AppSec and Microservices
•
2 likes•546 views
Microservices give us many options. We can pick different technologies, mix synchronous and asynchronous integration techniques or embrace different deployment patterns. But they also give us different options for how we think about securing our systems. Done right, and microservices can increase the security of your vital data and processes. Done wrong, and you can increase the surface area of attack. This talk will discuss the importance of defence in depth, discussing the many different ways in which you can secure your fine-grained, distributed architectures. The audience should come away with a working framework for thinking about application security, and also understand how microservices can help (or hinder) building a secure system.
Recommended
Recommended
More Related Content
What's hot
What's hot (14)
More from Sam Newman
More from Sam Newman (9)
Recently uploaded
Recently uploaded (20)
AppSec and Microservices
- 1. @samnewman#asas2017 AppSec & Microservices ASAS, Arnhem, 2017 Sam Newman
- 9. @samnewman#asas2017 Accounts Returns Invoicing Shipping Inventory Customer Service Small independently deployable services that work together, modelled around a business domain
- 27. @samnewman#asas2017 Open Safe Pick Lock Learn Combo Cut Open
- 28. @samnewman#asas2017 Open Safe Pick Lock Learn Combo Cut Open Find Written Combo Get Combo from the target
- 29. @samnewman#asas2017 Open Safe Pick Lock Learn Combo Cut Open Find Written Combo Get Combo from the target Blackmail Threaten Bribe
- 30. @samnewman#asas2017 Open Safe Pick Lock Learn Combo Cut Open Find Written Combo Get Combo from the target Blackmail Threaten Bribe $$$$ $$$$ $$ $$$ $$ $
- 46. @samnewman#asas2017 Web browsers Music Web Shop Hi, I’m Bob! Hi Bob! You’re logged in!
- 48. @samnewman#asas2017 Web browsers Music Web Shop Can I see my user details? Logged in as Bob
- 49. @samnewman#asas2017 Web browsers Music Web Shop Can I see my user details? User service Logged in as Bob
- 50. @samnewman#asas2017 Web browsers Music Web Shop Can I see my user details? User service Get me Bob’s details! Logged in as Bob
- 51. @samnewman#asas2017 Web browsers Music Web Shop Can I see my user details? User service Get me Bob’s details! Here are Bob’s details Logged in as Bob
- 52. @samnewman#asas2017 Web browsers Music Web Shop Can I see my user details? User service Get me Bob’s details! Here are Bob’s details Logged in as Bob
- 54. @samnewman#asas2017 Web browsers Music Web Shop Can I see Alice’s details? User service Logged in as Bob
- 55. @samnewman#asas2017 Web browsers Music Web Shop Can I see Alice’s details? User service Get me Alice’s details! Logged in as Bob
- 56. @samnewman#asas2017 Web browsers Music Web Shop Can I see Alice’s details? User service Get me Alice’s details! Here are Alice’s details Logged in as Bob
- 61. @samnewman#asas2017 Music Web Shop Web browsers User service { "id": "402ndj39", "name": “Alice Alison" }
- 62. @samnewman#asas2017 Music Web Shop Web browsers User service { "id": "402ndj39", "name": “Alice Alison" }
- 63. @samnewman#asas2017 Music Web Shop Web browsers User service { "id": "402ndj39", "name": “Alice Alison" }
- 67. @samnewman#asas2017 “44 percent of security breaches occur after vulnerabilities and solutions have been identified. In other words, the problems could have been avoided if found vulnerabilities had been addressed sooner.” • Forbes/BMC, 2016 Source: https://betanews.com/2016/01/12/data-breaches-and-cyber-attacks-are-often-caused-by-failing-to-patch-known- vulnerabilities/ Original Report: https://www.forbes.com/sites/forbespr/2016/01/12/enterprises-face-unnecessary-risks-to-data-loss-and- downtime-says-report-by-forbes-insights-and-bmc/
- 78. @samnewman#asas2017 Polyglot = more stuff to track!
- 79. @samnewman#asas2017 Polyglot = more things to break?
- 95. @samnewman#asas2017 Backups Burn it all down Harder with microservices?
- 96. @samnewman#asas2017 Review your old post-mortems
- 97. @samnewman#asas2017 Review your old post-mortems …and the resulting action plans!