Kubernetes, containers, and serverless have been part of the “new stack” that everyone talks about but hasn’t quite yet fully harnessed. And, security best practices for these are still being formulated. That’s where Lacework’s CEO Dan Hubbard is looking to change all of that through Lacework’s end-to-end security and compliance platform for multi-cloud and new stack environments. Dan is a security and tech OG, and a fountain of security knowledge. Here are the best practices he recommends for securing the new stack.
What You’ll Learn
Before he became CEO at Lacework, Dan started his career building the network at one of the first ISPs in Canada. Over the years, he helped build Websense (and a new web security category) and take it public. Afterward, he became CTO at OpenDNS and had a successful exit with Cisco. Having been in security for over 30 years, Dan shares:
- What are the most commonly missed things around securing containers, Kubernetes, and other parts of the “new stack”.
- How vulnerable Kubernetes is when you think about it.
- How to secure serverless technology like Lambda.
- How to prep for and pass security audits when you’re using “new stack” technology.
- Security considerations for multi-cloud environments.
- Other cloud security best practices.
Section Timestamps
[03:53] What are the most commonly missed things around securing containers, Kubernetes, and other parts of the “new stack”.
[06:10] How vulnerable Kubernetes is when you think about it.
[09:55] How to secure serverless technology like Lambda.
[12:39] How to prep for and pass security audits when you’re using “new stack” technology.
[16:59] Security considerations for multi-cloud environments.
[23:00] Other cloud security best practices.
About The Security Demystified Show
Tugboat Logic presents The Security Demystified Show: a podcast to help you become more secure and tame the dark (and not-so-thrilling) art of compliance. Every other week, check in with Tugboat Community Manager Cheryl, and security experts and practitioners to find out all of the “secrets” and myths surrounding security and compliance so you can apply what’s worked.