Latest / Security Weekly Podcast Network (Audio)
What is old is new again: default deny on the endpoint - Colby DeRodeff, Danny Jenkins - ESW #402
Default deny is an old, and very recognizable term in security. Most folks that have been in the industry for a long time will associate the concept with firewall rules. The old network firewalls, positioned between the public Internet and private data centers, however, were relatively uncomplicated and static. Most businesses had a few hundred firewall rules at most.
The idea of implementing default deny principles elsewhere were attempted, but without much success. Internal networks (NAC), and endpoints (application control 1.0) were too dynamic for the default deny approach to be feasible…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.