Enterprise Architecture Beyond the Perimeter
summary
Google re-architects corporate access with Beyond Corp and the Overcast blueprint, replacing IP-based trust with device certificate authentication plus user SSO, a meta-inventory that correlates management and asset records, and a reverse proxy front end that queries an ACL engine for inventory-aware authorization. Implementation at Google exposes problems: roughly 25% of devices lack correct inventory records, TPM-based key storage is unreliable, and legacy apps force limited VPN islands. Parts of the tooling (including Simon) are being open sourced.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:48Agenda
- 1:37Classic Parameter Model
- 4:32Beyond Corp
- 5:20Authentication
- 6:29User Experience
- 7:59Architecture Blueprint
- 17:45Bootstrapping
- 20:42Workflow Challenges
- 23:00How to Bootstrap
- 25:38Comparison
- 29:48Questions
- 34:15Open Source
- 39:09Client Management
related talks
40mBuilding Secure and Reliable Systems at Scale
43mSecuring Apps in the Open-By-Default Cloud
40mSecurity, an Enterprise perspective
40mLessons From Our Zero Trust Journey: Successes, Failures & Dodging Pitfalls
28mBuilding Identity for an Open Perimeter
40mHow Google Built a Consistent, Global Authorization System with Zanzibar
41mHow a Secure Enterprise Starts with the Web
20mTrust by verify - how to provide secure access to your team