Mapping CI/CD Attack Surfaces - Strategies and Insights

Overview

Explore attack vector mapping in CI/CD systems through this 40-minute conference talk from GOTO Copenhagen 2023. Gain insights into problem areas, common tripping points, and blind spots in CI/CD security. Learn actionable strategies and tools for improving security, and get a glimpse into the future of CI/CD ecosystems and their evolving approach to reducing attack surfaces. Dive deep into topics such as the definition of CI/CD, attack surface concepts, real-world examples, and practical applications of attack surface mapping. Understand the true threats facing CI/CD systems and how the future may shape security practices in this domain.

Syllabus

Intro
What is CI/CD?
What is an attack surface?
Examples
Application of attack surface mapping
The rest
The real threat
The future
Outro

Taught by

GOTO Conferences

Reviews

Start your review of Mapping CI/CD Attack Surfaces - Strategies and Insights

Taught by

Introduction to DevSecOps

Monitoring Attack Surface and Integrating Security into DevOps Pipelines

Monitoring Application Attack Surface and Integrating Security into DevOps Pipelines

The Dark Playground of CI/CD - Attack Delivery by GitHub Actions

Attack Surface Reduction Strategies for Enhanced Security

Securing CI/CD Runners Through eBPF Agent

Never Stop Learning.