From Moats to Slopes
summary
Argues that coarse-grain RBAC fails for modern risks (about 60% of attacks involve identity compromise) and replaces it with just-in-time access management built as a real-time graph ingested from sources of truth (Azure AD, Okta, ServiceNow, Salesforce). Claims practical wins: dynamic, ephemeral, time-aware policies derived from log analysis, targeted MFA rollouts for high-risk cohorts, fast graph traversals for fine-grained decisions, and immediate audit trails — a working architecture that enforces and audits access in real time.
AI-written summary · about
chapters (15)
- 0:00Introduction and welcome
- 0:49About Signal and speaker
- 1:10Authentication challenges overview
- 2:54Global Armada model explained
- 5:03Blast radius and compromise defense
- 6:06Limitations of coarse grain authorization
- 7:31Real-world authorization policy needs
- 8:14New authorization paradigm explained
- 10:02Just-in-time access management
- 13:56Implementing in enterprise systems
- 16:47Fine-grained decisions and remediation
- 17:30Real-time auditing benefits
- 18:13Graph organization details
- 20:43Integration with existing ID stacks
- 21:06Q&A session
related talks
37mPaved Roads To Express RBAC In Threat Models
40mWhat’s Old is New: Hybrid Security for Microsoft Azure and On-Premises Tech
25mSecurity, Identity - Back to the Drawing Board?
55mAzure Attacks Unpacked: Real-World Threats & Lessons
32mFine-Grained Policies RBAC with NGAC
27mI Can RBAC, and So Can You!
14mThe Problem Isn’t Access, It’s Actions
37mSecure Remote Access With Boundary and Azure AD