Zero Trust Security: An Enterprise Guide

© Jason Garbis and Jerry W. Chapman 2021

J. Garbis, J. W. ChapmanZero Trust Securityhttps://doi.org/10.1007/978-1-4842-6702-8_1

1. Introduction

Jason Garbis¹   and Jerry W. Chapman²

(1)

Boston, MA, USA

(2)

Atlanta, GA, USA

 

Enterprise security is hard. This is due to the complexity of IT and application infrastructures, the breadth and velocity of user access, and of course the inherently adversarial nature of information security. It’s also due to the far-too-open nature of most enterprise networks—by not enforcing the principle of least privilege at both the network and application levels, organizations are leaving themselves incredibly vulnerable to attacks. This is true both for internal networks and for public Internet-facing remote access services ...