DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Join the conversation #devseccon

Using open source Automation tools for DevSecOpsJoel DivekarJoel.divekar@gmail.com+91 9920208223

What is DevOpsSec?

Old wine in a new bottle ...

Tools we love to play with

Configuration ManagementVirtualization / ContainersMonitoringSecurityLogging

Configuration Management

PuppetCHEFSALTSTACKCFEngineAnsible...

Ansible, why ?

Get started quicklyAgentlessConnection over OpenSSH / WinRMHuman readable automation languageEasy to learn – YAMLPython inside

Quickly

Just install, and get started $ sudo pip install ansible $ ansible all -i 192.168.1.1, -c local -m ping192.168.1.1 | SUCCESS => { "changed": false, "ping": "pong"}

Ready to use modules

Cloud Modules Clustering ModulesCommands Modules Crypto ModulesDatabase Modules Files ModulesIdentity Modules Inventory ModulesMessaging Modules Monitoring ModulesNetwork Modules Notification ModulesPackaging Modules Remote Management ModulesSource Control Modules Storage ModulesSystem Modules Utilities ModulesWeb Infrastructure Modules Windows Modules

Ready to use cloud modules

amazonazuredigital_oceandockergooglelinodeopenstackrackspacevmware

Virtualization and Containers

KVMOpenStackVMWAREVirtualBoxDockerRocket / rkt...

Monitoring tools

NagiosIgingaMonit...

Security tools

NmapMetasploitWireshark

Logging

SyslogGraylogSyslog-ngLOGalyze

Join the conversation #devseccon

Joel Divekar

Adi.technology Mumbai, India Mob / WhatsApp : +91 9920208223 Skype : joel_divekar@hotmail.comBlog: http://joeldivekar.blogspot.com/ Linkedin : http://www.linkedin.com/in/joeldivekar Presentation : http://www.slideshare.net/JoelDivekar