Ensuring Platform Security with Windows Bosh Add-ons - Maris, Schaefbauer, Coppock, Boeing
summary
Boeing meets a long checklist—~100 daily security controls, forced multi‑factor auth for Ops Manager and SSH, no direct server access—by applying BOSH add‑ons via Runtime Config across nine foundations using Concourse pipelines. Implementation details: McAfee on Windows integrates with EPO via an API and needs vcap exclusions, a scheduled PowerShell task reports compliance, IP tables and Windows Firewall restrict traffic through multi‑factor jump boxes, and apps run with HWC for .NET Framework and .NET Core on Linux; licensing forces scaling to fewer Windows cells.
AI-written summary · about
chapters (4)
related talks
24mPCI Compliance using Cloud Foundry and BOSH Add-ons
28mConfiguring a More Secure BOSH [I]
43mSecurity in DevOps Strategies
15mKeynote: Improving OSS Security Through Collaboration
40mSecurity That Says “Yes”: Agile Windows Security with PowerShell
42mContinuous Security: Integrate security tools into your DevOps Pipeline
05mSecurity In Plain Sight: Hardening Systems Via Open Source
36mImproving Security while Reducing Toil with DevSecOps