{"id":3032,"date":"2019-09-06T00:16:26","date_gmt":"2019-09-05T21:16:26","guid":{"rendered":"http:\/\/gcp.ideus.com.tr\/index.php\/the-zero-trust-approach-for-the-cloud\/"},"modified":"2019-09-06T00:16:26","modified_gmt":"2019-09-05T21:16:26","slug":"the-zero-trust-approach-for-the-cloud","status":"publish","type":"post","link":"https:\/\/www.ideus.com.tr\/index.php\/the-zero-trust-approach-for-the-cloud\/","title":{"rendered":"The Zero Trust Approach for the Cloud"},"content":{"rendered":"
\n

By\u00a0Evin Safdia, Technical Marketing Manager, Prisma<\/span><\/p>\n

\u00a0<\/p>\n

The term \u201cZero Trust\u201d has been around for almost 10 years, but it has recently picked up momentum as businesses look to proactively protect their data and infrastructure. With the shift to the cloud, Zero Trust is now a philosophy of choice for CIOs and CISOs, who are tasked with protecting their systems from outside attacks as well as from within the organization.<\/span><\/p>\n

What Is Zero Trust?<\/b><\/p>\n

Traditionally, network admins only needed to worry about protecting their organizations from outside threats. But the threat landscape has evolved. From zero-day malware to insider threats, network admins must now proactively protect networks and data to avoid breaches. With this evolution, the Zero Trust philosophy was born.<\/span><\/p>\n

Zero Trust<\/span><\/a> is based on the belief that trust should not be given to anyone or anything, no matter if they are within the network or outside. This \u201cnever trust, always verify\u201d approach enforces least-privileged access in which, once users are authenticated and identified, continuous inspection is implemented on the traffic while the user is connected to the network. Simply assuming that a user connecting to the network and passing authentication requirements is in fact the user and not an attacker is not wise with the recent increase in the number and sophistication of breaches. In fact, a significant portion of hacking-related breaches still involve compromised and weak credentials \u2013 29% according to the <\/span>2019 Verizon Data Breach Investigations Report<\/span><\/a>.\u00a0<\/span><\/p>\n

To fully implement a Zero Trust approach, the following must be considered:<\/span><\/p>\n