Uncomfortable Networking: Simplifying Network Architecture for Security
Charles Rumford challenges overly complex network security designs, showing how simplifying routing and segmentation enhances defensive posture.
Summary
The Overhead of Overly Complex Network Security
Decades of layering firewall rules, complex VLANs, and middleboxes often create brittle network architectures that hinder operations without measurably increasing security.
Deconstructing 'Uncomfortable Networking'
Charles Rumford advocates for simplifying network topology and management overhead while reinforcing foundational access controls.
Pragmatic Micro-Segmentation and Identity-Based Access
Rumford explains how shifting from static IP/VLAN segmentation to identity-aware transport proxies simplifies network administration and eliminates firewall bloat.
A Blueprint for Maintainable Network Defense
The author provides network engineers with practical strategies to audit legacy rulebases, remove architectural technical debt, and build resilient network perimeters.
Related talks
Blue Team Village·24 min
Drimacus
Drimacus presents research on operating passive Next-Generation Firewalls (NGFWs) alongside existing detection stacks to enhance network threat hunting and visibility.
Community Stage·38 min
Andrew Cockburn
Explores the future of Distributed Denial of Service (DDoS) attack vectors, dynamic amplification techniques, and emerging mitigation architectures.
Cloud Village·1 hr 39 min
Wes Lambert
Security Onion lead Wes Lambert demonstrates deploying distributed network security monitoring (NSM) and threat hunting sensors in AWS and Azure.