Continuous Cloud Security Automation
summary
Claims a client‑server security automation framework that exposes a REST API controller and lets teams add any CLI scanner with a 15 lines of JavaScript driver, deployable as AMIs on Amazon AWS. Demo actually runs nmap and SQLMap plus a Heartbleed check on separate clients, aggregates varied outputs into JSON, schedules quarterly PCI scans across a dozen external IPs, and successfully auto‑distributes drivers to new agents so scans run in parallel and reports are normalized.
AI-written summary · about
chapters (18)
- 0:00Start
- 0:50Agenda
- 1:47Development @Scale, Security engineers?
- 2:56CI-CD pipeline, where is Security?
- 4:200-day attacks
- 5:17Compliance
- 6:22Security automation framework
- 9:56Targeted audience
- 14:47Components
- 15:39Integrating new tool(CLI based)
- 17:55Driver file
- 18:42Demo time
- 29:52Tools so far
- 30:15Other functionalities
- 31:07What it is not
- 31:50Future enhancements
- 32:27Try it out!
- 32:44Thank you
related talks
38mDesign Approaches for Security Automation
15mDevopsec: Rapid Security in the Cloud with AWS and CIS
50mAutomated Serverless Security Testing: Delivering secure apps continuously
50mScaling Security Assessment at the Speed of DevOps
09mAutomated Application Security Testing
41mCloud Compliance with InSpec and Automate
33mPractical Dynamic Application Security Testing within an Enterprise
46mSecurity DevOps - Staying Secure In Agile Projects