Episode Details

Back to Episodes

Aaron Palermo on Cybersecurity and SDP

Episode 18 Published 7 years, 2 months ago
Description

Today's episode is a bit of a special one — your host, Jeffrey Palermo, interviews his own older brother, Aaron Palermo. Aaron is a DevOps engineer, solution architect, and all-around cybersecurity expert. He works for a global cybersecurity services company, is a member of the Cloud Security Alliance, and is a co-author of the up-and-coming Software Defined Perimeter Specification Version 2.

SDP is a full replacement for VPN — providing better protection to fully secure your data, devices, and accounts.

This episode is jam-packed with incredibly useful information applicable to software developers — but also anybody who has a Wi-Fi network. Stay tuned to hear about how an SDP replaces a VPN, Aaron's recommendations on how people can fully protect themselves online, which state-of-the-art multi-factor authentication people should be using, how to keep your data safe and protect from Wi-Fi vulnerabilities, and more.

Topics of Discussion:

[:52] About today's topic and guest.

[1:24] About the Palermo family and Aaron's background in the industry.

[5:23] Aaron explains what an SDP is.

[7:18] How an SDP affects a person's setup.

[13:22] Does an SDP complement a VPN or does it replace a VPN?

[13:40] Does an SDP create a network to a data center or can parts of the network exist anywhere?

[14:23] What are the products available now to use an SDP?

[16:00] Some differences between an SDP and a VPN.

[17:00] A message from The Azure DevOps Podcast's sponsor: Clear Measure.

[17:28] Aaron's thoughts on whether or not companies not using SDP would be considered malpractice in the future.

[19:26] Why SDP serves a good solution.

[21:05] Would an SDP be an absolute recommendation to people working from home when accessing anything that's not 'software as a service?'

[22:49] For smaller organizations, what are Aaron's SDP recommendations that are easy to get started with?

[24:32] What are some things that people should be doing to protect themselves and their accounts online?

[26:55] On the corporate side, Aaron gives his suggestions on what people should be doing with their 'software as a service' accounts.

[28:05] The state-of-the-art multi-factor authentication people should be using.

[29:22] Aaron gives a rundown of YubiKey and how it's used.

[31:35] The brands Aaron and his customers use (multi-factor authentication-wise.)

[32:05] Aaron speaks about general Wi-Fi vulnerabilities.

[35:08] Aaron explains the premises of his two recent presentations: "Tell My Wi-Fi Love Her," and "Wi-Fi Trolling."

[39:27] Aaron's best recommendations for keeping your data safe.

[41:26] Aaron's recommendations for backup services.

[43:00] Aaron's recommendations for backup services on the business or corporate level.

[45:52] Aaron's take on single sign-on providers and his recommendations to balance ease of development.

[50:30] Aaron and Jeffrey wrap up this week's episode.

Mentioned in this Episode:

SDP Specification v1.0

Cloud Security Alliance

Azure DevOps

Cyxtera

Zscaler

Duo Security

Clear Measure (Sponsor)

Listen Now