DevSecOps for you Full Stack
•
0 likes•427 views
The document discusses DevSecOps and how it adds security as a fundamental part of the development process. It introduces Polyverse's polymorphing technology which immunizes software stacks through continuous diversity, creating unique versions of Linux without impacting performance. The polymorphing build farm compiles source code in multiple ways to generate diverse binaries, providing benefits like reduced patching time and protection against zero-days.
Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to DevSecOps for you Full Stack
Similar to DevSecOps for you Full Stack (20)
Recently uploaded
Recently uploaded (20)
DevSecOps for you Full Stack
- 1. www.polyverse.comwww.polyverse.comwww.polyverse.com DevSecOps for Your Full Stack Stop attacks before they start. Ron Nixon VP Global Defense and Government ronald.nixon@polyverse.com
- 2. 22 What is DevSecOps? DevOps is combination people, processes and technologies whose shared purpose is the rapid delivery of applications and/or services supported with constant feedback from user/customers. DevSecOps add security as a fundamental continuous part of the entire process. SEC SEC
- 3. 33 The Layers vs. The Process
- 4. 44 Example of a DevSecOps Technology Stack
- 6. 66 Today – all computer operating systems are clones So when one is compromised. All are vulnerable.
- 7. 77 Polyverse Polymorphing immunizes your entire software stack through continuous diversity 100111101 010010110 011001101 010010100 011010101 101001110 010010101 100001110 011110010 010010110 011101101 100010010 100111101 101100010 011101101 100111101 010010100 101010010 100011101 011110010 101010010 100111101 011110110 011101101 101100010 011101101 010010110 101010010 001010110 011101101 100001111 010010110 011101101 010010110 011101101 001110010 100001101 010010110 011101101 101010010 100111101 010010110 011101001 100111101 010110110 011101101
- 8. 88 Polymorphing creates unique versions of Linux No change to performance, processes or interoperability
- 9. 99 Polymorphing creates binary diversity void victim_function(size_t x) { if (x < array1_size) { temp &= array2[array1[x] * 512]; } } .cfi_startproc pushq %rbp .cfi_def_cfa_offset 16 .cfi_offset 6, -16 movq %rsp, %rbp .cfi_def_cfa_register 6 movq %rdi, -8(%rbp) movl array1_size(%rip), %eax movl %eax, %eax cmpq -8(%rbp), %rax jbe .L3 movq -8(%rbp), %rax addq $array1, %rax movzbl (%rax), %eax movzbl %al, %eax sall $9, %eax cltq movzbl array2(%rax), %edx movzbl temp(%rip), %eax andl %edx, %eax movb %al, temp(%rip) .cfi_startproc movl array1_size(%rip), %eax cmpq %rdi, %rax jbe .L1 movzbl array1(%rdi), %eax sall $9, %eax cltq movzbl array2(%rax), %eax andb %al, temp(%rip) .L1: rep ret .cfi_endproc .LFE4882: .size victim_function, .- victim_function .section .text.unlikely .LCOLDE0: .text .LHOTE0: .section .text.unlikely .LCOLDB1: .text .cfi_startproc jmp victim_function_isomorph .cfi_endproc .cfi_startproc movl array1_size(%rip), %ebx cmpq %rdi, %rax jbe .L1 movzbl array1(%rdi), %ebx sall $9, %ebx cltq movzbl array2(%rax), %ebx andb %al, temp(%rip) .L1: rep ret .cfi_endproc Same source code goes through the build farm and compiles in multiple different ways to create unique versions of the OS
- 11. 1111 Polymorphing - Key Benefits PATCHING TIME PROTECTION COST REDUCTION • 40% time savings through optimization of patching regime • 30% time savings in system configuration • Staff Retention due to more predictable hours • Protects against zero day vulnerabilities • Brand damage due to security breaches • Customer Loss due to negative PR • Due to time savings and reduction in over-time and out of hours pay • Reduction in downtime due to security breaches or security patching • Financial damages
- 12. 1212 Build Farm – Key Benefits CONTROL VISIBILITY MANAGEABILITY • Custom Configuration: Create your own hardened and secured Linux distribution • Defends unpatched and legacy systems • Point in Time Cache: Roll back and rebuild from any point in time • Complete software supply chain integrity: kernel to application • Visibility of your entire Linux estate • No more need for after the fact auditing • Workforce Multiplier: Secure more systems with less • Deploy and manage at scale • No runtime or performance impact
- 14. 1414 Example of a DevSecOps Technology Stack
- 15. 1515 Build Farm: DevSecOps for the full app stack
- 16. 1616 Any Questions? Visit our website: Polyverse.com or email me Ronald.Nixon@Polyverse.com