Developing a Baseline Security Standard for Endpoint Devices
summary
Project builds a measurable endpoint baseline for laptops and workstations and maps OS controls to a Boolean compliance score across Windows 10, macOS, and Ubuntu 18. Initial methods used command‑line scripts and heterogeneous MDMs (BigFix, Jamf, Puppet) but settled on the enterprise detection-and-response platform to run scheduled queries, normalize outputs, and feed an API. Phase 1 runs in dev; phase 2 will check host certificate and compliance at authentication after 2FA, then either auto‑enforce settings or offer user self‑remediation.
AI-written summary · about
chapters (13)
- 0:00Introduction to talk
- 0:22Purpose of zero trust model
- 1:04Project background and scope
- 2:06Defining baseline security configurations
- 3:10Baseline modeled after CIA triad
- 4:13Normalizing configuration outputs
- 5:40Tooling evaluation and selection
- 6:23Automation in phase one
- 7:04Phase two compliance workflow
- 8:12User rights and configuration risks
- 9:00MDM tools limitations
- 9:27Implementation and SLA enforcement
- 10:16Network access and certificate handling
related talks
23mBuilding an Endpoint Security program from scratch
12mMicrosoft Baseline Security Mode
01h 11m2024 Security BSides // Adam Pennington
49mEstablishing and Maintaining Device Trust: A Case Study
32mImplementing and Validating Linux Cyber Security Requirements: SEAPATH, a Case Study
29mWe're All Consumers (And That's Dandy)
25mOSPS Baseline: Improving Your Project Security the Easy Way
29mGet the Freaking Basics Right!