Platform and Security Engineering
summary
Companies face 25,000 reported vulnerabilities a year and attackers automate exploits so fast that 14% appear before patches and many issues are exploited within about 30 days, while real-world rollouts average 246 days. The talk shows concrete fixes: open source tooling (inspec, CN Query, CN Spec) that queries Terraform/HCL and cloud resources via a GraphQL-like MQL, enforces one policy set across build and runtime, automates checks in CI/CD, and reduces mean time to remediate by preventing misconfigurations before deploy.
AI-written summary · about
chapters (5)
- 0:00Start
- 5:09Vulnerability Discovery
- 9:45Software delivery
- 21:30What are successful security engineers using
- 26:09Use Security as Code to define requirements
related talks
40mEmbracing Security - A Changing DevOps Landscape
27mHow to implement Security as Code?
22mSecurity vs Dev Experience Threat … or Opportunity
46mRugged Software Engineering
50mAvoiding cloud security anti-patterns the right way
23mTurbocharge your development with agile security
20mEvolving from patch management to risk mitigation
46mThe Supply Chain Conundrum: Why Traditional Application Security Is...