Leveraging Cloud SDNs to Solve OWASP Top Ten
summary
Practical recipe for injecting virtual security appliances into cloud networks using layer 2 service chaining so applications keep their IPs: builds golden VM images running Snort, mod_security, pfSense and nginx, groups them into port‑pair groups (examples: 2 DDoS VMs, 4 WAF VMs, 3 IDS VMs) and wires flows via OpenStack Neutron APIs. Includes Terraform/CICD scripts and a GitHub workshop; automation turns WAF/IDS on when a VM exposes 80/443. Lab proves it works and avoids readdressing or routing changes.
AI-written summary · about
chapters (11)
- 0:00Intro
- 2:12Based upon a True Story... Managed Service Security Operation Center
- 8:41Typical Layer 3 Cloud Security
- 13:31Securing Virtualized Workloads Defined security configurations
- 15:24Security VM Catalog
- 16:39Securing Virtualized Workloads CI/CD Integration
- 24:10Load Balanced Service Chains
- 27:26Service Chain Creation
- 30:16Forwarding versus In-Line NFV
- 32:32Lab Overview - Virtualized Functions
- 36:06Take Aways...
related talks
22mAttacking SDN Infrastructure: Are We Ready for the Next-Gen Networking?
36mCatch Me If You Can – Leveraging Cloud Foundry, SDN, BOSH and Predictive Analytics
40mCloud Security Novice to Native in 10 Steps: A CNAPP Approach
07mMulti Cloud Native Networking and Network Security
45mUsing Linux Securely in the Cloud
48mAbusing Software Defined Networks
40mSecuring Connections: Defending Telco Workloads in the Cloud Era
46mShielding the Clouds: Advanced Cyber Defense in Hybrid Environments