It is regularly reported that the number one blocker of cloud (and OpenStack) adoption is the perception that clouds are insecure, hard to protect environments - the reports aren’t wrong!
Things are improving though, Security Project members are working hard to:
-Secure code at the gate (Bandit)
-Secure the API (Syntribos)
-Provide internal PKI for TLS everywhere (Anchor)
-Provide Security Guidance, Notes, Advisories etc
-Encrypt at rest (Leeson, BYOK)
In this talk the current Security Project PTL will explain what the Security Project is doing to improve the security of OpenStack services and allow OpenStack to differentiate in terms of Security.
This presentation will reflect on the progress that the Security Project has made, discuss the future of security technologies in OpenStack and explore how to engage more closely with the community order to accelerate the work we are doing.