TRUST NOTHING: GOOGLE'S APPROACH TO ENTERPRISE SECURITY IN FORENSIC CONTEXT

No ratings

Presented at First 2017 by

Jan Monsch

Jan is Staff Security Engineer and member of Google's Infrastructure Protection team. He previously was tech lead on machine identity and inventory on the BeyondCorp effort and is currently leading the efforts to improve firmware security, verification and transparency. Prior to joining Google in 2010, he was Senior Security Analyst at Compass Security AG and Software Engineer at Entrust Technologies. He has a bachelor’s degree in electrical engineering from the Zurich University of Applied Sciences and a master’s degree with honors in security and forensic computing from the Dublin City University. Virtually every company today enforces perimeter security through firewalls. This is a flawed approach since an attacker can move with relative ease on the network once the perimeter is breached. As mobile and cloud technologies continue to evolve, this enterprise security model becomes increasingly more difficult to enforce. Google takes a different approach through their BeyondCorp model, which removes implicit network trust and brings corporate applications to the Internet. This talks introduces the BeyondCorp model, how the notion of trust is approached, how device inventory ties into it and what chances and challenges the model brings to forensic capabilities.