Name: Infrastructure as Code (IaC) Misconfigurations
Start: 2021-12-02T18:00:00Z
End: 2021-12-02T21:00:00Z

Agenda:

* OWASP Updates
* The talk
* Open discussion

The Talk:

Infrastructure as Code (IaC) makes deploying cloud or container configurations scalable and faster. If you are launching a microservice into a Kubernetes cluster, or even building an entire AWS virtual infrastructure, IaC can automate the deployment. By building repeatable templates you can also ensure that deployments happen exactly as you design, every time. However, errors in infrastructure configuration are now regarded as the second biggest cause of data breaches. There are many ways to give adversaries an advantage through security misconfigurations. Overly permissive storage volumes, unauthenticated database access, or ports left open to the internet have all been a cause of compromise. The solution? Treat your infrastructure code the same as your application code. During your build process, use tools to scan for infrastructure misconfigurations. When you find them raise alerts or even break the build.

In this session, we will discuss common types of IaC misconfigurations, and demonstrate a free, open-source security tool that developers can build into their pipelines to help protect infrastructure from compromise.

About Ori Bendet:

An experienced product leader combining strong technical and marketing skills, Ori has been leading Checkmarx's flagship product, CxSAST (Static Application Security Testing), a Gartner and Forrester market-leading solution, serving thousands of customers worldwide for the last 2 years. Prior to Checkmarx, he was in Time To Know, HPE, PicApp and Bezeq in various product and engineering positions.

Your Hosts:

Delivered to you in collaboration with OWASP Bristol.

David Flint

OWASP Suffolk Chapter

OWASP® Foundation 

Technology

Open Source

OWASP

Cybersecurity

Web Application Security

Software Security

Application Security

Infrastructure as Code (IaC) Misconfigurations

IT Infrastructure

Coders

Online event

Share

OWASP Suffolk Chapter

Infrastructure as Code (IaC) Misconfigurations

OWASP Suffolk Chapter

Details

Members are also interested in