Security Hardening of CI/CD Pipelines

Security hardening of CI/CD pipelines

In the world of continuous delivery and cloud native, the boundaries between what is our application and what constitutes infrastructure is becoming increasing blurred. Our workloads, the containers they ship in, and our platform configuration is now often developed and deployed by the same teams, and development velocity is the key metric to success.

This presents us with a challenge which the previous models of security as a final external gatekeeper step cannot keep up with. To ensure our apps and platforms are secure, we need to integrate security at all stages of our pipelines and ensure that our developers and engineering teams have tools and data with enable them to make decisions about security on an ongoing basis. In this session I will talk through the problem space, look at the kinds of security issues we need to consider, and look at where the integration points are to build in security as part of our CI/CD process.

Speaker Bio:
Vandana is a Security Relations leader at Snyk with current focus on DevSecOps. In her previous experience, she has dealt with Application security, Vulnerability management, SOC, Infrastructure security and Cloud Security.

She is a seasoned speaker / Trainer and presented at various public events ranging from Global OWASP AppSec events to BlackHat events to regional events like BSides events in India. She is part of the OWASP Global board of directors (Vice - Chair). She also works in various communities towards diversity initiatives InfosecGirls, InfosecKids and WoSec .

Vandana is a member of the Black Hat Asia Review Board as well as multiple other conferences including Grace Hopper India, OWASP AppSec USA to name a few. She is also one of the organisers of BSides Delhi.

She has been the recipient of multiple prestigious awards like Resilient CISO award by Dynamic CISO, Cyber Security Woman of the Year Award 2020 by Cyber Sec Awards, Application Security Influencer 2020 by Whitesource to name a few. She has also been listed as one of the top women leaders in this field of technology and cybersecurity in India by Instasafe.

join with zoom
Topic: Security Hardening of CI/CD Pipelines - OWASP Jakarta
Time: Sep 3, 2021 07:00 PM Jakarta

Join Zoom Meeting
https://us06web.zoom.us/j/81089825344?pwd=Yk1Pc0tCaitPWmpoL1NHSGIxVkF4QT09

Meeting ID: 810 8982 5344
Passcode: owaspjkt21