Thursday, April 25, 2024

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library

Home
Security Creators Network
Webinars
Events
- Upcoming Events
- On-Demand Events
Sponsored Content
Chat
Library
Related Sites
Media Kit
About
Sponsor

Analytics
AppSec
CISO
Cloud
DevOps
GRC
Identity
Incident Response
IoT / ICS
Threats / Breaches
More
Humor

Hot Topics

USENIX Security ’23 - LibScan: Towards More Precise Third-Party Library Identification for Android Applications
N.A. Developers Optimistic About Generative AI and Code Security
AI Adoption Prompts Security Advisory from NSA
The Role of Threat Intelligence in Financial Data Protection
Randall Munroe’s XKCD ‘Pendulum Types’

Events Security Bloggers Network

Home » Cybersecurity » Events » GrrCON Augusta 2018, Brandon Traffanstedt’s Zero To Owned In 1 Hour: Securing Privilege In Cloud, DevOps, On-Prem Workflows’

GrrCON Augusta 2018, Brandon Traffanstedt’s Zero To Owned In 1 Hour: Securing Privilege In Cloud, DevOps, On-Prem Workflows’

by Marc Handelman on September 22, 2018

Videography Credit: Irongeek (Adrian Crenshaw).

*** This is a Security Bloggers Network syndicated blog from Infosecurity.US authored by Marc Handelman. Read the original post at: https://youtu.be/OJg4PLB1cgA

Techstrong Con 2024

Sponsorships Available

Sponsorships Available

Sponsorships Available

September 22, 2018September 22, 2018 Marc Handelman Conferences, education, GrrCon Augusta, Information Security, Irongeek

← XKCD, Unfulfilling Toys
Privacy and Anonymity in the Modern World — CyberSpeak Podcast →

Techstrong TV

Click full-screen to enable volume control

Watch latest episodes and shows

Upcoming Webinars

Mastering AI Security Posture Management for Cloud Security Professionals

Building better AppSec programs with ASPM

The Promise and Perils of AI

How Are You Protecting Your Company from API Security Breaches?

How Many Types of SBOM Are There?

Podcast

Listen to all of our podcasts

Press Releases

GoPlus's Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Subscribe to our Newsletters

Most Read on the Boulevard

Akira Ransomware Group Takes in $42 Million From 250 Attacks in a Year

Nigeria, Romania, Russia, U.S. Among Top Cybercrime Nations

UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

BreachRx Gets $6.5 Million to Automate Security Incident Response

DirectDefense Report Sees Shifts in Cyberattack Patterns

The 10 Women in Cybersecurity You Need to Follow

Review: ‘Artificial Intelligence — A Primer for State and Local Governments’

TA547 Phishing Attack: German Companies Hit With Infostealer

The Only API Penetration Testing Checklist You Need

Understanding Spectre V2: A New Threat to Linux Systems

Industry Spotlight

Cloud Security Cybersecurity Data Privacy Data Security DevOps Featured Industry Spotlight Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

N.A. Developers Optimistic About Generative AI and Code Security

April 25, 2024 Jeffrey Burt | 2 hours ago 0

Cyberlaw Cybersecurity Data Privacy Data Security Featured Industry Spotlight Mobile Security Network Security News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

HHS Strengthens Privacy of Reproductive Health Care Data

April 23, 2024 Jeffrey Burt | 2 days ago 0

Cloud Security Cybersecurity Data Privacy Data Security Featured Identity & Access Incident Response Industry Spotlight Malware Network Security News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches

UnitedHealth: Ransomware Attackers Stole Huge Amount of Data

April 23, 2024 Jeffrey Burt | 2 days ago 0

Top Stories

AI and ML in Security Data Security Featured Governance, Risk & Compliance News Security Boulevard (Original) Social - Facebook Social - X Threats & Breaches Vulnerabilities

AI Adoption Prompts Security Advisory from NSA

April 25, 2024 Nathan Eddy | 2 hours ago 0

Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight

Cradlepoint Adds SASE Platform for 5G Wireless Networks

April 24, 2024 Michael Vizard | Yesterday 0

Cloud Security Cybersecurity Data Privacy Data Security Featured Malware Network Security News Security Boulevard (Original) Social - Facebook Social - X Spotlight Threat Intelligence Threats & Breaches

CoralRaider Group Delivers Three Infostealers via CDN Cache

April 24, 2024 Jeffrey Burt | Yesterday 0

Security Humor

Randall Munroe’s XKCD ‘Pendulum Types’

Randall Munroe’s XKCD ‘Pendulum Types’

Download Free eBook

Managing the AppSec Toolstack

Join the Community

Add your blog to Security Creators Network
Write for Security Boulevard
Bloggers Meetup and Awards
Ask a Question
Email: [email protected]

Useful Links

About
Media Kit
Sponsor Info
Copyright
TOS
DMCA Compliance Statement
Privacy Policy

Related Sites

Techstrong Group
Cloud Native Now
DevOps.com
Digital CxO
Techstrong Research
Techstrong TV
Techstrong.tv Podcast
DevOps Chat
DevOps Dozen
DevOps TV

Powered by Techstrong Group

Copyright © 2024 Techstrong Group Inc. All rights reserved.

Secure Guardrails

Step 1 of 8

12%

Secure Guardrails Definition:

Secure guardrails enforce secure practices within software development workflows.

Does your organization currently implement secure guardrails in the software development process?(Required)

Yes, extensively across all projects

Yes, but only in specific projects or teams

In the process of implementation

No, but planning to in the near future

No, and no plans to implement

What are the biggest challenges you face in implementing secure guardrails within your development processes? (Select all that apply)(Required)

Lack of awareness or understanding

Technical difficulties in integration

Resistance from development teams

Lack of suitable tools

Cost constraints

Other

Other, tell us more:

How effective do you find secure guardrails in preventing security vulnerabilities in your projects? Rate on a scale from 1 (Not effective) to 5 (Highly effective)(Required)

1

2

3

4

5

To what extent are your secure guardrails automated?(Required)

Fully automated

Mostly automated with some manual processes

Equally automated and manual

Mostly manual with some automation

Entirely manual

What features do you prioritize in a secure guardrail solution? (Rank in order of importance)

Ease of integration into existing workflows
Comprehensive coverage of security vulnerabilities
Customizability for specific project needs
Minimal impact on development speed
Actionable insights and recommendations
Support for a wide range of programming languages and frameworks

What are your organization's plans regarding the adoption or enhancement of secure guardrails within the next 12 months?(Required)

Expand the use of secure guardrails to more projects

Enhance the capabilities of existing secure guardrails

Maintain current level of secure guardrail use without changes

Reduce reliance on secure guardrails

No plans related to secure guardrails

What best describes your primary role?(Required)

Security Engineer

DevOps Engineer

Platform Engineer

Security champion on the development team

Software Developer

CISO (or equivalent)

Sr. Management (CEO, CTO, CIO, CPO, VP)

Manager, Director

Other

Δ