What I learnt about automating security
summary
By 2025 there are 3.5 million open roles so automation must supplement scarce staff not replace them. Practical automations include infrastructure as code and CI/CD checks, endpoint and cloud threat protection, CASB policies and CASB reverse-proxy to block downloads, DLP and cloud posture managers, a SIEM with SOAR playbooks reset passwords to automate routine remediation. Surprising findings: automated pentest tools are months behind CVEs and automation exposes many more problems while substantially reducing repetitive analyst work.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:48Agenda
- 1:28Meet George
- 5:01What is automation
- 6:49Inhouse security automation
- 10:34Infrastructure as code
- 13:01Threat protection products
- 16:27Cloud security access broker
- 22:12Cloud infrastructure
- 25:46Data loss prevention
- 27:31Proactive security automation
- 27:58Entity Behavior Analytics
- 30:39Cloud Security Posture Management
- 33:07Cloud Policy
- 38:43Security Pen Testing
related talks
38mOpening Plenaries: Security in Automation
33mThe Only Way to Survive Is to Automate Your SOC
28mScaling Your Defenses: Next Level Security Automation for Enterprise
50mAutomating security monitoring
41mSkillful, Scalefull Fullstack Security in a State of Constant Flux
33mAutomated security: face your vulnerabilities
27mStandard Classification: Automate Security, Don't Tell Your Boss
24mSecurity in 2023 and Beyond: Automation, Analytics and Architecture