Third-Party Integrations: Friend or Foe? - Security Risks and Solutions

Explore the challenges and solutions surrounding third-party integrations in microservice architectures during this 19-minute conference talk from USENIX Enigma 2020. Delve into typical integration flows, identify security visibility gaps, and learn about effective risk analysis strategies for organizations dealing with numerous external services. Discover how improving these processes can lead to a more comprehensive and consistent risk map of organizational assets. Gain insights into deriving new metrics and incident response systems from seemingly mundane security work, emphasizing the importance of thorough risk assessment in the face of increasing reliance on third-party services.

Intro
Who am I
The Incident
The Red Team
Target Example
Procurement Example
Un unfettered outbound access
Lack of vendor context
Conclusion