MFA for your Infrastructure?!

Sean Juroviesky

Abstract:

In the world of decentralized remote work, with the ever expanding quantity of devices, SaaS tools, and services which are hosted outside of your control, how valuable is treating your network as the ultimate perimeter? Increasingly we’re seeing less exploitation of traditional stack vulnerabilities and a rapid increase in the amount of successful attacks that originated with identity security failures.

How do we continue to define perimeters and where do they originate? IAM has been forced to the forefront of our attention but what is included within IAM and how do we secure a concept rather than a physical border defined by routers, switches, and ethernet cable. SSO is a long established strategy for human identity management, but how do we identify workloads and services that actually access our infrastructure and data especially in multi cloud environments.

Several new technologies are enabling what I’d like to term SSO for machine identity, though IETF prefers to call it, Workload Identity in Multi System Environments (WIMSE).

Sean Juroviesky

Senior Security Engineer – SoundCloud

Sean Juroviesky is a dedicated security and risk management expert with extensive experience navigating complex environments. Sean excels at developing a comprehensive understanding of intricate systems and crafting strategic roadmaps to revitalize security programs. By identifying high-risk areas and optimizing the use of existing resources, Sean removes barriers between teams to enhance communication and coordination, driving effective security outcomes. Beyond their professional pursuits, Sean finds joy in backpacking through the mountains with their adventurous Australian Shepherd, partner and twins, embracing the serenity of nature and the thrill of exploration.