Securing AI-Driven Services
Daniel Feldman
About me
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
Service explosion
01
Service counts are increasing 100x
What is a service?
A piece of software that is acting on your other software systems
(See also: service-to-service communication, non-human identity, zero trust security)
1,000
3,000
535 external;
10,000+ internal
Internal services at Netflix
Internal services at Google Search
Services at AWS
Why?
Splitting large projects into microservices became extremely popular starting in ~2017
Right now, the number of services is exploding further due to AI and LLMs
AI & LLMs
Microservices
Microservices
"The microservice architectural style is an approach to developing a single application as a suite of small services, each running in its own process and communicating with lightweight mechanisms, often an HTTP resource API."
-Adrian Cockroft, Cloud Architect, Netflix
AI & LLMs
"Artificial intelligence will dramatically increase the pace of software development and make continuous delivery routine."
Sanjay Gidwani, COO, Copado (in InfoWorld)
Quick demo of v0.dev
Quick demo of ChatGPT Analytics
More and more services
Adoption of microservices greatly increase the number of services
AI & LLMs will decrease the cost of adding functionality, also greatly increasing the number of services
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
Every new service is a new security risk
SolarWinds Attack
xz Attack
Log4j vulnerability
“Most networks [have] big castle walls, a hard crunchy outer shell, and soft gooey centers…”
Federal mandates
Zero Trust Mandate:
All connections between services must be secure.
Supply chain mandate:
All software must have a traceable chain of dependencies.
So...
Enterprises may have 100x as many internal services.
Each service introduces a new attack surface.
More services
Huge new risks
How do we fix it?
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
SPIFFE
Secure all service-to-service traffic at the node and workload level
CNCF graduated project
Many companies involved
All components are APL 2.0 licensed and are freely available.
Netflix, Uber, Lyft, Google, AWS, Azure, ByteDance (TikTok), Indeed, Fidelity...
Goal
Mature
Open source
Widely used
SPIFFE
SPIRE Server
Node
SPIRE Agent
Workload
Node
SPIRE Agent
Cloud or Kubernetes Platform
Workload
SVID
SVID
SPIFFE
NODE REGISTRATION ENTRY
If a node has:
Then
WORKLOAD REGISTRATION ENTRY
If a workload has:
Then
SPIRE Server
Adaptability
AWS, Azure, GCP
Work with many CAs
Store keys on many devices
Base security on any property
Any cloud
Any upstream
Any key store
Any attestor
Open Policy Agent
Where do we go from here?
SPIFFE and OPA are pretty difficult to use in practice.
TPMx
Add advanced token type that is signed with each hop in a request.
Easier to use
Better attestors
End-to-end
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
WIMSE
WIMSE
It's a chain of blocks
Each block represents one hop
WIMSE
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
Take-home messages
01
05
04
02
06
03
Putting all this together in future architectures
Service counts are increasing 100x
What we're building right now
This causes a massive, new attack surface
What still needs to be done
SPIFFE, OPA, Macaroons, Biscuits, SpiffeLink
Service explosion
WIMSE
The future
Security risks
Work in progress
New security ideas
What comes next
There are at least 10 projects related to making SPIFFE easier to use. All are incomplete.
IETF program open to any new contributor.
This will be a multi-year journey.
SPIFFE Ease of Use
WIMSE Standards Development
WIMSE implementation
Thanks!
Daniel Feldman
dfeldman.mn@gmail.com
linkedin.com/in/dfeldman
twitter.com/d_feldman
(Also on Mastodon and BlueSky)
Purpose statement
Mercury is the closest planet to the Sun and the smallest one in the Solar System—it’s only a bit larger than the Moon. The planet’s name has nothing to do with the liquid metal
Venus has a beautiful name and is the second planet from the Sun. It’s terribly hot—even hotter than Mercury—and its atmosphere is extremely poisonous
Jupiter is a gas giant and the biggest planet in the Solar System. It's the fourth-brightest object in the night sky. It was named after the Roman god of the skies and lightning
What about Mercury?
What about Venus?
What about Jupiter?
Contents of this template
To view this template correctly in PowerPoint, download and install the fonts we used | |
An assortment of graphic resources that are suitable for use in this presentation | |
You must keep it so that proper credits for our design are given | |
All the colors used in this presentation | |
These can be used in the template, and their size and color can be edited | |
Editable presentation theme | You can edit the master slides easily. For more info, click here |
You can delete this slide when you’re done editing the presentation
Purpose statement
Mercury is the closest planet to the Sun and the smallest one in the Solar System—it’s only a bit larger than the Moon. The planet’s name has nothing to do with the liquid metal
Venus has a beautiful name and is the second planet from the Sun. It’s terribly hot—even hotter than Mercury—and its atmosphere is extremely poisonous
Jupiter is a gas giant and the biggest planet in the Solar System. It's the fourth-brightest object in the night sky. It was named after the Roman god of the skies and lightning
What about Mercury?
What about Venus?
What about Jupiter?
—Someone Famous
“This is a quote. Words full of wisdom that someone important said and can make the reader get inspired.”
98,300,000
Big numbers catch your audience’s attention
New deal policy
You can give a brief description of the topic you want to talk about here. For example, if you want to talk about Mercury, you can say that it’s the smallest planet in the entire Solar System
A picture always reinforces
the concept
Images reveal large amounts of data, so remember: use an image instead of a long text. Your audience will appreciate it
A picture is worth a thousand words
Awesome words
Situation & problems statement
Current situation
Jupiter is a gas giant and the biggest planet in the Solar System. It's the fourth-brightest object in the night sky. It was named after the Roman god of the skies and lightning
Earth
Earth is the third planet from the Sun and has life
Mars
Despite being red, Mars is actually a cold place
Mercury
Mercury is the smallest planet in the Solar System
Problems
Hypotheses
Mercury is the closest planet to the Sun and the smallest one in the Solar System—it’s only a bit larger than the Moon
Venus has a beautiful name and is the second planet from the Sun. It’s terribly hot and its atmosphere is extremely poisonous
Jupiter is a gas giant and the biggest planet in the Solar System. It's the fourth-brightest object in the night sky
Hypothesis 1
Hypothesis 2
Hypothesis 3
Study objectives
Mercury is the closest planet to the Sun and the smallest of them all
Venus has a beautiful name and is the second planet from the Sun
Despite being red, Mars is actually a cold place. It’s full of iron oxide dust
Justice
United states
Presidence
Purposes of Roosevelt New Deal
Mars is actually a very cold place
Prevent
Recovery
Mercury is the closest planet to the Sun
Neptune is the farthest planet from the Sun
Venus has extremely high temperatures
Jupiter is the biggest planet of them all
Reform
Relief
Jobs
Saturn is a gas giant with several rings
Welfare
Literature review
Theoretical framework
Key terms
Relevant theories
Our framework
Venus has a beautiful name and is the second planet from the Sun. It’s hot and has a poisonous atmosphere
Theory 1
Saturn is a gas giant and has rings. It’s composed mostly of hydrogen and helium
Theory 2
Neptune is the farthest planet from the Sun and is an ice giant
Schedule
| | | | | |
| | | | | |
| | | | | |
Jan | Feb | Mar | Apr | May | Jun |
Task | Description | Date | Status | ||
Task 1 | Mars is a cold planet | Jan 1 - Mar 15 | Completed | ||
Task 2 | Earth harbors lots of life | Feb 1 - Apr 30 | In progress | ||
Task 3 | Venus has a beautiful name | May 15 - Jun 30 | Delayed | ||
Neptune is far away from Earth
Mercury is a very small planet
Task 2
Saturn is a gas giant
Task 3
Task 1
Methodology
Mercury is the closest planet to the Sun and the smallest one in the Solar System—it’s only a bit larger than the Moon
Venus has a beautiful name and is the second planet from the Sun. It’s terribly hot—even hotter than Mercury
Despite being red, Mars is actually a cold place. It’s full of iron oxide dust, which gives the planet its reddish cast
Jupiter is a gas giant and the biggest planet in the Solar System. It’s also the fourth-brightest object in the night sky
Mercury
Type of data
Motives
Data collection
Specific sampling
Analysis & development
Phase 01
Phase 02
Analysis & development
Mercury is the closest planet to the Sun and the smallest one in the Solar System The planet’s name has nothing to do with the liquid metal
Mercury
It’s the closest planet to the Sun
Venus
Venus has a beautiful name
Follow the link in the graph to modify its data and then paste the new one here. For more info, click here
Analysis of the results
Mercury
Saturn
Mercury is the smallest planet
Saturn was named after the Roman god of wealth and agriculture
Mars
Mars is actually a very cold planet
50%
Follow the link in the graph to modify its data and then paste the new one here. For more info, click here
Analysis of the results
Neptune
Mercury
Neptune is far away from us
Mercury is the smallest planet
Saturn
Saturn is a gas giant and has rings
Mars
Mars is actually a very cold planet
This is a map
Venus
Mercury
Venus is the second planet from the Sun
Mercury is the closest planet to the Sun
Timeline
1929
1930
1933
1935
Venus has a beautiful name
Black thursday
Jupiter is a huge gas giant
Smoot Hawley
Saturn has beautiful rings
Neal Deal
Neptune is far away from us
Second new deal
20%
Percentages of the results
30%
50%
Venus has a beautiful name and is the second planet from the Sun
Venus
Jupiter is a gas giant and is the fourth-brightest object in the night sky
Jupiter
Saturn has several rings. It’s composed mostly of hydrogen and helium
Saturn
Sequence
01
02
03
04
05
Venus has a beautiful name and is the second planet from the Sun
Mercury is the closest planet to the Sun and the smallest of them all
Jupiter is a gas giant and the biggest planet in the Solar System
Saturn has several rings and was named after a Roman god
Neptune is an ice giant and is very far away from the Sun and from us
Discussion
Despite being red, Mars is actually a cold place. It's full of iron oxide dust, which gives the planet its reddish cast. Earth is the third planet from the Sun and the only one that harbors life in the Solar System. This is where we all live:
Mars
Discussion 1
Mercury is the closest planet to the Sun and the smallest one in the Solar System—it’s only a bit larger than the Moon
Discussion 2
Venus has a beautiful name and is the second planet from the Sun. It’s terribly hot—even hotter than Mercury
Conclusions
Despite being red, Mars is actually a cold place. It’s full of iron oxide dust
Venus has a very beautiful name and is the second planet from the Sun
Mercury is the closest planet to the Sun and the smallest one in the Solar System
Neptune is the fourth-largest planet by diameter in the Solar System
Mars
Venus
Mercury
Neptune
Our team
You can speak a bit about this person here
You can speak a bit about this person here
Henry Robinson
Sarah James
Bibliographical references
Mockups
You can replace the images on the screen with your own work. Just right-click on it and select “Replace images”
Thanks!
Do you have any questions?
youremail@freepik.com
+34 654 321 432
yourwebsite.com
Please keep this slide for attribution
CREDITS: This presentation template was created by Slidesgo, and includes icons by Flaticon, and infographics & images by Freepik
Icon pack
Alternative resources
Here’s an assortment of alternative resources whose style fits the one of this template:
Photos:
Resources
Did you like the resources on this template? Get them for free at our other websites:
Photos
Icon pack:
Instructions for use
If you have a free account, in order to use this template, you must credit Slidesgo by keeping the Thanks slide. Please refer to the next slide to read the instructions for premium users.
As a Free user, you are allowed to:
You are not allowed to:
For more information about editing slides, please read our FAQs or visit our blog:
https://slidesgo.com/faqs and https://slidesgo.com/slidesgo-school
Instructions for use (premium users)
As a Premium user, you can use this template without attributing Slidesgo or keeping the "Thanks" slide.
You are allowed to:
You are not allowed to:
For more information about editing slides, please read our FAQs or visit our blog:
https://slidesgo.com/faqs and https://slidesgo.com/slidesgo-school
Fonts & colors used
This presentation has been made using the following fonts:
Poppins
(https://fonts.google.com/specimen/Poppins)
Nunito
#ffffff
#ffe5a1
#eb5bc7
#d64149
#49a6ca
#14338f
Storyset
Create your Story with our illustrated concepts. Choose the style you like the most, edit its colors, pick the background and layers you want to show and bring them to life with the animator panel! It will boost your presentation. Check out how it works.
Use our editable graphic resources...
You can easily resize these resources without losing quality. To change the color, just ungroup the resource and click on the object you want to change. Then, click on the paint bucket and select the color you want. Group the resource again when you’re done. You can also look for more infographics on Slidesgo.
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
JANUARY
FEBRUARY
MARCH
APRIL
PHASE 1
Task 1
Task 2
JANUARY
FEBRUARY
MARCH
APRIL
MAY
JUNE
PHASE 1
PHASE 2
Task 1
Task 2
Task 1
Task 2
...and our sets of editable icons
You can resize these icons without losing quality.
You can change the stroke and fill color; just select the icon and click on the paint bucket/pen.
In Google Slides, you can also use Flaticon’s extension, allowing you to customize and add even more icons.�
Educational Icons
Medical Icons
Business Icons
Teamwork Icons
Help & Support Icons
Avatar Icons
Creative Process Icons
Performing Arts Icons
Nature Icons
SEO & Marketing Icons