Cloud Native Application Security - Lifting Zero Trust into the Clouds

Agencies have invested heavily in migrating applications to the cloud and creating cloud-native applications to serve the public. Securing these applications has emerged as a primary objective, particularly in incorporating them into a zero trust architecture.

Strengthening app security focuses on integrating security measures throughout the application lifecycle – from development to deployment – by using cloud-native technologies such as containers, microservices, and fixed infrastructure to protect against threats faced uniquely in the cloud while maintaining agility and scalability. It is easier to build security into the app from the beginning than to add it as an afterthought.

Learning Objectives:

• Identify the means of incorporating zero trust architecture principles, such as the data and application pillars in the Cybersecurity and Infrastructure Security Agency (CISA) model
• Review the application of continuous diagnostics and mitigation (CDM) capabilities, such as asset management and data protection management
• Outline steps to bring security controls to code security, protecting cloud-native applications already running in production, and cloud assets to include AI models