Protecting the Cloud with the Power of Cloud
summary
Covers DevSecOps practices for organizations at different stages of cloud adoption, from beginners to those managing hundreds of public cloud accounts, focusing on using automation and open-source tools. Describes Dow Jones Hammer, a system that detects cloud security misconfigurations in real time and automatically remediates them to create self-healing multi-cloud architectures, with emphasis on serverless, APIs and related cloud technologies.
AI-written summary · about
chapters (34)
- 0:00Intro
- 0:13What are we going to talk about...?
- 2:08Quick Flashback....
- 3:33Challenges
- 4:53Traditional Security - Old School
- 7:01Setting priorities right...
- 7:48Think about....
- 10:11Security as a Service
- 11:17DevSecOps pipeline
- 13:43RSAConference 2019
- 14:35Hammer... why?
- 17:51Consumer
- 18:39Multi-account sprawl
- 20:38Multi-account growth : Ideal State
- 21:13Hammer: What Does it Solve?
- 23:23Hammer Lifecycle
- 24:16Architecture
- 25:18Hammer - how does it work?
- 27:45Hammer-/auto-fix
- 28:58Hammer : Service Matrix
- 30:09Roadmap
- 30:49Case Study 1: Protection from bitcoin miners.....
- 32:29Case Study 1: Example
- 32:50Case Study 2: Over Exposed Instances
- 35:39Key Trends....
- 36:36Implement Cloud Security : Day 1
- 37:12Project Braavos
- 38:12DevSecOps - reference tools
- 38:27Our Solution : project bravos
- 41:10continuous_security: Jenkins Pipeline Stage View
- 41:52Dynamic Scanning in Pipeline
- 42:39Lessons Learnt
- 43:37Breaking the build : Myth?
- 44:23Thank you
related talks
45mExploring and managing risks in cloud: a practical journey to cloud security
47mCloud Computing: DevSecOps — security all the way
31mSeeing Through the Fog - Navigating the Security Landscape of a Cloud-First World
29mSurvival Guide for Java Architect in the Cloud Era
43mWalking on Broken Clouds
26mCloud Security Lessons
50mArchitecting a secure cloud framework
40mWork Smarter Not Harder: Tips to Approach Cloud Security the Easier Way