
Identity as the primary attack surface: What modern breaches are really exploiting
The “retro” way
“The thing about the old days is… they are the old days” – Slim Charles, The Wire
Protecting a specified network perimeter was the main focus of enterprise security strategy for several decades. Businesses made significant investments in firewalls, intrusion detection systems, endpoint security and segmentation controls, all of which were built on the premise that an organization would stay safe if attackers were prevented from accessing the network.
In a time when users, infrastructure and applications were mostly confined within well-defined borders, that assumption made sense but in today’s world, that environment no longer exists.
The proliferation of cloud computing, Saa...