bug bounties and devops security

8
Bug Bounties & DevOps Security www.crowdcurity.com

Upload: crowdcurity

Post on 18-Nov-2014

304 views

Category:

Technology


0 download

DESCRIPTION

A short slideshare on how bug bounty programs can bring continuous security testing to a DevOps environment.

TRANSCRIPT

Page 1: Bug Bounties and DevOps Security

Bug Bounties &

DevOps Security

www.crowdcurity.com

Page 2: Bug Bounties and DevOps Security

CrowdCurity

”If you are always pushing new code aren’t you

potentially introducing new vulnerabilities?”

Page 3: Bug Bounties and DevOps Security

CrowdCurity

YES

Page 4: Bug Bounties and DevOps Security

CrowdCurity

But security and DevOps can work together!

Nick  Galbreath  (former  Etsy)  Integra9ng  Informa9on  Security  Into  DevOps      James  D.  Brown  Mythbus9ng:  DevOps  and  Security    

Page 5: Bug Bounties and DevOps Security

CrowdCurity

Bug Bounty?

Bug Bounty Program

$  -­‐  Rewards  

Bug  Reports  

Security testers Online Business

Open invite to security testers from around the world

Page 6: Bug Bounties and DevOps Security

Benefits of a Bug Bounty Program

Mirrors the threat Cost-effective Scaleable

CrowdCurity

…and it can provide continuous security testing for DevOps

Page 7: Bug Bounties and DevOps Security

CrowdCurity

The big brands already do it

Page 8: Bug Bounties and DevOps Security

www.crowdcurity.com