Guest:

  • Anoosh Saboori, former Product Manager at Google Cloud

Topics:

  • We had zero trust episodes before and definitions vary! When we say zero trust, what do we mean?

  • What about zero trust for workloads in production? When you say “workload,” what do you mean?

  • What is BeyondProd, for those that are unfamiliar with it? And how is this different from BeyondCorp?

  • How has BeyondProd actually been implemented at Google?
  • What threats does it help with? Is this real threats or compliance?
  • Why is now a good time to be thinking about zero trust for production systems?
  • Companies have many security tools deployed, including microsegmentation and firewalls, how does this toolset fit? Does it replace anything they have deployed?

Resources:

  • BeyondProd papers
  • “Zero Trust: Fast Forward from 2010 to 2021” (ep8)
  • “Gathering Data for Zero Trust” (ep4)
  • “Google Workspace Security: from Threats to Zero Trust” (ep99)
  • “Zero Trust: So Easy Even a Government Can Do It?” (ep59)
  • “Is This Binary Legit? How Google Uses Binary Authorization and Code Provenance” (ep66)

See All 296 Episodes of "Cloud Security Podcast by Google"