13
Join the conversation #devseccon Using open source Automation tools for DevSecOps Joel Divekar [email protected] +91 9920208223

DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Embed Size (px)

Citation preview

Page 1: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Join the conversation #devseccon

Using open source Automation tools for DevSecOpsJoel [email protected]+91 9920208223

Page 2: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

What is DevOpsSec?

Old wine in a new bottle ...

Page 3: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Tools we love to play with

Configuration ManagementVirtualization / ContainersMonitoringSecurityLogging

Page 4: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Configuration Management

PuppetCHEFSALTSTACKCFEngineAnsible...

Page 5: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Ansible, why ?

Get started quicklyAgentlessConnection over OpenSSH / WinRMHuman readable automation languageEasy to learn – YAMLPython inside

Page 6: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Quickly

Just install, and get started $ sudo pip install ansible $ ansible all -i 192.168.1.1, -c local -m ping192.168.1.1 | SUCCESS => { "changed": false, "ping": "pong"}

Page 7: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Ready to use modules

Cloud Modules Clustering ModulesCommands Modules Crypto ModulesDatabase Modules Files ModulesIdentity Modules Inventory ModulesMessaging Modules Monitoring ModulesNetwork Modules Notification ModulesPackaging Modules Remote Management ModulesSource Control Modules Storage ModulesSystem Modules Utilities ModulesWeb Infrastructure Modules Windows Modules

Page 8: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Ready to use cloud modules

amazonazuredigital_oceandockergooglelinodeopenstackrackspacevmware

Page 9: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Virtualization and Containers

KVMOpenStackVMWAREVirtualBoxDockerRocket / rkt...

Page 10: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Monitoring tools

NagiosIgingaMonit...

Page 11: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Security tools

NmapMetasploitWireshark

Page 12: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Logging

SyslogGraylogSyslog-ngLOGalyze

Page 13: DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

Join the conversation #devseccon

Joel Divekar

Adi.technology Mumbai, India Mob / WhatsApp : +91 9920208223 Skype : [email protected]: http://joeldivekar.blogspot.com/ Linkedin : http://www.linkedin.com/in/joeldivekar Presentation : http://www.slideshare.net/JoelDivekar