Discussing Zero Trust and Breakout Sessions

Do worries about your SSH keys keep you up at night? What happens when they change? What happens if they get compromised? This month we'll have an expert in Zero Trust help to spark our breakout discussions.

Want to get more involved? Become part of our community chat on Slack: https://bit.ly/bdo-slack

Code of Conduct: http://bit.ly/bdo-conduct

Agenda:

6pm - Welcome/intro
6:10 - "Everything you thought you knew about zero trust is broken"
6:35 - Breakout Sessions
7:05 - Congregate for Group Summaries
7:30 - Wrap-up

Speaker: Sharon Goldberg

Presentation:

I'll cover different security architectures for shell access to cloud resources. I'll start with traditional VPN + SSH key or bastion architectures and why these are being replaced with zero-trust systems. I'll talk about the ways to build zero-trust systems, and what we can learn from traditional security incidents like the 2011 Diginotar CA hack and SSO attacks like the one that was part of the 2020 SolarWinds incident.

More about this speaker:

Sharon Goldberg is the CEO and cofounder of BastionZero, a Boston infrastructure cybersecurity startup, and a tenured professor at Boston University. She has published over 30 peer-reviewed technical papers on infrastructure security and cryptography, has contributed to BGP, NTP, DNS Bitcoin and cryptography standards, and is an author of the 2015 attacks on NTP. Lately, she spends most of her day thinking about about shell access, kubernetes and CI/CD pipelines.