travis Spencer - ESW
Don’t leave the door open. Modern systems are complex and require you to consider many aspects. Here are some aspects we consider critical:
APIs are the dominant software development direction/trend. Traditional/legacy ways to grant access is not fit for purpose of protecting this new way of delivering products and services.
Customers are demanding better digital experiences. To maintain a competitive edge and drive brand loyalty businesses need to provide great online experiences.
Standards (such as OAuth and OpenID Connect) are important to ensure high-security levels. Also enables scalability and helps future-proof your infrastructure. For example in the financial sector, these standards play a key role in the drive toward open banking.
A modern architecture is a zero trust architecture. In a zero trust architecture, the new perimeter hinges on identity.
Segment Resources:
https://thenewstack.io/zero-trust-tim... This segment is sponsored by Curity. Visit https://securityweekly.com/curity to learn more about them!
Visit https://www.securityweekly.com/esw for all the latest episodes!
Show Notes: https://securityweekly.com/esw296
00:00 - Enterprise Security Weekly
00:56 - SecurityPosition Management
01:54 - Enterprise Security Weekly and happy International Accounting Day
02:50 - What the Fraud
09:05 - Does this provide a mechanism for pure Cloud identity?
13:08 - Zero Trust
18:11 - What is a center constraint token?
19:22 - Web Identity
22:45 - Creating that Network Effect
24:03 - Future
26:42 - Identity Per Se
27:01 - What are the attributes about you?