News for hackers. Stuff that matters.
Re:Department of Defense Releases Zero Trust Strategy and Ro... by nonameiguess on Wednesday November 23, 2022 @06:17AM (#33717792)
They are. The entire purpose of the zero trust push is that it is nearly impossible to completely prevent perimeter breaches, so instead design in such a way that an actor inside your perimeter is not automatically trusted.
Re:Department of Defense Releases Zero Trust Strategy and Ro... by PLG88 on Wednesday November 23, 2022 @06:55AM (#33718057)
You can almost entirely prevent perimeter breaches (from untrusted attacks) by implementing authenticate-before-connect with strong identity incl. closing all inbound ports at source and destination.