OWASP San Antonio Chapter Qtrly Meeting-Oct 18th 2024 (Friday)

Container Security-A discussion
Details
Topics- See abstracts below

• Containers 101- Optiv
• Security challenges and opportunities in containerization- Palo Alto
• From Reactive to Effective: Building Application Security that Works-Mend IO
• Protecting AI: The ultimate Game of Cat and Mouse:
  Panel-Moderator-Brandon Pinzon
  Panelists: Eddie Contreras- Frost, Chris Lindsey-Mend, Joseph Gregorio-Frost.

Lunch Provided
Scuzzi’s Italian Restaurant - 4035 N Loop 1604 W #102, San Antonio, TX 78257
ZOOM link provided for remote attendees

**https://optiv.zoom.us/j/93311548515?pwd=8LlhRjVy4bmPCXRheXtLMe4EQ9KAJ2.1&from=addon**

We encourage everyone to attend in person. We will have door prizes and excellent food for all to enjoy, as you take advantage of this excellent networking opportunity!
Please feel free to pass this information on to your peers and team members.+

Please reply “ONSITE” if you plan on attending in person so we can finalize headcount for food and room attendance 😊

Social Hour after

Presentations will include:
I. Containers 101-Optiv
Container Security Best Practices and Tooling-Optiv

II. Securing APIs in the Cloud: Insights and Best Practices- Palo Alto
This presentation explores the security challenges and opportunities in containerization, emphasizing a defense-in-depth approach. We begin by discussing the widespread adoption of containers and the emerging trends driving innovation, such as serverless computing and hybrid/multi-cloud environments. We then examine key security concerns, including container sprawl, misconfigurations, and supply chain vulnerabilities. A defense-in-depth strategy, starting with shifting security left during development, followed by securing images at rest and implementing runtime protection, ensures comprehensive container security. By integrating cloud workload protection platforms (CWPP) with broader CNAPP strategies, organizations can safeguard containers throughout their entire lifecycle, from code to production

III. From Reactive to Effective: Building Application Security that Works-Mend IO

In 2023, 71% of enterprises admitted their AppSec programs were reactive, playing catch-up with vulnerability alerts -– while at the same time, applications remain the top target for threat actors. That adds up to increased business risk for a lot of companies and fuels an urgent need to improve application security strategies. But how?
The key is to move from a compliance-based approach to managing application risk.

IV. Protecting AI: The ultimate Game of Cat and Mouse:

Panel-Moderator-Brandon Pinzon
Panelists: Eddie Contreras- Frost, Chris Lindsey-Mend, Joseph Gregorio-Frost.