Zero Trust Networks Quotes

“An agent is a combination of data known about the actors in a request. This typically consists of a user (also known as the subject), a device (an asset used by the subject to make the request), and an application (web app, mobile app, API endpoint, etc.). Traditionally, these entities have been authorized separately, but zero trust networks recognize that policy is best captured as a combination of all participants in a request. By authorizing the entire context of a request, the impact of credential theft is greatly mitigated.”
― Razi Rais, Zero Trust Networks: Building Secure Systems in Untrusted Networks

“The assumption that systems and traffic within a datacenter can be trusted is flawed.”
― Razi Rais, Zero Trust Networks: Building Secure Systems in Untrusted Networks