TO CLOUD OR NOT TO CLOUD: ENTERPRISE CLOUD SECURITY VIA DEVSECOPS

No ratings

Presented at Mircon 2014 by

Shannon Lietz

Shrikant Raman

Securing applications hosted in the public cloud requires organizations to think differently about security. This talk will share lessons learned from a joint Intuit and Mandiant project to secure a major migration of customer applications to the cloud. We will cover some of the key challenges faced, and how we’re approaching security and monitoring of these environments at a scale the business demands. We will also discuss how the evolving FireEye Threat Analytics Platform allowed the cloud security operations teams to achieve automation in monitoring and alerting operations, freeing analysts’ time and speeding our detect to remediate cycle.