Cooking Up Security for the Modern macOS Fleet
summary
Nuna uses Chef to manage macOS laptops: nodes bootstrap from a hosted Chef server, check in every 15 minutes, and are removed and wiped when reclaimed. Cookbooks deploy security agents (currently evaluating Cylance), install osquery for file integrity, enforce DNS filtering and hardening settings, and provision VPN/cert two‑factor access to cloud services. A Mac hardening cookbook is published on Supermarket, testing uses Test Kitchen with a macOS 10.12 Bento box, and the approach proves audit‑friendly for HIPAA/NIST compliance.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 1:23The Enterprise Without Borders
- 3:24Evolving Security
- 6:29Employee Driven Choice
- 7:38Control is Dead
- 10:00How to be Intelligent
- 10:48Cloud Native
- 13:13Attack Surface
- 16:28Tech Stack
- 23:15Audit Friendly
- 24:34Why Chef
- 26:04Audits
- 27:14Challenges
- 28:18Cookbooks
- 29:27Security Baseline
- 30:53Loaner Laptops
- 33:45Wrap Up
- 34:13Endpoint Protection Software
- 37:55Issues with Chef
- 41:03Chef Tools
related talks
41mManaging the Unmanageable
24mSecurity as Code A SecDevOps Use Case
48mNothing but Net: Leveraging macOS's Networking Frameworks to Heuristically Detect Malware
45mUsing Linux Securely in the Cloud
11mDeveloping a Baseline Security Standard for Endpoint Devices
49mLeveraging MacOS's Networking Frameworks to Heuristically Detect Malware
41mCloud Native Security For The Rest Of Us
34mCloud Native Security 101: Building Blocks, Patterns and Best Practices