Episode 14: DevOps Secret Management

Episode 14 January 14, 2020 00:30:45
Episode 14: DevOps Secret Management
SilverLining IL
Episode 14: DevOps Secret Management

Jan 14 2020 | 00:30:45

/

Hosted By

Moshe Ferber Ariel Munafo

Show Notes

Attendees

Guest: Oded Hareven

Guest title:  Founder & CEO

Company:  A-Key-Less

Abstract

Application Secret management is becoming one of the biggest challenges for application security. With cloud, CI/CD and micro services architecture we discover that we are using a growing number of encryption keys, API keys, SSH keys tokens and connection strings. In this episode we talk with Oded HarEven, Founder at A-Key-Less about the challenges of secret management and the way to build secure secret management solution.

Timing

0:00

Intro and introducing our guest

1:40

Application secret management  - defining what secret is, and what is secret management

6.00 

Challenges with encryption keys 

9:47  

How to handle application secret management and encryption keys - requirements and best practices

12.25

Zero trust in key management - what does it mean and how to implement it

20:10

The process of integrating keys with cloud platform

25:35

A-Key-Less state of the market approach

27.35

Summary and conclusions

Other Episodes

Episode 57

January 25, 2023 00:27:38
Episode Cover

SilverLining Episode 57: How CISO’s should utilize cyber security startups

Guest: Shahar Geiger Maor Guest Title:  CISO at DarioHealth Language: English   Abstract Many of the CISOs are often approached by early stage startups asking...

Listen

Episode 4

July 09, 2019 00:39:27
Episode Cover

Episode 4: Kubernetes On Steroids

Attendees Guest: Demi Ben Ari Guest title: CTO Company: Panorays Abstract K8 is rapidly becoming the leading orchestration tool and infrastructure for many companies...

Listen

Episode 39

June 23, 2021 00:29:08
Episode Cover

SilverLining Episode 39: Securing API Services

Attendees Guest: Oz Avenstein Guest Title: Founder & CEO @ Avensec - Cloud & Application Security Topic: Securing API Services   Abstract The applicative infrastructure...

Listen