Helping security and developers to understand one another
summary
Cloud security teams and developers reconcile by mapping vulnerabilities to applications rather than resource lists and sharing runtime and dev signals as bidirectional feedback. A cloud-native application protection platform plus tools like CSPM and IaC scanner catch an open S3 misconfiguration earlier, an IPS rule mitigates a disclosed CDE when a patch breaks staging, and correlating alerts shows malware in Lambda coming from a shared library that affects hundreds of functions, letting teams prioritize and remediate effectively.
AI-written summary · about
chapters (8)
- 0:00Introduction and context
- 0:47Cloud evolution challenges
- 3:24Bridging with CNAPP
- 4:31Root causes of misalignment
- 5:59The visibility gap
- 8:38The role of feedback
- 10:26Practical implementation
- 13:27Takeaways and conclusion
related talks
34mDevelopers do care about security: Building a more collaborative path
58mCloud Attack Surface Management
56mNavigating the Cloud Native Security Landscape
43mWalking on Broken Clouds
15mWhat’s next for security, development, and CloudSec teams? (PRT063-R)
40mCloud Security Novice to Native in 10 Steps: A CNAPP Approach
47m3 steps to help mitigate cloud risks
10mKeynote: CloudNativeDevSecOps