What is old is new again: default deny on the endpoint - Colby DeRodeff, Danny Jenkins - ESW #402
14 April - 2 hours 3 minsDefault deny is an old, and very recognizable term in security. Most folks that have been in the industry for a long time will associate the concept with firewall rules. The old network firewalls, positioned between the public Internet and private data centers, however, were relatively uncomplicated and static. Most businesses had a few hundred firewall rules at most.
The idea of implementing default deny principles elsewhere were attempted, but without much success. Internal networks (NAC), and endpoints (application control 1.0) were too dynamic for the default deny approach to be feasible. Vendors built solutions, and enterprises tried to implement them, but most gave up.
Default deny...
Series Episodes
Security Weekly News Interviews Participants and Coaches at NECCDC - SWN #472
33 mins
29 April Finished
ISO 42001 Certification, CIOs Struggle to Align Strategies, and CISOs Rethink Hiring - Martin Tschammer - BSW #392
1 hour 3 mins
23 April Finished
