Jimmy Mesta - Containerizing your Security Operations Center - AppSecUSA 2016

394 views · Published 21 November 2016 · 46:59 · Indexed 12 November 2026

Channel: OWASP Foundation · 2016 · Science & Technology

Watch on YouTube

Recorded at AppSecUSA 2016 in Washington, DC
https://2016.appsecusa.org/

Containerizing your Security Operations Center

As security professionals, we have no shortage of tools available to us in our offensive and defensive pursuits. How we choose to deploy, maintain, and share these tools across teams can prove to be burdensome and overly complex. Security teams are becoming swept up in the DevOps movement and we are being encouraged to bring visibility into our workflows and toolsets. This means moving things from our local boxes to a more available and collaborative environment. This talk will share lessons learned from building a pluggable, cloud­based "Security Operations Center" running entirely on containers to help security teams rapidly build out scanning pipelines, centralize alerts, investigate malware, and easily collaborate with teams across the organization. I’ll dive into the architecture and design of the cluster and how to quickly get a POC running in Kubernetes

Jimmy Mesta
Sr. Security Engineer, Invoca
Jimmy is an application security leader that has been involved in Information Security for nearly 10 years. He is the chapter leader of OWASP Santa Barbara and co-organizer of the AppSec California security conference. Jimmy has spent time on both the offense and defense side of the industry and is constantly working towards building modern, developer-friendly security solutions. 

-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project

More from this channel