PIACERE - DevSecOps Automated
0 likes150 views
This document summarizes the PIACERE project, which aims to integrate security into DevSecOps processes. It receives funding from the EU Horizon 2020 program. The project develops tools like the DevSecOps Modeling Language (DOML) and Verification Tool to integrate security principles into infrastructure modeling and deployment. It also includes a Canary Sandbox Environment for testing deployments and an Infrastructure Optimization Platform for optimizing cloud resources. The overall goal is to provide a unified platform for secure, automated deployment to multiple clouds.
Ad
More Related Content
What's hot (20)
Similar to PIACERE - DevSecOps Automated (20)
Ad
More from PIACERE (7)
Ad
Recently uploaded (20)
PIACERE - DevSecOps Automated
- 1. This project has received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No. 101000162. PIACERE - DevSecOps Automated Radosław Piliszek & Paweł Skrzypek | 7bulls.com
- 2. 2 - Research & Development Center 7bulls has been certified as a research and development center on the Polish and French market (CBR and CIR respectively). Examples of innovative projects implemented by 7bulls can be found at 7bulls.com/rnd
- 3. 3 DevSecOps DevSecOps is the integration of security into emerging agile IT and DevOps development as seamlessly and as transparently as possible. Ideally, this is done without reducing the agility or speed of developers or requiring them to leave their development toolchain environment. Source: Gartner IT Glossary: https://www.gartner.com/en/information-technology/glossary/devsecops
- 4. 4 But why do we need Sec in DevOps? ▪ We hope nobody denies security is of utmost importance these days, but we argue it’s even more important for Software-Defined Infrastructure as it happens in DevOps. ▪ Frequent build and deploy process is especially vulnerable to misconfiguration and security leaks. ▪ Heterogeneity of infrastructure additionally increases the risks.
- 5. 5 Introducing PIACERE (PLEASURE) Programming trustworthy Infrastructure As Code in a sEcuRE framework 1. Horizon 2020 project in Software Development call. 2. Consortium consists of 12 organizations (academia, business, government) and is led by Tecnalia from Spain. 3. Schedule - 01.12.2020 - 30.11.2023 4. 7bulls.com is responsible for integration and Canary Sandbox Environment.
- 6. 6 PIACERE DevSecOps - goals • Develop, build and deploy applications • Manage cloud, hybrid and multicloud deployments • Maintain and configure the infrastructure • Optimize usage of resources • Test deployments and infrastructure • Avoid snowflakes (and related config drifts) Including agile approach and security rules and principles. Fast, reliable and secure deployments out-of-the-box!
- 7. 7 PIACERE DevSecOps - key features • Integrated security principles into the DevOps operations. • Agile approach without losing security level. • Sandboxing guide to test the dynamic properties of to-be-deployed infrastructure. • Single source of truth, access control and accountability. • Cloud-agnosticism. • Automatic healing and optimisation.
- 8. 8 PIACERE DevSecOps framework - A single universal platform for DevSecOps deployments in multicloud enviroments. Including optimization of resources. Actually Cross-Cloud and reusing and enhancing Open Source
- 9. 9 PIACERE DevSecOps - why? Source: https://xkcd.com/927/
- 10. 10 • Simple and easy way to use DevSecOps approach. • Unified way to build and deploy into the multicloud environments. • Support for multiple IaC languages. • Automatic deployment to different Cloud Providers. • Automatic optimization of cloud resources. • Embraces GitOps with single source of truth and streamlined access control. PIACERE DevSecOps - why?
- 11. 11 • DOML - DevSecOps Modelling Language • VT - Verification Tool • Central DOML&IaC repositories and Runtime Controller • IEM - IaC Executor Manager • Canary Sandbox Environment tooling • Infrastructural Elements Catalogue • Infrastructure Advisor ○ Runtime monitoring (performance and security) ○ IOP - Infrastructure Optimization Platform Everything integrated together. PIACERE DevSecOps key elements
- 12. 12 • Cloud-agnostic-able language. • Multiple layers of modelling and presentation. • Application modelling: components, connections, security, etc. • Infrastructure modelling: abstract (environment-agnostic) and concrete (environment-dependent). • Target IaC generation possible to multiple languages. • Modelling toolbox available in Eclipse IDE. DOML - DevSecOps Modelling Language Unified way of describing application and infrastructure in the Cloud, including security aspects such as rules and expectations.
- 13. 13 • Static analysis of properties of DOML and the generated IaC. • Verifies correctness according to select criteria. • Ensures the IaC and used components are free of known vulnerabilities and follow best security practices. VT - Verification Tool Unsure if your model satisfies expectations? Refer to the Verification Tool of PIACERE. (And it will make sure you don’t forget the Security part).
- 14. 14 • Single-flow operations: push to the repository and get your deployment updated. • Single source of truth - everything your infrastructure needs in one place. • Simplified and streamlined access control - control access via repository permissions. • Runtime Controller based on BPMN (Business Process Model and Notation) - an extensible vernacular. Central DOML&IaC repositories and Runtime Controller One ring source to rule them all - Your deployments.
- 15. 15 • Execution of IaC. • Understands the deployed infrastructure. • Support for reconfiguration and scaling. • Fully-automatic deployment to chosen Canary Environment and target infrastructure. • Secure use of credentials to the target environments. IEM - IaC Executor Manager PIACERE is your smart, autonomic DevSecOps go-to product.
- 16. 16 • Two main tools: ○ Provisioner - deployment of select environments (OpenStack, Kubernetes) in an opinionated way. ○ Mocklord - mocked APIs of selected cloud providers. • Ability to test dynamic aspects of the deployment in a controlled, sandbox environment, including relevance, reliability and security tests. Canary Sandbox Environment tooling PIACERE offers secure sandbox environment provisioning to help You test Your deployments.
- 17. 17 • Central storage of local PIACERE knowledge. • Answers the questions what providers are available and what their offers are. But it does not stop there! • It stores the historic characteristics of the offers and their current usage along with any alarms (based on metrics and events from Infrastructure Advisor). Infrastructural Elements Catalogue PIACERE is your smart, autonomic DevSecOps go-to product.
- 18. 18 • Collects metrics and events related to performance and security. • Infrastructure-side deployed during IEM run. • Self-learning and self-healing included. • IOP - Optimization of the infrastructure based on collected metrics. • Integration with Infrastructure Elements Catalogue to select best available options. • Optimizes the trade-off of cost, performance, availability etc. • Machine-learning-based optimization algorithms. Infrastructure Advisor Runtime monitoring (performance and security) & IOP - Infrastructure Optimization Platform PIACERE optimizes Your infrastructure from DevSecOps process.
- 19. Get more info from our social media Stay in touch with us www.piacere-project.eu