Episode 12: Diving Into Authorization And Policy Bases Access Controls

Episode 12 December 10, 2019 00:35:29
Episode 12: Diving Into Authorization And Policy Bases Access Controls
SilverLining IL
Episode 12: Diving Into Authorization And Policy Bases Access Controls

Dec 10 2019 | 00:35:29

/

Hosted By

Moshe Ferber Ariel Munafo

Show Notes

Attendees

Guest: Tsachi Lutaty

Guest title: R&D manager

Company: PlainID

Abstract

In the past years we have reached important progress in authentication. Multi factor authentication and Identity  Federation solved many of the identity authentication challenges. So it is now time to focus on the second aspect of Identity & Access Management - the aspect of Identity Authorization.  In this podcast we are talking with Tsachi Lutaty, R&D manager for PlainID, about the move from Role based access controls to Policy based access controls and how organizations can better engineer their authorization scheme and policies.

Timing:

0:41 introducing our guest

1:25 Introducing PlainID 

2:45 Authorization challenges - what are modern authorization challenges

8:00 Role based access control vs. Attribute / Policy  based access control 

15:30 Existing authorization standards  

18:58 How can we better engineer authorization system - The technology angle

26:15 How can we better engineer authorization system - The process angle

29:30 How can we better engineer authorization system - The people angle

32:50 Summary and final words

Other Episodes

Episode 50

May 11, 2022 00:24:30
Episode Cover

SilverLining Episode 50: Building security workflow at scale

Guest: Ravid Circus Guest title: Co-Founder, Seemplicity Language: English   Abstract As organizations develop more software, and in faster cycles, greater responsibility is laid on...

Listen

Episode 30

December 08, 2020 00:29:55
Episode Cover

Episode 30:  The challenges of CISO in a security company

Attendees Guest: Eitan Satmary Guest Title: CISO  Company: Tufin Abstract Being a CISO is challenging, being a CISO at a security vendor is even...

Listen

Episode 24

August 19, 2020 00:37:14
Episode Cover

Episode 24: Putting The Sec Into DevOps

Attendees Guest: Dima Revelis Guest title: Senior Devops engineer Company: MoonActive Abstract DevsecOps is accelerating fast as the new buzzword for modern information security...

Listen