Overview
Explore Netflix's innovative approach to cloud-based security in this 28-minute conference talk from BSidesSF 2019. Discover how the company has shifted away from traditional corporate network security perimeters to embrace identity as the new security frontier. Learn about the core building blocks of this approach, including identity management, single sign-on using SAML, OIDC, and OAuth standards, multi-factor and adaptive authentication, device health checks, and authorization. Gain insights into Netflix's Location Independent Security Approach (LISA) and understand how different access patterns are addressed. Delve into the concept of a Federation Hub and its role in layered security, ultimately grasping how identity serves as the modern security perimeter in a cloud-first environment.
Syllabus
Building Identity for an Open Perimeter Tejas Dharanshi
Location Independent Security Approach (LISA) NETFLIX
Are all access patterns the same?
Federation Hub (Layered Security)
Identity as the Security Perimeter
Taught by
Security BSides San Francisco