Zero Trust(ish) Networks: A New Approach to Security
Patrick Gray and Adam Pointon discuss the selective application of Zero Trust principles.
1The Failure of Zero Trust as a Comprehensive Architecture
The implementation of Zero Trust as a comprehensive architecture has been deemed unsuccessful. Most networks appear as if designed in 1999, while Zero Trust products seem tailored for 2049. This gap highlights the incompatibility between current network infrastructures and Zero Trust principles. Patrick Gray and Adam Pointon propose an alternative solution to this issue.
2The Concept of Zero Trust(ish) Networks
Zero Trust(ish) networks represent an approach where Zero Trust principles are applied selectively. Instead of redesigning entire networks, this method focuses on risky assets. Adam Pointon, CEO of Knocknoc, argues that this approach is more effective than the current status quo. It aims to reduce the overuse of the 'risk accepted' stamp in security practices.
3The State of Current Networks
Many of today's networks are managed with a design philosophy from the late 1990s. This makes them inadequate against modern cyber threats. Zero Trust products, designed for future needs, are incompatible with existing infrastructures. Practical solutions are needed to bridge this gap and enhance security effectively.
4Advantages of Selective Zero Trust Application
Applying Zero Trust principles selectively allows for more efficient resource use. By focusing on risky assets, overall security posture can be improved. This approach offers a more feasible method for complex network infrastructures. It also enhances security without negatively impacting business continuity.
5Knocknoc's Approach
Adam Pointon, CEO of Knocknoc, detailed the Zero Trust(ish) networks concept on the Risky Business podcast. The company claims this approach provides a more realistic solution to current network security challenges. Pointon calls on other industry players to adopt this method. Knocknoc's vision is making waves in the security sector.
6The Impact of the Podcast
The Risky Business podcast is a popular platform among security professionals. As Patrick Gray's guest, Adam Pointon had the opportunity to present the Zero Trust(ish) networks idea to a wide audience. The episode, also available on YouTube, reached an even broader audience. The topics discussed sparked significant debate within the cybersecurity community.
7Industry Reactions
The Zero Trust(ish) networks concept has received both support and criticism in the industry. Some experts believe this approach will work in practice. Others argue that half-measures will prove insufficient in the long run. The discussions encourage deeper thinking about the future of security architectures. Differing opinions reflect the dynamic nature of the sector.
8Recommendations for the Future
Patrick Gray and Adam Pointon advocate for smarter application of Zero Trust principles. They argue that focused solutions may be more effective than comprehensive approaches. This method seems particularly suitable for organizations with complex and legacy infrastructures. Zero Trust(ish) networks open a new area of discussion in the security industry.
Original article: Risky Business — Zero Trust(ish) Ağlar: Güvenlikte Yeni Yaklaşım