logo

Back to the Future: Next-Generation Cloud Native Security

2023-04-20

Authors:   Matt Jarvis, Andrew Martin


Summary

The impact of AI on cybersecurity and DevOps is likely to be significant, but it raises questions about trust and the potential for automated adversaries. The security landscape will become more complex, and it will be imperative to rethink how we educate and train the next generation of developers and security practitioners.
  • AI-generated programming may make it easier for human programmers to create software, but it also raises concerns about job displacement and the potential for machines to provide us with the wrong answers
  • Automated attack simulation and deep fakes are growing threats, and AI tooling may be able to generate novel exploit code and wreak havoc on our systems
  • Automated remediation may be a potential foil to attackers, but it raises concerns about false negatives and the potential for production downtime
  • It is important to rethink how we educate and train the next generation of developers and security practitioners to meet the challenges of the evolving security landscape
The speaker mentioned that they were involved in efforts to educate and train the next generation of developers and security practitioners through organizations like the Lynx Foundation and running capture the flag events. They emphasized the need for the industry to come together to address the challenges posed by emerging threats and the increasing complexity of the security landscape.

Abstract

Cloud native security moves quickly: what will be the compounded effects of today’s emerging technologies on future architectural patterns? In this talk we’ll explore what security might look like in the cloud ecosystem of the future - from hardware, cryptography, architecture and software development patterns, to build an almost certainly fuzzy picture of what the coming years might bring. Bringing defence through an offensive lens, we model the ecosystem and look at how the industry can stride forward into the unknown. Peering into the void of uncertainty, we will: Appraise the state of tomorrow’s emergent cloud native security landscape Model an idealised security pipeline using next-generation technologies Highlight the challenges we need to overcome as an industry Call for community contributions to cut through the noise and define the future

Materials: