BEYOND DevSecOps – Future Journey of Security Controls
summary
Gartner names CNAP in Gartner Aug 2021 as the way to get a single application risk view by consolidating existing tools rather than replacing them. It ingests CSPM, CWPP, SCA, SAST, DAST, XDR and registry/image scans, runs attack path analysis to correlate vulnerabilities with cloud misconfigurations, and produces per-application risk scores. It requires API integrations into CI/CD pipelines, automated ingestion and correlation, and is explicitly not just a dashboard.
AI-written summary · about
chapters (10)
- 0:00Introduction and speaker background
- 1:12Trend Micro overview and evolution
- 2:33Cloud native applications explained
- 4:17Security challenges in DevSecOps
- 6:27Holistic application risk assessment
- 9:57What is CNPP and its purpose
- 11:41CNPP components and capabilities
- 14:10Integrating security tools in CNPP
- 15:58Automation and team collaboration
- 17:01Solving the cloud security puzzle
related talks
40mCloud Security Novice to Native in 10 Steps: A CNAPP Approach
14mFrom security theater to DevSecOps: Why security must be ingrained
47mFuture-proofing cloud security: A new operating model
56mNavigating the Cloud Native Security Landscape
49mContext is everything: CNAPP revolution to secure deployments (PRT254)
16mLevel Up Your Cloud-native Security
40mCreating Cloud Native Security
05mMulti-cloud security made easy for DevOps