The Soft, Warm Underbelly of the Cloud
Remember the times when we did everything (and then some) to protect and minimize access to the management interfaces of our infrastructure, and isolate it from users and production networks? Today, we expose an enture cloud’s API to the Internet, and over it, aim to provide as much cloud automation functionality as possible. Think about this for a minute, knowing about our historic ability to write robust, reliable, and secure software in an emerging industry. I will present various cloud automation risks, and suggest a robust approach for preventing catastrophic automation-related security failures.
Jan Bervar is a senior IT architect in the consulting division of NIL Ltd, a cloud builder and provider based in Slovenia. With more than 20 years of experience in information security, Jan’s work involves working on complex security challenges, most often to crete innovative blueprints for risk reduction for cutting-edge and security-immature systems and technologies.