Security Automation In A Devops World

on YouTube ↗36m

" summary

Claims an operational pipeline that boots from nothing and discovers systems, models them in a graph database, and enforces best practices continuously on change rather than by quarterly audit. Demonstrates the open source assimilation project using lightweight nano probes, heartbeat rings for topology‑aware scaling (one instance monitors tens of thousands), checksum inventories of binaries and libraries including Docker, a per‑system risk score and a visualization of the attack surface — all working live in the demo.

AI-written summary · about

" chapters (9)

1. 0:00Start
2. 0:15Security Automation for DevOps
3. 2:21Security questions
4. 4:57Highly Scalable Discovery-Driven Automation
5. 8:37Minimizing Network Footprint (in roadmap)
6. 10:46Assimilation Architecture
7. 11:37Assimilation Security Discovery
8. 12:33Assimilation Analysis / Reports
9. 13:32Best Practice Analyses

" related talks

• 25mSecurity Automation for DevOpsAlan Robertson · DevOpsDays Rockies 2016
• 30mSecuring DevOps using OWASP DevSecOps ToolsAhmed Abdullah · DevOpsDays Cairo 2025
• 28mThe path to agile DevSecOps – a holistic approach of automation, orchestration and correlationGunner Winkenwerder · DevOpsCon Spring 2019
• 39mThe Path Of DevOps Enlightenment For InfoSecJames Wickett · OWASP AppSec California 2018
• 32mBuilding a Secure By-Design Pipeline with an Open Source StackRotem Refael · CloudOpen @ OSS LATAM 2022
• 43mBuilding a Secure DevOps PipelineAaron Weaver · AppSec USA 2017
• 37mDevOps - The Automation of ComplianceErwin Staal · DevOps Pro Europe 2019
• 30mDevSecOps: More Than Just PipelinesTanya Janca · Conf42 DevSecOps 2023