Zero Trust and Hybrid Cloud

Abstract

I discussed on zero trust and hybrid cloud with John Kindervag when he worked at Forrester Research around 2010. He asked why traditional security controls are not effective. He said that network segmentation I to static, and when the attacker is let inside the network segment, we are no longer tracking what resources the attacker is accessing. We need to change from “trust and verify” to “verify and then trust”. In this chapter, we will discuss that another security aspect is zero-knowledge proof, which means you actually are in possession of knowledge without sharing the secret. Zero trust and zero knowledge and how they are different. So, you can convince someone that you have a secret without disclosing the secret.