pomerium / awesome-zero-trust Goto Github PK

• https://zerotier.com
• https://zero.pritunl.com/
• https://github.com/pomerium/pomerium (:D)
• https://github.com/cogolabs/transcend
• more?

wasn't able to push to a branch, so here's new URL https://doi.org/10.6028/NIST.SP.800-207

If you prefer a pr for this let me know.
The nist 207 url in the readme is now out of date, please refer to this one.

• old url now withdrawn
• to be replaced by https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207-draft2.pdf

thanks for this repo.

Stephen Paul Marsh created Zero trust in 1994.
https://www.stackscale.com/blog/zero-trust-security/
https://en.wikipedia.org/wiki/Zero_trust_security_model

And his original thesis from 1994 https://www.cs.stir.ac.uk/~kjt/techreps/pdf/TR133.pdf
Credit should go where credit is due. It should be telling that someone claims to have invented something
when its a farce.

why was it removed? not awesome

wasn't able to push to a branch, so here's new URL https://doi.org/10.6028/NIST.SP.800-207

The OSSTMM addresses trust, and called trust a vulnerability years before zero trust. I really recommend checking out the OSSTMM and chapter 5 covers trust

For what its worth, the OSSTMM talks in depth about Trust, and that Trust is a Vulnerability (well before 2010).
Using the OSSTMM to test/measure security can give you an accurate view of your security landscape and where controls are needed or where some are over used (and you can save money by not having redundant controls)