Securing Infrastructure with OpenScap: The Automation Way!

on YouTube ↗28m

" summary

Covers OpenSCAP (an SCAP implementation) and how to integrate it with Foreman to automate security policy enforcement: scanning for missing patches, checking configuration settings, and generating/analysing SCAP reports. Explains OpenSCAP tools, components, profiles and how to create and contribute custom security profiles and policies, plus deployment and report management practices.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 1:47Why OpenSCAP?
3. 4:23OpenSCAP Tools
4. 6:52OpenSCAP Components
5. 10:30OpenSCAP Policies

" related talks

• 22mCreating Content for Automated Security ComplianceVojtech Polasek, Gabriel Becker · DevConf.CZ 2021
• 38mA Security State of Mind: Compliance and Vulnerability Audits for ContainersChris Van Tuin · KubeCon + CloudNativeCon North America 2016
• 32mA Security State Of Mind: Compliance and ...Chris Van Tuin · DevOpsDays Seattle 2017
• 36mSecurity Scanning - Past/Present/FutureStanislav Ochotnický, Martin Prpič · DevConf.CZ 2021
• 36mSecurity Automation In A Devops WorldAlan Robertson · DevOpsDays Salt Lake City 2016
• 44mWhat I learnt about automating securityGeorge Coldham · NDC Security 2023
• 26mOperational Compliance: From Requirements to RealityTrevor Vaughan · LISA17
• 38mDesign Approaches for Security AutomationPeleus Uhley · Black Hat USA 2016