Opening Plenaries: Security in Automation
summary
Argues that automation must handle the repetitive security work that scales: scripted user onboarding/offboarding via Slack command-based board bot, Duo-driven two-factor checks, automated secret rotation and certificate renewal (cert roll succeeded during Heartbleed by renewing and pushing certs), and a vuln-scan-to-chat flow using a Ruby-client scanner API and a bot called Pino that fetches reports for review; outlines pragmatic cross-team integration with a secret-management bot Aegis.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:30Why Security Automation
- 11:50Confidentiality
- 13:22What What Should Security Automation Be Doing
- 20:59Aegis
- 22:23What Can Security Automation Do
- 36:07Things To Keep in Mind
related talks
44mWhat I learnt about automating security
38mDesign Approaches for Security Automation
27mStandard Classification: Automate Security, Don't Tell Your Boss
32mAutomating Security Compliance at Scale
40mDesign Approaches for Security Automation
41mSkillful, Scalefull Fullstack Security in a State of Constant Flux
29mThe SecDevOpronomicon
29mPragmatic Security Automation and DevSecOps in the Cloud