Ethan Heilman – BastionZero Ephemeral Security podcast

2y ago 1:07:02

Контент предоставлен Steve Stonebraker. Весь контент подкастов, включая эпизоды, графику и описания подкастов, загружается и предоставляется непосредственно компанией Steve Stonebraker или ее партнером по платформе подкастов. Если вы считаете, что кто-то использует вашу работу, защищенную авторским правом, без вашего разрешения, вы можете выполнить процедуру, описанную здесь https://ru.player.fm/legal.

Chat with @Ethan_Heilman, CTO of @getBastionZero on how they are adding additional security when accessing remote infrastructure. BastionZero adds an additional separate Multi Factor Authentication into the authentication process and has a unique multi-root security model.

Ethan can be found at:

LinkedIn: https://www.linkedin.com/in/ethan-heilman-39896934/

Twitter: https://twitter.com/Ethan_Heilman

//Show Notes//

BastionZero's website - https://www.bastionzero.com/

Video on how multiple MFA works with Bastion Zero - https://brakertech.com/aws-systems-manager-session-manager-on-steroids/

Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio

Intro music by Margo Stonebraker

//Chapter Timestamps//

00:00:41 Meet Ethan Heilman

00:01:10 When did you first use a computer?

00:01:29 How did you get into Information Security

00:02:42 Crypto Company to Bastion Zero

00:05:08 Multiparty Computation

00:06:07 Certificate Authorities

00:08:13 AWS PrivateLink/VPC Endpoints

00:10:38 How does Bastion Zero Work?

00:14:55 Shared Responsibility

00:16:50 Dynamic Targets

00:19:46 What does the term "Zero Trust" mean to you?

00:21:01 Proxying HTTP

00:23:17 SELinux

00:23:45 Privileged Access Management

00:27:35 AWS Root Account

00:33:26 Separate Admin Accounts

00:36:12 API Keys

00:40:58 Response for product in the wild?

00:45:11 Stopping Ransomware

00:52:26 Phishing 01:01:21 Modifying Linux Pluggable Authentication Module 01:06:18 Goodbye

15 эпизодов