Authorization vs. Authentication: Decoding the Layers of Security with Emre Baran

The Security Repo

In this episode we dive deep into the world of authorization with Emre Baran, CEO and co-founder of Cerbos. As a seasoned entrepreneur and software expert, Emre brings over 20 years of experience to the table, discussing the subtle yet significant distinctions between authorization and authentication, and why these concepts are pivotal in today's cloud-based and development environments. In this discussion, Emre explains why many organizations still grapple with these issues in 2024, highlighting common pitfalls in security practices and offering insights into the sophisticated challenges of implementing fine-grained access control. He also shares his views on the evolving landscape of regulatory standards and introduces us to "Cerbos," his solution designed to streamline and secure authorization processes efficiently. Show Notes Learn about Corbos: https://www.cerbos.dev/ Cerbos GitHub: https://github.com/cerbos/cerbos Follow Emre Baran X / Twitter - https://twitter.com/emre Linkedin: https://www.linkedin.com/in/emrebaran/ Time Stamps Intro: 0:00 Why are we still struggling with authz: 1:12 Difference Authentication &Authorization: 6:16 What is Cerbos?: 9:35 The auth trap: 11:58 Is it scalable: 13:20: Scaling Auth Who owns auth: 16:31 Regulation and compliance: 20:32 GitGuardian: 22:12 What is ZSP (Zero standing Privileges): 23:00 Best and Worst: 28:00 Links and followup: 32:00