Mark Nunnikhoven discusses securing serverless applications in the cloud, emphasizing the mapping of data and services used in designs. He outlines a three-month plan to improve code quality and assess third-party service risks, followed by a six-month goal of establishing unified monitoring and automated responses. The session provides practical guidance on enhancing security for serverless architectures.

1. SESSION ID:SESSION ID:
#RSAC
Mark Nunnikhoven
Securing Serverless Applications In The Cloud
CSV-R02
Vice President, Cloud Research
Trend Micro
@marknca

2. #RSAC
2

3. #RSAC
3

4. #RSAC
4

5. #RSAC
5

6. #RSAC
6

7. #RSAC
7

8. #RSAC
8

9. #RSAC
9
Microservices

10. #RSAC
10

11. #RSAC
11

12. #RSAC
12

13. #RSAC
13

14. #RSAC
14

15. #RSAC
15

16. #RSAC
16

17. #RSAC
17

18. #RSAC
18

19. #RSAC
19

20. #RSAC
20

21. #RSAC
21

22. #RSAC
22

23. #RSAC
23

24. #RSAC
24

25. #RSAC
25

26. #RSAC
26

27. #RSAC
27

28. #RSAC
28

29. #RSAC
29

30. #RSAC
30

31. #RSAC
31

32. #RSAC
32

33. #RSAC
33

34. #RSAC
34

35. #RSAC
35

36. #RSAC
36

37. #RSAC
37

38. #RSAC
38

39. #RSAC
39

40. #RSAC
40

41. #RSAC
41

42. #RSAC
42

43. #RSAC
43

44. #RSAC
44

45. #RSAC
45

46. #RSAC
46

47. #RSAC
47

48. #RSAC
48

49. #RSAC
49

50. #RSAC
50

51. #RSAC
51

52. #RSAC
52

53. #RSAC
53

54. #RSAC
54

55. #RSAC
55

56. #RSAC
56

57. #RSAC
57

58. #RSAC
58

59. #RSAC
59

60. #RSAC
60

61. #RSAC
61

62. #RSAC
62

63. #RSAC
63

64. #RSAC
64

65. #RSAC
65

66. #RSAC
66

67. #RSAC
67

68. #RSAC
68

69. #RSAC
69

70. #RSAC
70

71. #RSAC
71

72. #RSAC
72

73. #RSAC
73

74. #RSAC
74

75. #RSAC
75

76. #RSAC
76

77. #RSAC
77

78. #RSAC
78

79. #RSAC
79

80. #RSAC
80

81. #RSAC
81

82. #RSAC
82

83. #RSAC
83

84. #RSAC
84

85. #RSAC
85

86. #RSAC
86

87. #RSAC
87

88. #RSAC
88

89. #RSAC
89

90. #RSAC
90

91. #RSAC
91

92. #RSAC
92

93. #RSAC
93

94. #RSAC
94

95. #RSAC
Here’s How To Apply What You’ve Learned
Today
95
Next week you should:
Map out the data and services used in your serverless designs
Line up those data:service pairings with data sensitivity
Within 3 months you should:
Have a handle on the quality of your code & be working to improve it
Understand the level of risk and trust of your 3rd party services
Within 6 months you should:
Have a unified monitoring event stream in place
Start to create automated responses to specific issues & events

96. #RSAC
96
Mark Nunnikhoven
@marknca
Questions?
Thank you!