The future of developer-oriented security: Teleport weighs in

VPNs, privileged entry and shared credentials don’t work properly and should be eradicated within the developer setting. That’s so as to cut back assault surfaces, explains the primary identity-native infrastructure firm, in keeping with Drew Nielsen (pictured), vice chairman of product advertising at Teleport (Gravitational Inc.).

The corporate thinks cryptographic validation of id, in a frictionless kind, is the best way ahead for engineers who’re hopping shortly between environments, cloud and different disparate infrastructure.

“Engineers are going from system to system to machine to database to utility; safety options fail,” Nielsen acknowledged.

Nielsen spoke with theCUBE business analysts John Furrier and Savannah Peterson on the KubeCon + CloudNativeCon NA 2022 event, throughout an unique broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They mentioned what identity-less means for improvement safety. (* Disclosure beneath.)

Identification vs. attributes

“They’re too disruptive; they’re not clear, and engineers will work their approach round them. They’ll write it down, they’ll do a workaround, they’ll backdoor it,” Nielsen mentioned of present password-oriented safety.

Teleport works to take away the number-one supply of breach, together with taking passwords, secrets and techniques and keys off the board. Scaling can also be addressed by means of what is actually a single supply of fact, pushed by an entire-infrastructure, authorization engine — scaling causes extra safety points ordinarily as extra passwords and secrets and techniques get generated, in keeping with Nielsen.

Philosophically, the agency’s perception is that credentials used as id isn’t actually id. It’s merely an attribute.

“Everybody’s like: ‘I log into my laptop, that’s my id.’ But it surely’s not,” Nielsen acknowledged. “These are attributes. They’re one thing that’s secret for a time frame, till you write it down.”

Curiously, Teleport is pitching itself at DevOps people, not IT departments.

“In the event you actually take a look at who’s coping with infrastructure on a day-to-day foundation, these are DevOps people,” Nielsen mentioned. “That’s who’s our major buyer. We deliver machines, engineers, databases, functions, Kubernetes, Linux, Home windows, we don’t care,” he mentioned of the environments that might be included.

Right here’s the entire video interview, a part of SiliconANGLE’s and theCUBE’s protection of the KubeCon + CloudNativeCon NA 2022 event:

(* Disclosure: Teleport (Gravitational Inc.) sponsored this section of theCUBE. Neither Teleport nor different sponsors have editorial management over content material on theCUBE or SiliconANGLE.)

Photograph: SiliconANGLE