Security Processes and Culture, with Molly Crowther (Ep. 96)

March 5, 2018 Michael Coté

Security is more about finding holes and devising patches. For one, once you find those holes and have a patch, you have to make sure everyone not only knows about them, but applies them. We talk about how Pivotal is doing this both inside Pivotal and with our customers, with Molly Crowther. Also, we talk about tactics for getting your developers more security conscious, in a way that both is useful and doesn't spook them off. As always, we also cover some recent news and discuss the merits of dog licks.

Subscribe, follow, feedback

Check us out in SoundCloud, subscribe to the feed directly, or in iTunes to have it automatically downloaded for you.
Twitter: @cote, @rseroter, and @mcrowther.
Feedback: podcast@pivotal.io

News

Microsoft’s Guthrie claims Azure is seeing blockchain momentum, but that’s not moving the cloud needle any time soon. Let’s separate hype from reality. Current status: nothingburger.
Dropbox saved almost $75 million over two years by building its own tech infrastructure. It doesn’t mean that you should do it too.
New option for local Cloud Foundry development. It’s early days, but cfdev is here.
Pivotal.io refreshed. New messages, simple product page.
Jared's white paper overview, has that security & compliance (inc. PCI stuff, I think), value-stream maps, even charge-backs!

Molly on Security

Molly's website.
Presentation: "Healthy Agile Product Security."

Presentation: "Advanced Vulnerability Management in Cloud Foundry."

About the Author

Michael Coté works on the advocates team for VMware Tanzu. See @cote for more.
More Content by Michael Coté

Using VMware’s Harbor with PKS (and Why Kubernetes Needs a Container Registry)

Container registries add important security features to Kubernetes. This post details how Harbor, part of P...

Baked-in Platform Security Targets Pathways to Exploitation

How Synchrony Financial adopted Pivotal Cloud Foundry and reshaped how they approach product security.Synch...

Security Processes and Culture, with Molly Crowther (Ep. 96)

Subscribe, follow, feedback

News

Molly on Security

About the Author

Previous

Next

Security Processes and Culture, with Molly Crowther (Ep. 96)

Subscribe, follow, feedback

News

Molly on Security

About the Author

Previous

Next

Related content in this Stream

Perimeter security isn't sufficient for today's cloud native environments and applications. An integrated and continuous approach is required. VMware's Tanzu and Aria products enable this approach.

Your mission is to secure the vast tracts of land of the cloud native security landscape. Where do you even start?!? It would be preposterous to cover that whole topic in a single session, but we can

We talk about getting PCI compliance into Kubernetes, and other security think in the cloud native world. Securing Tanzu Application Service and Tanzu Application Platform. David Zendzian talks...

We talk about getting PCI compliance into Kubernetes, and other security think in the cloud native world. Securing Tanzu Application Service and Tanzu Application Platform. David Zendzian talks with C

Supply chain attacks are more prevalent than ever. Here are the cloud native security topics experts were focused on at CloudNativeSecurityCon 2023.

Watch a customer panel on cloud native security with Jenny Zhang (Mastercard), Thomas Fredell (Merill Corp.), Kurt Glore (Express Scripts), and Thomas Squeo (West Corp.). Moderated by Justin Smith, Ch

Banks of all sizes are modernizing how they do IT and software development. This blog series explores how banks use Pivotal Cloud Foundry to secure backing services for apps.

The CredHub Service Broker is now a beta. It's a service broker that helps developers secure off-platform service credentials. We examine the tile from the enterprise architect perspective.

Pivotal released the CredHub Service Broker as a beta. It's a service broker that helps developers secure off-platform service credentials with CredHub. Read about the new tile here.

Ensuring Platform Security with Windows Bosh Add-ons and Runtime-Config at Boeing - James Coppock & Sheryl Maris, Boeing We did it! InfoSec said “Not a chance you’re deploying Ubuntu and Windows on P

Banks of all sizes are modernizing how they do IT and software development. This blog series explores how banks use Pivotal Cloud Foundry to secure their cloud-native applications.

PCF 2.1 introduces a new capability that enables multiple development teams working on separate microservices to access the same backing services while maintaining robust security and access controls.

Container registries add important security features to Kubernetes. This post details how Harbor, part of Pivotal Container Service, helps secure Docker images in PKS deployments.

How Synchrony Financial adopted Pivotal Cloud Foundry and reshaped how they approach product security.Synchrony Financial isn’t a new kid on the block. The company, which specializes in private...

Pivotal recently published several new whitepapers: The Auditor's Guide to PCF, Security & Compliance for PCF, and Chargebacks & Showbacks in PCF. This post review the highlights of each paper.

Steeltoe is a toolkit to help .NET developers build apps for Cloud Foundry using established microservices patterns. This post reviews important updates & new features in the project's v2.0 release.