Securing microservices: a practical guide by Katherine Stanley & Adam Pilkington
1,881 views · Published 17 May 2017 · 52:14 · Indexed 6 November 2026
Channel: Devoxx · 2017 · Science & Technology
Moving to microservices requires a new mindset and approach to application design. This is particularly important when it comes to security as in a distributed world even calls from other parts of your application are vulnerable. Security is often discussed in an abstract context and as there are so many existing standards it's difficult to know what methods are appropriate and when to use them. This session will use the text-based microservice adventure Game On! to discuss security in a real-world scenario. It will introduce the security considerations in a microservice environment and the choices we made to secure our application. You will learn how to utilise industry-wide standards such as OAuth2, OpenID Connect and other social sign-on methods and what we have done to work towards dev/production parity. Katherine Stanley is a Software Engineer on the microservices team for WebSphere Liberty. As a part of the Liberty team she has created samples to help developers get started with microservices and worked on the open source microservice project GameOn. Katherine has also given presentations and run workshops about microservices and GameOn at European conferences, including DevoxxUK and OSCon in London, and JFokus in Sweden. Katherine has been at IBM since 2014 and is based in the Hursley UK lab. Adam Pilkington Adam is an IBM Software Engineer working in the Microservices team where he is working on Game On!, an open source microservices-based exemplar framework. Prior to having too much fun with microservices he worked on IBM’s JVM. When he’s not writing code, he can be found listening to rock music or participating in various martial arts.
More from this channel
-
32:13
Writing Groovy AST Transformations: Getting Practical in an hour! by Baruch Sadogursky
-
25:58
TweetWallFX - Behind the Scenes by Sven Reimers
-
29:44
Second generation "workflow managers" for big data by Alex Van Boxel
-
29:13
Secrets are secrets. Please maintain them as secrets by Alex Soto
-
2:13:40
JavaScript build pipelines with Gulp.js by Stefan Baumgartner
-
2:04:09
Powerful Metaprogramming Techniques With Groovy by Jeff Brown
-
2:38:32
Distributed Machine Learning 101 using Apache Spark from a Browser by Xavier Tordoir/Andy Petrella
-
2:36:21
Caching 101: Caching on the JVM (and beyond) by Alex Snaps/Louis Jacomet