Review the challenges, tools, and techniques of applications security in premise and publics clouds. Who Am I? • Software Engineer based in Chile • OWASP Viña del mar Chapter Leader • Recurrent Speaker on Application Security conferences • Head of Software Development https://www.appsec.cl anc Cloud Security Alliance Fellow

1. Secure you part of the deal:
Security in Clouds and OWASP.
Share Responsibility: Using Owasp
1

2. Agenda
• Clouds
• Type of Clouds
• Model of Services
• Share Responsibility: Cloud
• Share Responsibility: Owasp
• Defense also is creative
2

3. Secure you part of the deal:
Security in Clouds and OWASP.
Share Responsibility: Using Owasp
3

4. Cloud
Cloud computing is an on-demand service that provides virtual ITsevices.
4

5. Categories of cloud computing
Infrastructure as a Service (IaaS):
Platform as a Service (PaaS):
Software as a Service (SaaS):
5

6. Models of Services
6
Cloud Hybrid On-premise

7. Secure you part of the deal:
Security in Clouds and OWASP.
Share Responsibility: Using Owasp
7
Share Responsibility: Cloud Security

8. Share Responsibility
security model is based on a shared contract –responsibility:
• Is responsible for the security of the hardware and operating system
• The user is responsible for the security of the apps that are deployed in
the cloud.

9. 9
Clouds security Tools

10. AWS migration tools
Show the data about
configuration
Transfer petabyte-
scale data
Make a direct connection
between your network and an
ability zone
10

11. 11
AWS security

12. Secure you part of the deal:
Security in Clouds and OWASP.
Share Responsibility: Using Owasp
12

13. Security TOP 3 Threat

14. 14
Security Spending
DAST
SAST

15. 15
Top ten security skills required
DAST
SAST

16. 16
Implementing Secure Coding
Training Design
Develop-
ment
Validation Maintenance

17. Checklist for Secure Token

18. Secure you part of the deal:
Security in Clouds and OWASP.
Share Responsibility: Using Owasp
18
The defense also is creative

19. Methodology
Ciclo de vida de MS Security Development (MS SDL): Uno de los primeros de su tipo, MS SDL fue
propuesto por Microsoft de acuerdo a las fases de un SDLC

20. Anti xss.Net
Tools in the IDE

21. Self Sing Certificate

22. Contact me!
Email Address:Ing.Arreaza@gmail.com
WebSite:www.seguridadaplicativos.com
22

23. Secure you part of the deal:
Security in Clouds and OWASP.
Share Responsibility: Using Owasp
T H A N K Y O U !
23
Securing your code you also
Secure your Clouds