Architecting for Security in the Cloud

Explore cloud security architecture in this 41-minute conference talk from APPSEC Cali 2018. Learn how to identify and close security gaps in cloud applications, build robust architectures, and protect against various attack vectors. Discover best practices for coding, server security, database protection, and managing insider threats. Gain insights from Josh Sokol, Information Security Program Owner at National Instruments, as he shares his expertise on creating resilient cloud-based products and services. Understand the importance of balancing agility with security in cloud environments and learn practical recommendations for strengthening your cloud infrastructure against potential attacks.

Intro
The Challenge
SimpleRisk Architecture
Generic Coding Best Practices
How do we keep the application updated?
Securing Your Servers
Our Architecture
Securing the Database
What is our current attack surface?
Attack Vectors
Attack Vector: Insider Threat
Attack Vector: Amazon
Attack Vector: GitHub
Attack Vector: Web Application
Attack Vector: Remote Access
Recommendations