Sam Newman on Insecure Transit – Microservices Security

CaSE: Conversations about Software Engineering

Sven Johann talks with Sam Newman about Microservices Security

• Public API for "Have I been pwned?"
• Find automatically vulnerabilities in dependencies
• Container and Cloud Native Security
• Scanning containers

فصل ها

1. Intro (00:00:00)

2. Why is security now so important for developers? (00:01:15)

3. Difference between microservices and monolith security (00:08:14)

4. Automated credentials management (00:10:50)

5. Patching VMs and containers (00:28:25)

6. Secure base image and runtime analysis (00:37:50)

7. Authentication and Authorisation (00:48:00)

8. Service Meshes and auth proxies (00:56:50)

9. Mutual TLS (01:08:28)

10. Confused deputy problem (01:14:50)

11. Wrap up (01:19:25)