Chat with @Ethan_Heilman, CTO of @getBastionZero on how they are adding additional security when accessing remote infrastructure. BastionZero adds an additional separate Multi Factor Authentication into the authentication process and has a unique multi-root security model.

Ethan can be found at: LinkedIn: https://www.linkedin.com/in/ethan-heilman-39896934/ Twitter: https://twitter.com/Ethan_Heilman

//Show Notes// BastionZero's website - https://www.bastionzero.com/ Video on how multiple MFA works with Bastion Zero - https://brakertech.com/aws-systems-manager-session-manager-on-steroids/ Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio Intro music by Margo Stonebraker

//Chapter Timestamps// 00:00:41 Meet Ethan Heilman

00:01:10 When did you first use a computer?

00:01:29 How did you get into Information Security

00:02:42 Crypto Company to Bastion Zero

00:05:08 Multiparty Computation

00:06:07 Certificate Authorities

00:08:13 AWS PrivateLink/VPC Endpoints

00:10:38 How does Bastion Zero Work?

00:14:55 Shared Responsibility

00:16:50 Dynamic Targets

00:19:46 What does the term "Zero Trust" mean to you?

00:21:01 Proxying HTTP

00:23:17 SELinux

00:23:45 Privileged Access Management

00:27:35 AWS Root Account

00:33:26 Separate Admin Accounts

00:36:12 API Keys

00:40:58 Response for product in the wild?

00:45:11 Stopping Ransomware

00:52:26 Phishing

01:01:21 Modifying Linux Pluggable Authentication Module

01:06:18 Goodbye