"DevOps with SecOps" ~ short intro to Security Implications in DevOps Process

It's a short introduction to Security Implications in the new emerging & highly required domain of DevOps.

DevOps with Sec-ops

View more presentations from Abhishek Kumar

As currently, the major concern around DevOps world is 'The Mantra of Automation' at the level of
+ System/Environments Provisioning
    (easy & fast using Cloud Support)
+ Idempotent Configuration
    (using Automated Configuration Services)
+ Logging & Analytics
    (using automated detailed logging and clever analysis )

This presentation just mentions the security considerations related to all these 3 DevOps processes...

+ Provisioning being affected by

 |=+ Non-Robust Cloud Frameworks,

 |=+ Vulnerable Service APIs, &

 |=+ Virtualization BreakOuts

 |

+ Configuration Management threatened by

 |=+ Non-Robust Services, &

 |=+ Non-preferred storage of sensitive

 |     configuration data

 |

+ Analytics

 |=+ Log Analysis frameworks have been 

 |     several times attacked by infecting 

 |     the received logs resulting in service

 |     level non-sanitized input attacks. 

 |_

Presentation on "XSS Defeating Concept in (secure)SiteHoster" : 'nullcon-2011'

this is the work that I presented in 'nullcon - 2011' an security conference held at Goa by an emerging Security Community of India known as 'null'
it's mainly regarding preventing XSS Attacks with an entire new Concept based on 'Bug-As-A-Service' and 'Attacking-The-Attacker'...
any views/questions/comments/critics/confusions
----------
Presentation:

Presentation on "XSS Defeating Concept in (secure)SiteHoster" : 'nullcon-2011'

View more presentations from Abhishek Kumar

----------
Concept-Part-1 WhitePaper:

XSS Defeating Trick ~=ABK=~ WhitePaper

View more documents from Abhishek Kumar

----------
Concept-Part-2 WhitePaper:

XSS Defeating Concept - Part 2

View more documents from Abhishek Kumar

----------