NOPASSWD - Building a Passwordless Cloud Infrastructure

Explore the future of cloud security in this conference talk from NDC Oslo 2023. Dive into the world of passwordless authentication for cloud infrastructure, examining the current landscape, associated security risks, and emerging technologies. Gain insights into FIDO and FIDO2 standards, and discover options for improving your security designs. Follow a case study of a sample passwordless infrastructure stack, and learn how to implement a more secure, passwordless infrastructure for your team, regardless of size. Understand the importance of careful vendor and tool selection to enhance your overall security posture. From password managers to authentication factors, cover a range of topics including FIDO adoption, code repositories, CI/CD configuration, and core principles of identity management. Equip yourself with the knowledge to build a robust, passwordless cloud infrastructure and stay ahead in the rapidly evolving field of cybersecurity.

Intro
What Is a Password?
Password Managers
Locally stored, never rotated
Simple Passwords + Brute Force
Authentication Factors
Passwordless Auth Technologies
FIDO Adoption
Adoption for End-Users
Code Repositories, CI/CD Configuration
Core Principles
Identity Manager
Infrastructure Credentials
Passwordless Architecture
Selecting Vendors
Compromising Passwordless Solutions