Securing the Cloud and Training Your Dragons
Talkat Open Source Leadership Summit 2019 · on Tuesday, 2019-03-12· at 12:10· The Ritz-Carlton Ballroom·
summary
Comcast adopts the NIST framework and a six‑pronged program: inventory, reference architecture, SIEM, SOAR, CI/CD embedding and workforce uplift. Event sources include GuardDuty, CloudTrail, CloudWatch and Netflix Security Monkey; events feed a SIEM, a homegrown SOAR and an integrated Mesto capability for faster, semi‑automated response. Multi‑cloud (AWS, Azure, OpenStack, Cloud Foundry, Kubernetes, VMware) deployments run security scans in build pipelines; partial implementation shows reduced manual steps and promising faster detection, while full automated remediation remains under debate.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:39Cloud Challenges
- 6:05Cloud Security Current state
- 6:51Cloud Security Future State
- 8:33Detection and Response Architecture
related talks
29mSecuring the Cloud: Multi-Layered Protection for Enterprises
50mArchitecting a secure cloud framework
17mArchitecting a security data lake at enterprise scale
01h 02mSecuring data and democratizing the alert landscape
43mWalking on Broken Clouds
31mA Comprehensive Approach to Cloud Security Posture Management
18mCloud security is a shared responsibility: What does that really mean?
47m3 steps to help mitigate cloud risks