Google 在推的 BeyondCorp 發了一篇介紹出來:「How to use BeyondCorp to ditch your VPN, improve security and go to the cloud」。
裡面有提到幾篇研究:
- BeyondCorp: A New Approach to Enterprise Security
- BeyondCorp: Design to Deployment at Google
- Beyond Corp: The Access Proxy
在文章開頭處有提到 BeyondCorp 的想法是「zero-trust network security model」,這樣就比較能理解他的設計了:
We moved away from our corporate VPN, and introduced BeyondCorp, a zero-trust network security model.
當掃地的阿桑可以碰到企業內的實體網路時,要怎麼設計防禦機制...
2 thoughts on “Google 推的 BeyondCorp”