AtlSecCon 2022

Despite the many cybersecurity innovations over the past decade, misconfiguration and misalignment remain treacherous security challenges. The complexity of cyberattacks and the complexity of cybersecurity solutions have grown, as have the dynamics, distribution, decoupling and scale of the systems we are protecting. A central barrier to improvement is that conventional security portfolios operate as protective systems, layered on top of the hosting platform, largely oblivious to how systems should intentionally behave and what authoritative guardrails must be respected.  

This session will dive into the limits of this conventional approach to security, contrasting it with better aligned, more continuous and far more effective, platform-enabled security information architecture. We will consider ideas such as the intrinsic security potential of cloud-native applications, Zero Trust security architecture/policy, and DevSecOps, establishing that individually, none offer a silver bullet to modern threats. We will also discuss how these innovations can work together to improve the efficiency and effectiveness of the entire security portfolio and why the platform is where opportunity for both transformative operational integration and the opportunity for better leveraging standardization resides.