Keynote about #ZeroTrust on DevOpsCon Berlin 2023 by Kevin Schu (Director Cloud & DevOps, AOE) & Daniel Pötzinger (CTO, AOE):
0:18 Keynote Topics and Introduction
1:18 The Equifax hack - and how it could have been avoided
4:48 Security with Zero Trust
7:06 Zero Trust Aspects
7:55 Why it is hard
10:00 Identity & Identity Awareness - Deep Dive
17:33 Device Authentication
18:27 Networking & Firewall
19:48 Application Security - Deep Dive
26:34 Infrastructure Security
29:03 Secure Data Handling
29:53 Secure Development and Delivery
32:32 Security Monitoring
33:05 Organization and Culture
34:27 How Equifax could have avoided the hack
35:08 Summary, Facts and Tipps
37:05 Q&A

With digital boundaries disappearing, a new, adapted security concept is of the essence. "Zero Trust" may sound like a harsh principle, but it is exactly the adaptation needed today. This radical security model change is followed by a far-reaching change in infrastructure, processes and, ultimately, culture; and at first glance, this seems like a daunting task.

Having successfully implemented Zero Trust for our customers multiple times, we have some learnings to share: from the initial problems and challenges to the full-scale implementation, from code repository and CI/CD, to service-to-service communication. Besides that, we also highlight what to consider, what kind of tools can help, and what the cultural implications are.

Download presentation here:
https://www.aoe.com/en/insights/blog/...

About keynote speaker Kevin Schu:
Kevin is a DevOps enthusiast and Infrastructure Automation Specialist. Currently, he is Director for Cloud and DevOps Consulting at AOE in Wiesbaden, supporting customers migrating into the cloud, helping them sharpen their cloud strategy as well as building high performing DevOps organizations. As a backend developer and architect, he was responsible for high available and fast scaling IT systems in a wide range of industries for many years. Since 2018, he has worked exclusively in the area of DevOps and Infrastructure Automation and focuses on public clouds, Infrastructure as Code, Zero Trust, CI/CD and Kubernetes, among others.

Cloud & DevOps Services:
aoe.com/devops

#Cloud #DevOps #DevOpsCon #devopstutorial