Your Infrastructure Needs to D.I.E.
summary
Claims that moving to a distributed immutable ephemeral architecture raises the attacker’s cost, illustrated by a 2003 Antwerp diamond heist that netted about €100M and exploited simple gaps. Implements: Kubernetes clusters, CDN patterns, Terraform and Packer for immutable images, HashiCorp Vault for rotating credentials, and chaos experiments with observability. Demo boots ~10 short‑lived servers for a Sami travel site, leaves SSH open to show a baited password.txt triggers automatic instance shutdown and the site survives.
AI-written summary · about
chapters (11)
- 0:00Start
- 4:23Confidentiality
- 4:45Integrity
- 10:11Cloud Native Mindshift
- 11:44Distributed
- 14:34Immutable
- 18:57Ephemeral
- 22:16DEMO
- 25:48Chaos Engineering
- 28:35Everything??
- 30:08Kelly Shortridge
related talks
28mNew Paradigms for the Next Era of Security
40mInfrastructure as Code in the Wild
39mSecurity in a DevOps World
30mBlank Space: Filling the Gaps in Atomic and...
26mPremiere
50mAd Hoc Mutable Infrastructure for Security Management
20mDefense in Depth: Securing your new Kubernetes cluster from the challenges that lurk within
46mApplication security from start to finish