Insecure Transit - Microservice Security

Explore a comprehensive examination of microservice security challenges and solutions in this conference talk. Delve into the technical aspects of securing microservice architectures, including protecting information flow across networks and maintaining security levels comparable to monolithic systems. Learn about key security challenges specific to microservices and discover approaches to address these issues. Gain insights into advanced security concepts such as secret stores, time-limited credentials, improved backup strategies, confused deputy problems, JWT tokens, and service meshes. Understand the state-of-the-art techniques for building secure microservice architectures, covering topics like transport security, certificate management, service mesh implementation, and version drift management. Examine real-world security breaches, password best practices, and the importance of patch hygiene in microservice environments. Acquire valuable knowledge on assessing security risks, implementing defense-in-depth strategies, and addressing the unique security concerns that arise in distributed systems.