From 5fc364df4deb1a129d2173e246ca97a477cd7ce4 Mon Sep 17 00:00:00 2001 From: "daniel.wittich" Date: Tue, 5 Nov 2019 21:25:48 +0100 Subject: [PATCH] Add BeyondCorp to assess --- radar/2019-11-01/beyondcorp.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 radar/2019-11-01/beyondcorp.md diff --git a/radar/2019-11-01/beyondcorp.md b/radar/2019-11-01/beyondcorp.md new file mode 100644 index 0000000..bb23ed1 --- /dev/null +++ b/radar/2019-11-01/beyondcorp.md @@ -0,0 +1,12 @@ +--- +title: "BeyondCorp" +ring: assess +quadrant: methods-and-patterns + +--- + +BeyondCorp is a Zero Trust framework that evolved at Google. +With the surge of cloud technologies and micro services the network perimeter is ever disappearing. +This provides challenges for authentication of subjects that used to heavily rely on network segments. +With Zero Trust no assumption is made about how far something can be trusted, everything is untrusted by default and authentication and authorisation happens all the time, not just once. +While network segments and VPN connections may still have relevance in specific areas AOE is increasingly implementing BeyondCorp in all its components and services with implementing OAuth and OpenID Connect. \ No newline at end of file