QUALYS SECURITY CONFERENCE 2020 Securing the Digital Transformation with DevOps Cloud & Container Security Automation Badri Raghunathan Director of Product Management, Qualys, Inc. Digital Transformation The Changing Role of Security Security selects, builds the security tooling DevOps operationalize the security tooling 4 Qualys Security Conference January 2020 Example Customer Scenario 5 Qualys Security Conference January 2020 Security Challenges in the Cloud Lack of visibility or control on cloud resources Misconfiguration of cloud services Multi cloud environment magnifies security challenges Lack of a unified security toolset/controls for on-prem & cloud workloads 6 Qualys Security Conference January 2020 Securing Your Cloud Deployments IaaS PaaS SaaS EC2 Instance, Azure RDS, Azure SQL Google Suite, Office 365 VM, GCP Instance Database, Elastic Bean Stalk, Containers Cloud Infrastructure S3 Bucket, Security Group, Network Security Group, Storage Blobs, Load Balancers, Firewall Rules 7 Qualys Security Conference January 2020 Cloud Security Securing Cloud Workloads Hardening and Standardizing Vulnerability Management Policy Compliance Application Security • Asset Inventory & • Policy Compliance •Web Application Vulnerability Assessment Scanning (Internal & Perimeter) • File Integrity Monitoring •Web Application Firewall • Prioritization using Threat Protection •API Security* • Indicators of Compromise • Patch Management 9 Qualys Security Conference January 2020 * Roadmap Vulnerability Analysis in CI/CD Blocking vulnerable applications/images entering production AUTOMATED PASS TESTS PRODUCTION USAGE QUALYS DEVELOPERS VULNERABILITY FAIL ANALYZER Supports evaluating – IPs/Hosts, Cloud Instances, and Web Applications 10 Qualys Security Conference January 2020 Rich Visibility with CloudView Visibility into your cloud resources Identify public facing/perimeter resources Resource usage by regions/accounts. View associations to identify the blast radius 11 Qualys Security Conference January 2020