Re:Department of Defense Releases Zero Trust Strategy and Ro...
by nonameiguess on Wednesday November 23, 2022 @06:17AM
(#33717792)
They are. The entire purpose of the zero trust push is that it is nearly impossible to completely prevent perimeter breaches, so instead design in such a way that an actor inside your perimeter is not automatically trusted.
[ Parent
| on HN ]
Re:Department of Defense Releases Zero Trust Strategy and Ro...
by PLG88 on Wednesday November 23, 2022 @06:55AM
(#33718057)
You can almost entirely prevent perimeter breaches (from untrusted attacks) by implementing authenticate-before-connect with strong identity incl. closing all inbound ports at source and destination.