DevSecCon Asia 2017 Joel Divekar: Using Open Source Automation tools for DevSecOps

1. Join the conversation #devseccon
Using open source
Automation tools for
DevSecOps
Joel Divekar
Joel.divekar@gmail.com
+91 9920208223

2. What is DevOpsSec?
Old wine in a new bottle ...

3. Tools we love to play with
Configuration Management
Virtualization / Containers
Monitoring
Security
Logging

4. Configuration Management
Puppet
CHEF
SALTSTACK
CFEngine
Ansible
...

5. Ansible, why ?
Get started quickly
Agentless
Connection over OpenSSH / WinRM
Human readable automation language
Easy to learn – YAML
Python inside

6. Quickly
Just install, and get started
$ sudo pip install ansible
$ ansible all -i 192.168.1.1, -c local -m ping
192.168.1.1 | SUCCESS => {
"changed": false,
"ping": "pong"
}

7. Ready to use modules
Cloud Modules Clustering Modules
Commands Modules Crypto Modules
Database Modules Files Modules
Identity Modules Inventory Modules
Messaging Modules Monitoring Modules
Network Modules Notification Modules
Packaging Modules Remote Management Modules
Source Control Modules Storage Modules
System Modules Utilities Modules
Web Infrastructure Modules Windows Modules

8. Ready to use cloud modules
amazon
azure
digital_ocean
docker
google
linode
openstack
rackspace
vmware

9. Virtualization and Containers
KVM
OpenStack
VMWARE
VirtualBox
Docker
Rocket / rkt
...

10. Monitoring tools
Nagios
Iginga
Monit
...

11. Security tools
Nmap
Metasploit
Wireshark

12. Logging
Syslog
Graylog
Syslog-ng
LOGalyze

13. Join the conversation #devseccon
Joel Divekar
Adi.technology
Mumbai, India
Mob / WhatsApp : +91 9920208223
Skype : joel_divekar@hotmail.com
Blog: http://joeldivekar.blogspot.com/
Linkedin : http://www.linkedin.com/in/joeldivekar
Presentation : http://www.slideshare.net/JoelDivekar