PCI Compliance using Cloud Foundry and BOSH Add-ons

on YouTube ↗24m

" summary

Shows a practical PCI compliance implementation using Cloud Foundry BOSH add-ons: deploys an IPSec atom that creates VM-to-VM mesh tunnels (works Linux↔Windows) to encrypt data in motion, plus ClamAV antivirus and file integrity monitoring, with Nessus and Black Duck scans and stemcell hardening. Original demo has visible downtime; a two-step deployment reduces downtime from ~20% of a rollout to single seconds. Notes measured CPU overhead from 0–37% and a lesson to limit all resources early to avoid issues like hidden disk leaks.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 3:37Background on PCI
3. 5:51What to do
4. 9:44BOSH Addons
5. 11:46Lesson Learned
6. 15:03Downtime
7. 16:41Overhead

" related talks

• 34mPCI and PoliticsNicholas Klick · ChefConf 2018
• 22mEnsuring Platform Security with Windows Bosh Add-ons - Maris, Schaefbauer, Coppock, BoeingJames Coppock, Sheryl Maris, Brad Schaefbauer · SpringOne Platform 2017
• 05mAchieving PCI Compliance On a Single FoundationTom Gillis · SpringOne Platform 2017
• 35mRunning Cloud Foundry in a Compliance and Security Focused EnvironmentDiego Lapiduz, Bret A. Mogilefsky · Cloud Foundry Summit Silicon Valley 2016
• 27mSupporting Security Sensitive Tenants in a Bare-Metal CloudMania Abdi, Trammell Hudson, Amin Mosayyebzadeh, Apoorve Mohan, Sahil Tikale, Nabil Schear, Charles Munson, Larry Rudolph, Gene Cooperman, Peter Desnoyers, Orran Krieger · USENIX ATC '19
• 36mCatch Me If You Can – Leveraging Cloud Foundry, SDN, BOSH and Predictive AnalyticsKeith Strini, Merlin Glynn, Sean Keery · Cloud Foundry Summit Europe 2016
• 32mSecure Your Cloud with the IPsec BOSH Release - Stefan Lay, SAPStefan Lay · Cloud Foundry Summit Europe 2017
• 31mPractical Guide to Frictionless Cloud Native Security for DevOpsSergey Matochkin · Cloud Foundry Summit North America 2019