Latest / CYBR.Signal / Securing Digital Transformation: An Old Problem with Modern Concerns

Transcript

Securing Digital Transformation: An Old Problem with Modern Concerns · CYBR.Signal

• 0:00
  SPEAKER_00: Hey everybody, Michael Farnum here.
• 0:02
  SPEAKER_00: Happy Cyber Sunday.
• 0:03
  SPEAKER_00: Hope you're doing well.
• 0:04
  SPEAKER_00: Want to talk about a couple of words that are rolling around in my head, and they're really synonyms for the most part, depending on how you define them, which is uh either ubiquitous or prolific.
• 0:15
  SPEAKER_00: Um, the reason I'm thinking about those two words, kind of that whole nature of something that's everywhere, you see it wherever you go, type of thing, is um so I'm gonna be speaking at the machine identity summit that Vinify is putting on the beginning of October.
• 0:30
  SPEAKER_00: Thank you to them for uh inviting me to speak on this panel.
• 0:34
  SPEAKER_00: And a little bit of a spoiler alert, but it's I don't think it's that big of a deal, is uh talking about how machine identities are everywhere and how you control them compared to controlling human identities.
• 0:45
  SPEAKER_00: So we're gonna be talking about that subject, but what it it kind of got me rolling around my head are those two terms because if you're if you're gonna be doing any kind of digital transformation, you've got to have machine identities, you've got to have machines talking to machines, um, and that causes a lot of you know a lot of angst and getting those secure compared to human identities.
• 1:06
  SPEAKER_00: But what's interesting about that whole concept is that like digital transformation actually, when you think about it, started happening a long time ago.
• 1:18
  SPEAKER_00: It was just happening more in like data centers versus the cloud.
• 1:21
  SPEAKER_00: The cloud really didn't exist.
• 1:23
  SPEAKER_00: So you've got data centers that were housing all the servers and applications and that kind of stuff.
• 1:27
  SPEAKER_00: You had to control access to those.
• 1:29
  SPEAKER_00: You had machine identities then as well.
• 1:31
  SPEAKER_00: Uh, APIs have been around a long time.
• 1:34
  SPEAKER_00: Uh, you had things like service accounts that were in your uh in your environment.
• 1:39
  SPEAKER_00: Maybe those things weren't as uh standardized as they are today, but it's nothing that didn't exist.
• 1:45
  SPEAKER_00: So, and then it got me thinking about well, the prolific nature that we talk about today of applications.
• 1:53
  SPEAKER_00: Um back when I was managing a data center and doing security for a data center, that kind of thing.
• 2:01
  SPEAKER_00: When when we got to um a place where we could do virtualized servers using VMware, those kind of things, we saw I saw specifically, and I had to control it, server sprawl everywhere.
• 2:15
  SPEAKER_00: So servers started becoming very prolific in our environment because it was so easy to spin them up, you didn't have to go get hardware and get all those things done.
• 2:23
  SPEAKER_00: So, all of that, the servers, the machine identities, those type of things have existed a while.
• 2:30
  SPEAKER_00: Uh same thing with like internet of things.
• 2:33
  SPEAKER_00: I had a debate with somebody one time and he hated the term internet of things, and it was because the internet's always had things connected to it.
• 2:40
  SPEAKER_00: Well, it's like, yeah, but the nature of Internet of Things is that the Internet of Things have become prolific, whereas prior to that there there weren't as many, it wasn't easy to make a connection, so you didn't have to worry about a security as much.
• 2:55
  SPEAKER_00: So, but once they started becoming prolific or ubiquitous, however you want to say it, then that became a problem, and that's where kind of the terms started becoming Internet of Things.
• 3:05
  SPEAKER_00: This this is becoming an issue we need to look at.
• 3:07
  SPEAKER_00: Speaking of which, Internet of Things, they usually communicate via machine identity, so you've got even more of a proliferation of machine identities because of Internet of Things.
• 3:19
  SPEAKER_00: So, really, I guess what I'm trying to break this down to is that these things have always been something of a problem.
• 3:27
  SPEAKER_00: Machine identities have been there, APIs have been there, things on the internet, internet of things have always been there, at least you know, since the internet existed.
• 3:39
  SPEAKER_00: All of those things were issues that we had to take care of.
• 3:43
  SPEAKER_00: Digital transformation was a thing, it just didn't have the power of the cloud, and all these things didn't have the power of the cloud behind them.
• 3:53
  SPEAKER_00: That has really been kind of that key junction point or juncture of where these things are becoming the proliferation and ubiquitous nature of these things has become an issue because of the cloud and the speed at which it enables us to do business and grow these things.
• 4:11
  SPEAKER_00: So, again, these are all things that have been a problem before, but they just weren't near as big of a problem because we didn't have the speed to be able to put these things out there and get them spun up, and whoever wanted to get them spun up could get them spun up.
• 4:27
  SPEAKER_00: You put that power in the hands of um people who just want to get business done, which is a good thing.
• 4:33
  SPEAKER_00: Don't take me, don't take me wrongly there.
• 4:35
  SPEAKER_00: I I believe that we need to get business done.
• 4:39
  SPEAKER_00: It's just putting a much bigger burden on security people to get the stuff secure and IT people to keep it available, everything else.
• 4:46
  SPEAKER_00: So again, I guess basically my point is that all of the things that we talk about that are ubiquitous these days, and IT and security that have proliferated and just everywhere we see them, those things were already in existence.
• 5:01
  SPEAKER_00: Things like IoT, things like APIs, things like machine identities, those things were already there.
• 5:08
  SPEAKER_00: They just weren't able to blow up like they've been able to blow up in the last 10 years or so.
• 5:14
  SPEAKER_00: Um, so just a thought rolling around my head.
• 5:17
  SPEAKER_00: Let me know what you think about that.
• 5:19
  SPEAKER_00: Talk to you next time.