Scaling Security GROW WITHOUT COMPROMISING SECURITY

 Scaling mitchellh

 Scaling mitchellh

 Scaling mitchellh Developer Operator Production

 DevOps mitchellh Developer Operator Production

 DevOps mitchellh Developer Operator Production Security?

 DevOps mitchellh Developer Operator Production Security?

 Scaling Anything mitchellh 1. Do less 2. Do it faster 3. Do more in parallel

 Scaling Security How do you empower people 
 to build secure systems? mitchellh

 Empowering Security mitchellh

 Empowering Security • Developers: A powerful, idiomatic API • Operators: A pure-software solution that is easy to maintain and can run on commodity hardware • Security Engineers: Strict usage control, audit trails, 
 clear threat models mitchellh

Vault mitchellh

 Developers: An API for Security • HTTP (over TLS), JSON • Secret storage • Encryption services • Certificate creation and verification mitchellh

 Operators: Its Just Software • Pure software, no hardware requirement • Stateless (pluggable data stores) • Active/standby HA • Read-scalability with replication (enterprise) mitchellh

 Security Engineers: Fort Knox • N-Person Unseal • Audit trails • Access Control • Clearly defined threat model and architecture • Open Source, Audited, Compliance, feature support mitchellh

 Scaling 
 Security mitchellh

 Scaling Security mitchellh Developer Operator Production Security

 Scaling Security mitchellh Developer Operator Security Core Security, Requirements, Practices, Audits Infrastructure Security, Network Security Application Security, Data Security

 Scaling Security: Sec Engineer • Allowed behavior • Encryption algorithms • Key hierarchies, 
 rotation policies • Audit logs mitchellh Core Security, Requirements, Practices, Audits

 Infrastructure Security, Network Security Scaling Security: Ops • Network layout/config, routing tables, etc. • OS security, user accounts, file permissions, etc. • Infrastructure creation, change process mitchellh

 Application Security, Data Security Scaling Security: Dev • TLS connections • API auth/authz • Data encryption • Password request and usage mitchellh

 Scaling Security Trust but verify at every level mitchellh

Scaling Security GROW WITHOUT COMPROMISING SECURITY