WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Oct 12, 2020

You can’t hack what you can’t see

Reto Kaeser

Traditional boundary firewalls are obsolete. Since 80% of cloud traffic is internal, perimeter breaches are devastating. Harness microsegmentation and zero trust to make workloads invisible to attackers.

Pause
Mute Enter Fullscreen
#1 about 3 min

Evolving from siloed operations to DevOps culture

Culture plays a massive role in successful DevOps adoption beyond tooling.

#2 about 2 min

Integrating security into the DevOps lifecycle

Left-shifting security creates DevSecOps to protect modern remote workloads.

#3 about 4 min

Identifying abuse cases during requirements gathering

Addressing potential attack vectors early hardens architecture before design begins.

#4 about 2 min

Security challenges of workload abstraction in cloud environments

Containerizing and moving workloads introduces fine-grained connection risks.

#5 about 3 min

Classifying and anonymizing data during system design

Treating restricted data carefully and avoiding unnecessary context reduces exposure risk.

#6 about 4 min

Managing vulnerabilities in open-source libraries early

Catching vulnerable component versions using pre-commit hooks saves downstream remediation time.

#7 about 2 min

Leveraging continuous penetration testing via red teams

Feeding abuse cases directly to testers improves ongoing security posture.

#8 about 3 min

Protecting internal east-west traffic within networks

Shifting focus from external firewalls to safeguarding internal communications between services.

#9 about 2 min

Securing individual workloads systematically at the application layer

Moving security policies away from infrastructure to surround the data directly.

#10 about 2 min

Implementing logical firewalls to enforce microsegmentation

Defining communication restrictions workload-by-workload limits the radius of potential breaches.

#11 about 2 min

Adopting zero-trust principles and whitelisting intentions

Only allowing explicitly approved workloads to access specific services hardens environments.

#12 about 2 min

Automating firewall policies using security as code

Tagging workloads natively in code speeds up policy generation and enforcement.

#13 about 3 min

Reaping the benefits of embedded cloud workload security

Letting protection follow workloads automatically unlocks true agility and scalability.

#14 about 2 min

Staying paranoid to ensure continuous software security

Maintaining a healthy skepticism helps prioritize secure delivery in an increasingly dangerous computing landscape.

Matching moments

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

1:25 min

Expanding DevOps principles to security and machine learning domains

Sonal Patil · LIVE

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

1:22 min

Discovering security vulnerabilities outside primary application code

Farshad Abasi Farshad Abasi · World Congress 2026 North America

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
6 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
13 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
27 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
about 1 month ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

Multi-Cloud Isn't a Project. It's a Side Effect.

  • Antonio Mendoza Pérez

    Temporal Technologies

    Staff Developer Success Engineer

  • Gaurav Thadani

    Temporal

    Staff Developer Success Engineer

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Related videos

DevSecOps culture thumbnail
16:00
World Congress 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

DevSecOps: Security in DevOps thumbnail
33:20
LIVE • about 6 years ago

DevSecOps: Security in DevOps

Aarno Aukia

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • about 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

Why Security-First Development Helps You Ship Better Software Faster thumbnail
22:18
World Congress 2025 • about 1 year ago

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.