Name: Securing the Mesh
Start: 2020-07-16T18:00:00-05:00
End: 2020-07-16T20:00:00-05:00

Agenda:

6:00pm: Socializing and Announcements
6:20pm: Talk: Securing the Mesh
7:15pm: Conclude

---
Details:

When implementing a network security solution in a cloud native environment, the ephemeral nature of workload instances creates a challenge in identifying the parties to each network connection. Introducing a service mesh into that environment creates additional challenges - each connection now has one or more extra hops to and from the proxies and communication between workloads is usually encrypted. On the other hand, the proxy itself is an excellent point to implement network security, since it has the context for each connection as well as visibility to the plaintext content of the communication.

Lee Calcote from Layer5 and Haim Helman from Octarine will discuss a typical journey to cloud native and subsequently to a service mesh and the security concerns raised in that process.

Haim and Lee will present the security features that are inherent to the mesh itself - encryption, mutual authentication and identity-based layer-7 access control. They will further elaborate on advanced security features that can be achieved by extending the mesh’s data plane (e.g. new Envoy filters) and control plane (e.g. new Istio Mixer adapters). These include signature-based and anomaly-based threat detection, automation of access control policy creation and enhanced visibility and reporting of access control policy violations.
Haim will demonstrate how Octarine utilizes Envoy and Istio to secure cloud native workloads.

---
Speaker:

Haim Helman, CTO, Octarine
https://twitter.com/octarinesec

Lee Calcote, Founder, Layer5
https://twitter.com/lcalcote, https://twitter.com/layer5

---
An online event hosted on Zoom.

Lee Calcote

Jill Plubell

Cloud Native Austin

Technology

New Technology

Containers

Software Development

Continuous Delivery

SaaS (Software as a Service)

Open Source

Cloud Computing

Configuration Management

Data Center and Operations Automation

DevOps

Infrastructure as Code

Docker

Kubernetes

Prometheus

CNCF

Securing the Mesh

Online event

Share

Securing the Mesh

Cloud Native Austin

Details

Members are also interested in