通过零信任架构最大限度地减少攻击面和横向威胁移动.pdf

1、United Airlines:Digital Transformation Shift from network-based security model to cloud-based with zero trust architectureDeepak PatelHead of OT Security,Office of the CEOEugene SilasDirector of Cyber Security2ChallengesDesired Outcomes2Zscaler,Inc.All rights reserved 2022 Shift security model to cl

2、oud-based Gain the ability to inspect encrypted traffic for threats Grant employees seamless application access Minimize the attack surface Lay groundwork for IoT/OT device security in future projects Secure a fully remote workforce accelerated by the pandemic Network based security model based on l

3、egacy castle and moat architecture Secure guest access,airport operations and connected aircrafts 80,000+employees working across 350+locations worldwideUnited Airlines,an American aviation company,operates routes to 238 domestic destinations and 118 international destinations in 48 countries or reg

4、ions across five continents.It is the worlds third-largest airline by fleet size and routes.2HQ:Chicago,Illinois,USA2022 Zscaler,Inc.All rights reserved.ZSCALER CONFIDENTIAL INFORMATION 3Digital transformation requires app,network and security transformation Hub-and-Spoke NetworkCastle-and-Moat Secu

5、rityApps DCData is everywhereThis worked well when the DC was the center of the universe AWSAzure WestAWS EastGCPInternetIaaS/PaaSSaaSUsersUsersApplication TransformationDatacenter to SaaS,IaaS,PaaSNetwork TransformationHub-n-spoke to Direct ConnectivitySecurity TransformationCastle-n-moat to Zero T

6、rust ArchitectureBetter Decision Making,Improved Productivity Reduced Cyber Risk,Reduced Cost and ComplexitySecure Digital TransformationDelivers Competitive AdvantageChallenges:Architectural change(network and security).Mindset and cultural change(Inertia,sta