DevSecOps: How IT and Dev Will Finally Stop Fighting

IT and software development, departments that have historically had a somewhat contentious relationship, are on a...

Security Automation for DevOps

Cloud environments undergo dramatic changes during deployments, auto-scaling events, and through natural...

AWS Security Best Practice #10: Watch World-Readable and Listable S3 Bucket Policies

S3 has been around for quite some time. It may be the oldest Service in the ever expanding Web Services provided by...

Cloud Security Requires New Tools and Mindsets

Mainstream security strategies and controls were already struggling to keep up with the rapidly evolving threat...

Security Fundamentals for DevOps Shops

Applying DevOps principles to security operations is not a one-time practice or a stand-alone process — it’s a whole...

Visibility, Actionability, and Security Automation in the Cloud

October is National Cybersecurity Awareness month, and for more than a decade we have used this designation to help...

AWS re:Invent 2015 Event Recap

 The 4th annual AWS re:Invent conference wrapped up last week. Mirroring the success and growth of the AWS...

Latest AWS Releases Drive Cloud Security Innovation

Last week’s AWS re:Invent conference in Las Vegas saw the release of several new AWS services for security. Some of...

AWS Security Best Practice #9: Do Not Allow 0.0.0.0/0 Unless You Mean It

In the last post, John Martinez wrote about how Autoscaling can help an application deployed on AWS survive an attack....

AWS Security Best Practice #8: Use AutoScaling to Dampen DDoS Effects

 We’re switching the series up a little bit and going to pay some attention to the network layer for a couple of...

Not Heading to AWS re:Invent 2015? You’re Missing Out!

As David Linthicum pointed out in a recent article in InfoWord, AWS Re:Invent (October 6-9, 2015,...

Security Teams Lack Visibility Into Business-Critical Cloud Infrastructure

Organizations are increasingly leveraging innovative Security-as-a-Service (SecaaS) tools and implementing automation to...