Ethan Heilman – BastionZero Ephemeral Security podcast

2+ y ago 1:07:02

Content provided by Steve Stonebraker. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Steve Stonebraker or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Chat with @Ethan_Heilman, CTO of @getBastionZero on how they are adding additional security when accessing remote infrastructure. BastionZero adds an additional separate Multi Factor Authentication into the authentication process and has a unique multi-root security model.

Ethan can be found at:

LinkedIn: https://www.linkedin.com/in/ethan-heilman-39896934/

Twitter: https://twitter.com/Ethan_Heilman

//Show Notes//

BastionZero's website - https://www.bastionzero.com/

Video on how multiple MFA works with Bastion Zero - https://brakertech.com/aws-systems-manager-session-manager-on-steroids/

Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio

Intro music by Margo Stonebraker

//Chapter Timestamps//

00:00:41 Meet Ethan Heilman

00:01:10 When did you first use a computer?

00:01:29 How did you get into Information Security

00:02:42 Crypto Company to Bastion Zero

00:05:08 Multiparty Computation

00:06:07 Certificate Authorities

00:08:13 AWS PrivateLink/VPC Endpoints

00:10:38 How does Bastion Zero Work?

00:14:55 Shared Responsibility

00:16:50 Dynamic Targets

00:19:46 What does the term "Zero Trust" mean to you?

00:21:01 Proxying HTTP

00:23:17 SELinux

00:23:45 Privileged Access Management

00:27:35 AWS Root Account

00:33:26 Separate Admin Accounts

00:36:12 API Keys

00:40:58 Response for product in the wild?

00:45:11 Stopping Ransomware

00:52:26 Phishing 01:01:21 Modifying Linux Pluggable Authentication Module 01:06:18 Goodbye

15 episodes