Security Automation for DevOps
summary
An automation system called the Assimilation project inventories IPs and MACs, tracks RPMs pips rubygems and npm packages, and computes checksums of network‑facing binaries, all written in Python with lightweight nano probes on each host. Data lands in a graph database (neo4j) so dependency queries are fast. Policy checks run real time checks within seconds, roughly 70 of 250 Red Hat rules are implemented, and a typical host fails ~100 rules producing a numeric risk score (example host 57).
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:41Alans background
- 1:24Survey results
- 4:11Architecture
- 5:50Security
- 6:52Risk Scoring
- 8:07Security Analysis
- 9:22Demo
- 12:38System Fails
- 14:43Rules
- 17:16Service Offering
- 23:44Packages
related talks
36mSecurity Automation In A Devops World
36mImproving Security while Reducing Toil with DevSecOps
32mAutomating Security Compliance at Scale
35mContinuous Cloud Security Automation
38mDesign Approaches for Security Automation
27mCatch Me If You Can: Hunting Misconfigurations Before They...
52mApplication Security at DevOps Speed and portfolio scale
26mSecurity Automation For GraphQL