Bake Security Into Your Infrastructure-as-Code

Presented at RVAsec 2021, Nov. 5, 2021, 1 p.m. (50 minutes)

Baking takes time, dedication, and effort throughout the entire process. If you leave an ingredient or step out, you risk ruining the entire cake. Infrastructure-as-Code (IaC) is surprisingly similar. When you leave security out of your IaC process, you risk ruining what you worked so hard to create. In this talk we'll dive into some best practice options for securing your IaC and explain the risks when you don't.

Presenters:

• Caleb Mattingly - Secure Cloud Innovations
  Caleb Mattingly is the CEO and founder of Secure Cloud Innovations, a cybersecurity consulting firm. Prior to starting SCI, Caleb worked in defense contracting supporting the Army, Navy, Air Force, and DISA. Caleb's highest level of education is a MS in Cybersecurity from Liberty University.

Links:

• https://rvasec2021.sched.com/event/p17s/bake-security-into-your-infrastructure-as-code
• https://infocon.org/cons/RVAsec/RVAsec 2021/Caleb Mattingly - Bake Security into your Infrastructure-as-Code.mp4
• https://infocon.org/cons/RVAsec/RVAsec 2021/Caleb Mattingly - Bake Security into your Infrastructure-as-Code.eng.srt (subtitles)

Similar Presentations:

• BSidesSF 2015 / Getting started...help me help you
• DEF CON 24 (2016) / So You Think You Want To Be a Penetration Tester
• DEF CON 23 (2015) / A Hacker's Guide to Risk