When security incidents happen, you often have to respond in a hurry to gather forensic data from the resources that were involved. You might need to grab a bunch of hard drives and physically visit the data centre to capture data from the systems. Getting on airplanes and going to data centres means you have to get dressed, and that's a drag. When infrastructure is in the cloud, you have remote access and APIs for managing all your infrastructure, so you can respond to incidents with automation and do your forensic analysis in your bunny slippers. But is it as good as the capabilities you have in a data centre? Is getting dressed the price you have to pay for high quality forensics and incident response? In this talk Paco will explain the two major domains of cloud events (infrastructure domain and service domain) and describe the security and incident response techniques pioneered by AWS customers like Mozilla, Alfresco, and Netflix. He'll explain how to isolate resources to preserve the integrity of the data; get RAM dumps and disk image snapshots; and identify unauthorised changes to cloud resources using API tools and logs. And all of this while wearing pyjamas. Speaker Bio: Paco Hope (@pacohope) Paco Hope is a Principal Consultant in Security, Risk, and Compliance for Amazon Web Services. He helps enterprise customers achieve compliance and secure their workloads on AWS. Based in London, he works with major enterprises across Europe and the UK migrating workloads and building new applications on AWS. Prior to his work with AWS he worked in application security, carrying out threat modelling, source code reviews, and architectural risk analysis for enterprises. This talk was presented at the OWASP London Chapter Meeting on the 13th February 2019 at Amazon London office. Slides: https://www.owasp.org/images/6/60/OWASPLondon-IR-In-Your-Pyjamas-Paco-Hope-20190213-PDF.pdf #OWASP #OWASPLondon #CloudSecurity #IIncidentResponse ... https://www.youtube.com/watch?v=VEr0SmgXJ4c

This talk was presented at OWASP London Chapter Meeting on 24th November 2016. Shane will talk about myBBC Security Council and how it demonstrates an organisational approach towards security that ensures the right decisions are made by the right people, and that developers can raise concerns knowing that they will be seen and escalated. It also frames InfoSec as an enabling force rather than a loophole. Slides can be downloaded here: https://www.owasp.org/images/5/52/OWASPLondon20161124_SecurityCouncil.pptx Speaker Bio: Shane is a Senior Software Developer at The BBC, with a keen interest in security. Prior to the BBC he worked for the travel aggregator Travelfusion, and the anti-money laundering firm Fortent (formerly Searchspace). ... https://www.youtube.com/watch?v=zEEaSCMQ6dw