Talk: The challenge of designing secure cloud-services
Providing reasonably secure cloud infrastructure at affordable costs and without commercial license lock-in, is one of the primary goals of the Austrian Open Cloud Community in 2023.
Specifically for Kubernetes (k8s) as a service, you have to take into account the reality of academia when it comes to skill levels, mindsets and people-power of both admins and users.
From this perspective, Constanze explains how they layered a Defense-in-Depth approach, employed time-based security and how the design was tested. A comparison with current (private) sector best-practice will show which parts make sense in our setting.
Comparing blamelessly with similar (academic) projects that were built without a Security-first mindset show how much improvement can be achieved by the consistent application of “shifting-left” and what the most effective measures are that we can take in such a low-budget environment.
17:40 Expert Talk
19:30 Community Topics
About the speaker
Constanze Roedig earned her doctorate at the Albert Einstein Institute (Max Planck) in relativistic radiation hydrodynamics and continued studying black holes at Johns Hopkins as a postdoc. She spent 8 years in the private sector as a software architect to enable companies to transition their internal systems towards transparent, performant and scalable designs. She views defensibility/security as a key pillar of good architecture and her research interest lies in the verifiability of (security)-guarantees in evolving systems.
The MeetUp is free for all women+ & women+ only.
Please note that this is an event for women-only event that intends an inclusive definition of women. We are welcoming and respectful of women, including amab transgender persons and those that are nonbinary, gender non-conforming, and any others who identify as a woman in a way that is significant to them.
About the event series
This meetup group is founded by female experts from SBA Research, TU Wien and University of Vienna (Members of VISP Vienna Security Privacy Research Cluster Vienna).