Using the Cloud to Improve AppSec

A lot of focus has been placed on securing the cloud, but the cloud can also be used to help secure applications. Find out how the same principles that apply to building cloud scale applications can also be used to deploy test environments in the cloud that support application security testing. Never again fear that your automated security testing, penetration testing, and customer A/B testing will collide. This talk will cover how applications that abide by the 12 Factors (12factor.net/) are easier to test. It will also discuss how the extreme flexibility of cloud resources allows easy separation of different types of application testing, ensuring that security tests can be run without interfering with business objectives.
About the Speaker
Phillip Marlow @wolramp, Lead Agile Systems Engineer, MITRE
Phillip Marlow is a cybersecurity and DevOps engineer. He helps organizations understand how adopting DevOps practices increases their security, not just their delivery speed. Phillip holds several security, cloud, and agile certifications and is pursuing a Master’s Degree in Information Security Engineering at SANS Technology Institute.
SANS Institute Summits at www.sans.org/cyber-security-s... SANS Cloud Security Curriculum, www.sans.org/cloud-security/ SANS Cloud Security on Twitter: @SANSCloudSec
SANS Cloud Security on LinkedIn: / sanscloudsec