Zero Trust Networks (2nd Edition): Building Secure Systems in Untrusted Networks

by Razi Rais

Perimeter defenses guarding your network aren't as secure as you might think. Hosts behind the firewall have no defenses of their own, so when a host in the "trusted" zone is breached, access to your data center is not far behind. This practical book introduces you to the zero trust model, a method that treats all hosts as if they're internet-facing, and considers the entire network to be compromised and hostile.

In this updated edition, the authors show you how zero trust lets you focus on building strong authentication, authorization, and encryption throughout, while providing compartmentalized access and better operational agility. You'll learn the architecture of a zero trust network, including how to build one using currently available technology.

You'll also explore fundamental concepts of a zero trust network, including trust engine, policy engine, and context aware agents; discover how this model embeds security within the system's operation, rather than layering it on top; use existing technology to establish trust among the actors in a network; migrate from a perimeter-based network to a zero trust network in production; examine case studies that provide insights into various organizations' zero trust journeys; and learn about the various zero trust architectures, standards, and frameworks.

PLEASE When you purchase this title, the accompanying PDF will be available in your Audible Library along with the audio.

Audible Audio

Published June 4, 2024

Reviews

[Groucho42 · Rating 5 out of 5]

Saw this at the library when I was in need of a read. I've been in tech for a long time and even dealt with zero trust networks a bit a decade ago, so I was curious. It's an excellent book for the technically adjacent reader.

There's almost no code, and that's simple. What the book has is detailed descriptions of risks, the designs needed to address the risks, and excellent case studies in each chapters to show real world points about the subject

Simply put, the edge of your business network, usually firewalls, is not sufficient to provide true security in the modern age. You need to take actions to protect communications and data throughout the organization. If you're an IT management, product manager, or in a related position, this is a great starting point.

[Marcin · Rating 4 out of 5]

This book offers an excellent and comprehensive overview of the Zero Trust security model.

However, one notable drawback for me was the lack of concrete examples or tools that could help translate the theory into practice. While the theoretical foundation is strong, the book would have greatly benefited from references to specific software, platforms, or configurations that could serve as a starting point for building a Zero Trust network.

[Adam · Rating 3 out of 5]

A lot of words but don't feel like it taught me much. :/

[Aubrey · Rating 3 out of 5]

Percipio listen

A little repetitive, but given how I was listening to it, that’s wasn’t necessarily a bad thing.