User identity management from the network layer through to the application layer

No ratings

Presented at AusCERT 2014 by

Mark Stuart

Being able to identify users across multiple OSI layers is a great enabler for better network security. Leveraging services like LDAP to define user rights and permissions takes away reliance on simple IP address based policies which in reality are not secure. It also allows us to empower users where escalated privileges are required. Whether this be north-south (internet) or east-west (internal) traffic. We examine how to enable this from the network layer up, and how this can be leveraged across different OS platforms including BYOD solutions.