2. Securing Microservice Architectures Laura Bell M239

6. In this talk Microservice Fundamentals Some important points that are worth refreshing Prevention Avoid common vulnerabilities and avoid mistakes Detection Prepare for survival and response

12. Integrity Availability Confidentiality

13. Spoofing Tampering Repudiation Information Disclosure Denial of Service Escalation of Privilege

15. Service decomposition

19. Orchestration layer attacks

23. Identity and access management

28. Immutable architectures matter in microservice security

32. Heterogeneous language and technology spaces

38. Testing

40. OWASP Zap Proxy https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project Gauntlt http://gauntlt.org/ BDD Security http://www.continuumsecurity.net/bdd-intro.html

43. Logging and monitoring

49. TL;DR Microservice Fundamentals Some important points that are worth refreshing Prevention Avoid common vulnerabilities and avoid mistakes Detection Prepare for survival and response

50. Security in a Container-based World Friday 11:55am Find me later at…  Hub Happy Hour Wed 5:30-6:30pm  Hub Happy Hour Thu 5:30-6:30pm  Closing drinks Fri 3:00-4:30pm 1 2 3 4 5 6

51. Subscribe to our fortnightly newsletter http://aka.ms/technetnz http://aka.ms/msdnnz http://aka.ms/ch9nz Free Online Learning http://aka.ms/mva Sessions on Demand