Building Securable Infrastructure: Open-Source Private Clouds

Using an open-sourced stack from bottom to top, this presentation will discuss the practical challenges alongside the security opportunities of standing up a private cloud infrastructure. Looking beyond the obvious upside of programmatically definable systems, private clouds present a new platform for security controls that are generally unattainable in traditional infrastructure models. Building on this concept, this talk will present a few interesting security ideas that are currently under development and some that could be the subject of future research.

Pravir Chandra is a veteran in the security space. Currently as CTO Security Architect of Bloomberg, he drives proactive security initiatives that demonstrate concrete value for the firm. Prior to this, Pravir was Director of Strategic Services at HP/Fortify where he led software security assurance programs for Fortune 500 clients in a variety of verticals. As lead designer and author of the Open Software Assurance Maturity Model (OpenSAMM), he is responsible for standing up the most comprehensive and measurably effective programs in existence today. Pravir has written many articles, white papers, and books and is routinely invited to speak at businesses and conferences worldwide.