Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Storing Secrets in the Cloud and Data Center: Strategies and Tools

OWASP Foundation via YouTube

Overview

Explore strategies for securely storing and managing secrets in cloud and data center environments through this 48-minute conference talk from AppSecUSA 2015. Delve into the challenges of credential storage, examining various tools, technologies, and approaches for improving secret management throughout development, testing, and deployment. Learn about orchestrator decryption, application decryption, operational and organizational compartmentalization, SCM encryption tools, and secrets-as-a-service solutions. Gain insights into the advantages and disadvantages of different options to help determine the most appropriate solutions for your applications and organizations, covering both data center and cloud-based deployments with a focus on open-source tools for common enterprise platforms.

Syllabus

Intro
INTRODUCTION
WHAT'S THE PROBLEM?
WHAT GOOD LOOKS LIKE
WHAT DOES GOOD LOOK LIKE
THE FIRST TURTLE
STRATEGIES
ORCHESTRATOR DECRYPTION
APPLICATION DECRYPTION
OPERATIONAL COMPARTMENTALIZATION
ORGANIZATIONAL COMPARTMENTALIZATION
SCM ENCRYPTION TOOLS
ORCHESTRATION ENCRYPTION TOOLS
THE SECOND TURTLE
SECRETS SERVICES
SECRETS AS A SERVICE
THE THIRD TURTLE
THE BIG PICTURE
IN CLOSING

Taught by

OWASP Foundation

Reviews

Start your review of Storing Secrets in the Cloud and Data Center: Strategies and Tools

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.