Threatline

What’s the right amount of trust to build into your network? Less than Zero

There's no doubt that customers are being offered what Sinclair describes as "Loads of really expensive third party vendor network security." These will promise not just security but, for example, AI-powered, self-learning security. "The problem with these tools is that the focus is policing the business network, under the assumption that the business network is a safe place to be." Because very few users, and their data, exist in a secure enclosed network. "If you're trying to move the internal network back to being in a position of trust, then you've already lost." "You should assume that external and internal threats always exist within your network at all times." From there, the third principle is that "The locality of the network is not sufficient for deciding if a user or a device who's connected to that network is trusted or untrusted." It's easy to see how these principles map to other modern network concepts, particularly SD-WAN, which abstracts the network and access to different parts of it, away from the physical infrastructure.