VASCAN 2019

Complexity is the primary challenge to effective and efficient security today, as evidenced by the endless series of incidents, where mis-configuration and misalignment of security controls are invariably at the heart of devastating breaches. The future of security is evolving in a more complex world, in which growing constellations of security widgets are combined to protect increasingly distributed and dynamic cloud native applications, against ever more sophisticated adversaries. As we move forward, embracing more comprehensive “end to end” application platforms, we have the opportunity to greatly simplify and enhance the effectiveness of all aspects of security.
 
A platform that reaches from development and testing, thru deployment and orchestration, to governance and analytics can create a single aligning version of the truth, about “what is being protected”, “how it should behave” and “what are the plausible options, if it doesn’t”. 
 
In this session we will consider how we can leverage long orphaned development, orchestration and governance context, in production to transformatively improve the effectiveness and efficiency of security policy management across the security technical portfolio. We will consider specific examples from each contextual dimension (e.g. development, platform orchestration, governance/classification), to concretely demonstrate how such improvements can be realized in operation. Finally we will highlight how “end to end” platforms are increasingly enabling this kind of capability as an intrinsic aspect of more holistic application focused management.