Serverless Security Workflows - cyber talks - 19th nov 2019
•
3 j'aime•766 vues
As presented at https://www.eventbrite.co.uk/e/cybertalks-learn-from-the-experts-tickets-75894160477
Recommandé
Recommandé
Contenu connexe
Tendances
Tendances (20)
Similaire à Serverless Security Workflows - cyber talks - 19th nov 2019
Similaire à Serverless Security Workflows - cyber talks - 19th nov 2019 (20)
Plus de Dinis Cruz
Plus de Dinis Cruz (20)
Dernier
Dernier (20)
Serverless Security Workflows - cyber talks - 19th nov 2019
- 1. @DinisCruz Serverless Security Workflows Dinis Cruz GlassWall VP Engineering and CISO Nov 2019
- 2. @DinisCruz Serverless is a major paradigm shift
- 3. @DinisCruz Serverless allow Security activities to scale
- 4. @DinisCruz Serverless allow Security activities to have ‘enterprise scalability’
- 5. @DinisCruz Key Concept: Security as center of Excellence and Innovation
- 6. @DinisCruz Security teams don’t run code in Production
- 7. @DinisCruz Which means that Security ‘Should’ not have ‘Legacy’
- 8. @DinisCruz Security ‘internally’ needs to be an Leader of Innovation
- 9. @DinisCruz It is your responsibility To lead the automation of Security
- 10. @DinisCruz If you are running on Spreadsheets …. You are Legacy
- 11. @DinisCruz Everybody in Security needs to ‘Code’ and ‘Automate their workflows’
- 13. @DinisCruz Serverless = reduced stack https://www.slideshare.net/estelleinomniaparatus/icc-paas-vs-faas-v41
- 15. @DinisCruz When you do it right, not that much Serverless environments enable event-driven workflows that dramatically change the scalability and cost of Security Operations
- 16. @DinisCruz When you get it wrong you will not save much
- 20. @DinisCruz In GCP (Google Cloud Platform)
- 22. @DinisCruz In Serverless The Key benefits are the side-effects
- 23. @DinisCruz Using Wardley Maps to understand Serverless
- 24. @DinisCruz
- 25. @DinisCruz
- 26. @DinisCruz
- 27. @DinisCruz
- 28. @DinisCruz
- 29. @DinisCruz
- 30. @DinisCruz
- 31. @DinisCruz
- 32. @DinisCruz
- 33. @DinisCruz Amazon Strategy (in Maps)
- 34. @DinisCruz Commodities creates new opportunities
- 35. @DinisCruz Key Pattern (for your team and business) 1. Create Platform 2. View what users are doing in your Platform a. What they are moving from Genesis to Custom Build 3. Productize and Commoditize that 4. Rise and Repeat ● For example: ○ EC2 -> Lambda ○ EC2 -> Lambda -> API Gateway automations ○ EC2 -> MySQL as a Service -> Serverless MySQL ○ EC2 -> Elastic Container Service (ECS) -> Fargate ○ EC2 -> LightSail
- 36. @DinisCruz Scaling Incident event operations Based on Serverless workflow
- 37. @DinisCruz Workflow Person Credentials Application uses to access conditions generate Alert acknowledged in Slack by entered in action updates status of alert in
- 38. @DinisCruz Jira as (graph) database
- 39. @DinisCruz Slack as UI , Jira as Database
- 42. @DinisCruz Jira and Jupyter Notebooks
- 43. @DinisCruz Using Jira to capture data
- 45. @DinisCruz First let’s talk about ‘Serverless’ Security Workflows
- 46. @DinisCruz I.e. the use of Serverless technology to scale Security Workflows
- 47. @DinisCruz https://www.plugandplaytechcenter.com/resources/serverless-security-everything-you-need-know-about-it/ We need to scale security actions
- 48. @DinisCruz Enterprise Services all the way
- 52. @DinisCruz Using Jira has a Graph Database
- 53. @DinisCruz TechStack (with serverless workflow)
- 54. @DinisCruz CLI (Command Line Interface) to your data
- 55. @DinisCruz REPL (Read Evaluate Print Loop)
- 57. @DinisCruz Graph project’s to outcomes and threats
- 58. @DinisCruz Threat Models (in a scalable way)
- 59. @DinisCruz Creating PDFs from Jira data
- 61. @DinisCruz Creating Global Dashboards (risks linked to vulns)
- 64. @DinisCruz It is your fault when it goes wrong
- 65. @DinisCruz Next evolution of Serverless
- 66. @DinisCruz Managing state is one of the next major changes
- 67. @DinisCruz Final Thought: Security has an Center of Excellence