Clik here to view.
Extending the Concept: A Security API for Cloud Stacks
Please See the follow-on to this post: http://www.rationalsurvivability.com/blog/?p=1276 Update: Wow, did this ever stir up an amazing set of commentary on Twitter. No hash tag, unfortunately, but...
View ArticleClik here to view.
Follow-On: The Audit, Assertion, Assessment, and Assurance API (A6)
Update 2/1/10: The A6 effort is in full-swing. You can find out more about it at the Google Groups here. A few weeks ago I penned a blog discussing an idea I presented at a recent Public Sector Cloud...
View ArticleClik here to view.
Good Interview/Resource Regarding CloudAudit from SearchCloudComputing…
The guys from SearchCloudComputing gave me a ring and we chatted about CloudAudit. The interview that follows is a distillation of that discussion and goes a long way toward answering many of the...
View ArticleClik here to view.
Incomplete Thought: The DevOps Disconnect
DevOps — what it means and how it applies — is a fascinating topic that inspires all sorts of interesting reactions from people, polarized by their interpretation of what this term really means. At...
View ArticleClik here to view.
Revisiting Virtualization & Cloud Stack Security – Back to the Future (Baked...
[Like a good w[h]ine, this post goes especially well with a couple of other courses such as Hack The Stack Or Go On a Bender With a Vendor?, Incomplete Thought: Why Security Doesn’t Scale…Yet, What’s...
View ArticleClik here to view.
CloudPassage & Why Guest-Based Footprints Matter Even More For Cloud Security
Image via Wikipedia Every day for the last week or so after their launch, I’ve been asked left and right about whether I’d spoken to CloudPassage and what my opinion was of their offering. In full...
View ArticleClik here to view.
Budget Icebergs, Fiscal Anchors and a Boat (Fed)RAMP to Nowhere?
Image via Wikipedia It’s often said that in order to make money, you have to spend money; invest in order to succeed. However, when faced with the realities of budget shortfalls and unsavory economic...
View ArticleClik here to view.
Clouds, WAFs, Messaging Buses and API Security…
Image via Wikipedia In my Commode Computing talk, I highlighted the need for security automation through the enablement of APIs. APIs are centric in architectural requirements for the provisioning,...
View ArticleClik here to view.
(Physical, Virtualized and Cloud) Security Automation – An API Example
The premise of my Commode Computing presentation was to reinforce that we desperately require automation in all aspects of “security” and should work toward leveraging APIs in stacks and products to...
View Article
