Dates
Conferences
Tags
Sort by:
Most recent
Conference: Cloud Native SecurityCon North America 2022
Authors: Yuji Watanabe, Jayashree Ramanathan
2022-10-25
tldr - powered by Generative AI
The presentation discusses the importance of policy-based governance in protecting the integrity of Ansible playbooks and ensuring a consistent approach to managing clusters. The approach involves representing best practices as policies, managing them like source code, and deploying them using GitHub's methodology. The benefits include reduced operational costs, continuous security and audit readiness, and efficient day-to-day collaboration among various personas. The presentation also highlights the Kubernetes Policy Workgroup's white paper on policy management and the Open Cluster Management CNCF Sandbox project that enables the policy-based governance approach.
- Policy-based governance is crucial in protecting the integrity of Ansible playbooks and ensuring a consistent approach to managing clusters
- Best practices can be represented as policies, managed like source code, and deployed using GitHub's methodology
- Benefits include reduced operational costs, continuous security and audit readiness, and efficient day-to-day collaboration among various personas
- The Kubernetes Policy Workgroup's white paper on policy management and the Open Cluster Management CNCF Sandbox project enable the policy-based governance approach
Conference: OWASP 20th Anniversary Event
Authors: Ovidiu Cical
2021-09-24
tldr - powered by Generative AI
Applying knowledge graph to cyber security will improve data organization and provide a contextual view of digital assets, resulting in a more effective cyber security program.
- A knowledge graph can provide a map of all digital assets and their relationships, allowing for a contextual view of data
- Importing data from various sources, such as HR tools, can create an abstract layer for the knowledge graph
- Using a knowledge graph can surface vulnerabilities and prioritize mediation
- Managed services, such as Amazon Web Services Neptune, can be leveraged for a graph database system
- Tools like Cartography and OpenCSPM can be used to map assets and create relationships