Jimmy Mesta - Containerizing your Security Operations Center - AppSecUSA 2016
394 views · Published 21 November 2016 · 46:59 · Indexed 12 November 2026
Channel: OWASP Foundation · 2016 · Science & Technology
Recorded at AppSecUSA 2016 in Washington, DC https://2016.appsecusa.org/ Containerizing your Security Operations Center As security professionals, we have no shortage of tools available to us in our offensive and defensive pursuits. How we choose to deploy, maintain, and share these tools across teams can prove to be burdensome and overly complex. Security teams are becoming swept up in the DevOps movement and we are being encouraged to bring visibility into our workflows and toolsets. This means moving things from our local boxes to a more available and collaborative environment. This talk will share lessons learned from building a pluggable, cloudbased "Security Operations Center" running entirely on containers to help security teams rapidly build out scanning pipelines, centralize alerts, investigate malware, and easily collaborate with teams across the organization. I’ll dive into the architecture and design of the cluster and how to quickly get a POC running in Kubernetes Jimmy Mesta Sr. Security Engineer, Invoca Jimmy is an application security leader that has been involved in Information Security for nearly 10 years. He is the chapter leader of OWASP Santa Barbara and co-organizer of the AppSec California security conference. Jimmy has spent time on both the offense and defense side of the industry and is constantly working towards building modern, developer-friendly security solutions. - Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project
More from this channel
-
45:50
Revenge of the Geeks: Hacking Fantasy Sports Sites - Dan Kuykendall
-
51:38
Application Security at DevOps Speed and portfolio scale - Jeff Williams
-
35:56
HTML5 JS Security - maty siman
-
44:33
CSRF: not all defenses are created equal - Ari Elias-Bachrach
-
42:24
Running at 99% Surviging an Application DoS: Ryan Huber
-
34:16
libinjection: from sqli to xss - Nick Galbreath
-
47:55
Million Browser Botnet - Jeremiah Grossman Matt Johanssen
-
46:05
Next Generation Red Teaming - Robert Wood