Rethinking Security with These Three New Technologies>
Forbes – Tom Gillis
Microsegmentation This is a new version of an old ideaâfirewalling. The fundamental concept behind a firewall is that not every server should be allowed to connect to every other server. Microsegmentation can be done in the OS itself, but this strategy has a weaknessâonce an attacker has penetrated the OS, they can bypass any controls. The most effective form of micro-segmentation is done at the hypervisor layerâa layer below the OS. Major hypervisor providers such as VMware and service providers such as Amazon, Google, and Microsoft all offer some form of micro-segmentation. Â Web Isolation The idea is to run web pages in a safe container and then just deliver the finished web pages to the browser. Immutability Server immutability is based on the idea that most components of a server should never change once it has loaded into memory and is running.
Link: https://www.forbes.com/sites/tomgillis/2018/04/09/rethinking-security-with-these-three-new-technologies/#70a1327368c7