Ethan Heilman – BastionZero Ephemeral Security

Chat with @Ethan_Heilman, CTO of @getBastionZero on how they are adding additional security when accessing remote infrastructure. BastionZero adds an additional separate Multi Factor Authentication into the authentication process and has a unique multi-root security model. 



Ethan can be found at: 

LinkedIn: https://www.linkedin.com/in/ethan-heilman-39896934/

Twitter: https://twitter.com/Ethan_Heilman 



//Show Notes//

BastionZero's website - https://www.bastionzero.com/ 

Video on how multiple MFA works with Bastion Zero - https://brakertech.com/aws-systems-manager-session-manager-on-steroids/



Podcast edited and mastered by Charlie Clark, https://www.fiverr.com/chuckaudio

Intro music by Margo Stonebraker 



//Chapter Timestamps// 

00:00:41 Meet Ethan Heilman 

00:01:10 When did you first use a computer? 

00:01:29 How did you get into Information Security 

00:02:42 Crypto Company to Bastion Zero 

00:05:08 Multiparty Computation 

00:06:07 Certificate Authorities 

00:08:13 AWS PrivateLink/VPC Endpoints 

00:10:38 How does Bastion Zero Work? 

00:14:55 Shared Responsibility 

00:16:50 Dynamic Targets 

00:19:46 What does the term "Zero Trust" mean to you? 

00:21:01 Proxying HTTP 

00:23:17 SELinux 

00:23:45 Privileged Access Management 

00:27:35 AWS Root Account 

00:33:26 Separate Admin Accounts 

00:36:12 API Keys 

00:40:58 Response for product in the wild? 

00:45:11 Stopping Ransomware 

00:52:26 Phishing 01:01:21 Modifying Linux Pluggable Authentication Module 01:06:18 Goodbye