WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Oct 12, 2020

You can’t hack what you can’t see

Reto Kaeser

Traditional boundary firewalls are obsolete. Since 80% of cloud traffic is internal, perimeter breaches are devastating. Harness microsegmentation and zero trust to make workloads invisible to attackers.

Pause
Mute Enter Fullscreen
#1 about 3 min

Evolving from siloed operations to DevOps culture

Culture plays a massive role in successful DevOps adoption beyond tooling.

#2 about 2 min

Integrating security into the DevOps lifecycle

Left-shifting security creates DevSecOps to protect modern remote workloads.

#3 about 4 min

Identifying abuse cases during requirements gathering

Addressing potential attack vectors early hardens architecture before design begins.

#4 about 2 min

Security challenges of workload abstraction in cloud environments

Containerizing and moving workloads introduces fine-grained connection risks.

#5 about 3 min

Classifying and anonymizing data during system design

Treating restricted data carefully and avoiding unnecessary context reduces exposure risk.

#6 about 4 min

Managing vulnerabilities in open-source libraries early

Catching vulnerable component versions using pre-commit hooks saves downstream remediation time.

#7 about 2 min

Leveraging continuous penetration testing via red teams

Feeding abuse cases directly to testers improves ongoing security posture.

#8 about 3 min

Protecting internal east-west traffic within networks

Shifting focus from external firewalls to safeguarding internal communications between services.

#9 about 2 min

Securing individual workloads systematically at the application layer

Moving security policies away from infrastructure to surround the data directly.

#10 about 2 min

Implementing logical firewalls to enforce microsegmentation

Defining communication restrictions workload-by-workload limits the radius of potential breaches.

#11 about 2 min

Adopting zero-trust principles and whitelisting intentions

Only allowing explicitly approved workloads to access specific services hardens environments.

#12 about 2 min

Automating firewall policies using security as code

Tagging workloads natively in code speeds up policy generation and enforcement.

#13 about 3 min

Reaping the benefits of embedded cloud workload security

Letting protection follow workloads automatically unlocks true agility and scalability.

#14 about 2 min

Staying paranoid to ensure continuous software security

Maintaining a healthy skepticism helps prioritize secure delivery in an increasingly dangerous computing landscape.

Matching moments

6:32 min

Embracing DevSecOps and automating the software development lifecycle

Mathias Tausig · LIVE

2:09 min

Shifting security left using the DevSecOps approach

Aarno Aukia · LIVE

5:25 min

Shifting left and creating internal security champion programs

Vandana Verma Sehgal · LIVE

1:53 min

Transitioning toward DevSecOps with dynamic scanning and secrets management

Christoph Ruggenthaler · LIVE

2:39 min

Shifting security testing focus toward critical application logic problems

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · World Congress 2026 Europe

2:07 min

Integrating security practices for devsecops adoption

Nevelina Aleksandrova · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
8 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
16 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
17 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
22 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
24 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
29 days ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 24, 2026 · 14:50–15:20

Stage 1

The Era of Machine-Driven Defense is Here: Headless Security

Loris Degioanni

Founder & CTO of Sysdig

Loris Degioanni
Open session

World Congress 2026 North America

September 25, 2026 · 15:00–17:00

Stage 12

Secure development from pull request to production with GitHub

Sam Jarvinen

Senior Solutions Engineer, GitHub

Sam Jarvinen
Open session

World Congress 2026 North America

September 24, 2026 · 16:00–18:00

Stage 13

Practical Threat Modeling for Software Developers

Mudassir Syed

Lead Security Software Engineer

Mudassir Syed
Open session

World Congress 2026 North America

September 25, 2026 · 14:50–15:20

Outdoor Stage

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 25, 2026 · 15:30–16:00

Mainstage

One Boundary for the Agentic Era

Mark Lechner

Chief Information Security Officer of Docker

Mark Lechner
Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate at Docker

Ajeet Raina

Related videos

DevSecOps culture thumbnail
16:00
World Congress 2023 • almost 3 years ago

DevSecOps culture

Ali Yazdani

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

DevSecOps: Security in DevOps thumbnail
33:20
LIVE • almost 6 years ago

DevSecOps: Security in DevOps

Aarno Aukia

Securing Your Web Application Pipeline From Intruders thumbnail
44:30
LIVE • almost 6 years ago

Securing Your Web Application Pipeline From Intruders

Milecia Mcgregor

Simple Steps to Kill DevSec without Giving Up on Security thumbnail
21:53
World Congress 2025 • about 1 year ago

Simple Steps to Kill DevSec without Giving Up on Security

Isaac Evans

Why Security-First Development Helps You Ship Better Software Faster thumbnail
22:18
World Congress 2025 • about 1 year ago

Why Security-First Development Helps You Ship Better Software Faster

Michael Wildpaner

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.