/tag/security/SecurityWowchemy (https://wowchemy.com)© 2026 David AparicioSat, 06 Jun 2026 08:30:00 +0000/media/icon_hu5f90374de83a434faccdfc0ad39c44da_563627_512x512_fill_lanczos_center_3.png/tag/security//talk/students-learn-to-secure-your-pocs-with-oauth2-proxy-and-anubis/Sat, 06 Jun 2026 08:30:00 +0000/talk/students-learn-to-secure-your-pocs-with-oauth2-proxy-and-anubis//talk/secure-your-prototypes-with-oauth2-proxy-and-anubis/Wed, 22 Apr 2026 08:30:00 +0000/talk/secure-your-prototypes-with-oauth2-proxy-and-anubis//talk/secure-your-prototypes-with-oauth2-proxy/Tue, 03 Feb 2026 08:30:00 +0000/talk/secure-your-prototypes-with-oauth2-proxy//talk/secure-your-applications-with-devsecops/Tue, 02 Dec 2025 13:30:00 +0000/talk/secure-your-applications-with-devsecops//talk/the-scary-story-of-devsecops-backup/Fri, 21 Nov 2025 08:30:00 +0000/talk/the-scary-story-of-devsecops-backup//talk/devsecops-meetup/Thu, 12 Dec 2024 18:30:00 +0000/talk/devsecops-meetup//talk/gosec-meetup/Tue, 03 Dec 2024 18:30:00 +0000/talk/gosec-meetup//talk/the-scary-story-of-devsecops/Thu, 17 Oct 2024 08:30:00 +0000/talk/the-scary-story-of-devsecops//talk/return-of-the-devsecops-workshop/Thu, 04 Jul 2024 08:30:00 +0000/talk/return-of-the-devsecops-workshop//talk/install-party-workshop-security/Wed, 31 Jan 2024 08:30:00 +0000/talk/install-party-workshop-security//talk/ws-security-the-install-party/Wed, 15 Nov 2023 08:00:00 +0000/talk/ws-security-the-install-party//talk/workshop-security-install-party/Thu, 12 Oct 2023 08:30:00 +0000/talk/workshop-security-install-party//talk/ws-security-install-party/Wed, 12 Apr 2023 08:30:00 +0000/talk/ws-security-install-party//project/cuc/Sat, 18 Mar 2023 00:00:00 +0000/project/cuc/<p>CUC (English pronunciation: [<em>cuc</em>] / λευκός) is a very simple CLI tool to check various HTTP status for example if a webpage is available (200) or not found (404).</p> <blockquote> <p>It&rsquo;s delicious like a <a href="https://en.wikipedia.org/wiki/TUC_%28cracker%29" target="_blank" rel="noopener">TUC</a> (cracker), Biscuit of the French company LU, but with a C, for the <a href="https://en.wikipedia.org/wiki/Command-line_interface" target="_blank" rel="noopener">Console</a>.</p> </blockquote>/talk/ws-security-where-to-start-install-party/Thu, 19 Jan 2023 08:30:00 +0000/talk/ws-security-where-to-start-install-party//talk/security-at-the-early-stage-of-the-project/Thu, 13 Oct 2022 08:00:00 +0000/talk/security-at-the-early-stage-of-the-project//publication/programmez_hs8/Fri, 09 Sep 2022 00:00:00 +0000/publication/programmez_hs8//project/namecheck/Wed, 31 Aug 2022 00:00:00 +0000/project/namecheck/<p>A very simple command line tool and server to check the availability of a nickname/handle on Twitter and GitHub. This toyproject is used for my demos at conferences like <a href="/talk/la-securite-des-le-debut-de-la-conception-dun-projet/">Security from the beginning of the design of a project</a> as well as for the article Programmez! Hors série #8. This Go application is a fork of the opensource project of <a href="https://github.com/jub0bs/" target="_blank" rel="noopener">@jub0bs</a>, also available on <a href="https://github.com/jub0bs/namecheck" target="_blank" rel="noopener">GitHub</a>.</p>/talk/security-at-the-start-of-the-project/Thu, 30 Jun 2022 10:30:00 +0000/talk/security-at-the-start-of-the-project//talk/security-at-the-early-stage/Mon, 27 Jun 2022 18:00:00 +0000/talk/security-at-the-early-stage//talk/security-at-the-design-stage-cloud-est/Fri, 22 Oct 2021 14:00:00 +0000/talk/security-at-the-design-stage-cloud-est//talk/security-at-the-project-design-stage/Tue, 17 Nov 2020 21:00:00 +0000/talk/security-at-the-project-design-stage//talk/security-at-the-design-stage-quickie/Fri, 11 Sep 2020 12:20:00 +0000/talk/security-at-the-design-stage-quickie//talk/kerberos-backup/Thu, 13 Feb 2020 19:20:00 +0000/talk/kerberos-backup/<div class="alert alert-note"> <div> This conference was given as a small version <a href="https://humantalks.com/cities/lyon/events/533" target="_blank" rel="noopener">HumanTalks (10 min)</a> (<a href="https://davidaparicio.gitlab.io/200211-humantalks/" target="_blank" rel="noopener">slides</a>) </div> </div>/talk/security-by-design/Tue, 11 Feb 2020 19:30:00 +0000/talk/security-by-design/<div class="alert alert-note"> <div> This conference was given as a big version <a href="../la-sauvegarde-de-kerberos/">GDG Cloud &amp; Iot Lyon (1h)</a> (<a href="https://davidaparicio.gitlab.io/200213-gdglyon/" target="_blank" rel="noopener">slides</a>) It was a proposal (accepted) for <a href="../agilite-et-securite-numeriques/">Sophia Security Camp 2019</a> </div> </div>/slides/ssc2019/Tue, 08 Oct 2019 18:00:00 +0000/slides/ssc2019/<h2 id="agilité-et-sécurité-numériques-cas-concret-avec-la-sauvegarde-automatisée-de-kerberos">Agilité et sécurité numériques: Cas concret avec la sauvegarde automatisée de Kerberos</h2> <p><a href="https://david.aparicio.eu" target="_blank" rel="noopener">David Aparicio</a></p> <p><em>DevOps Cloud and Bigdata</em></p> <h6 id="3ème-édition-sophia-security-camp-08-octobre-2019">3ème édition Sophia Security Camp (08 Octobre 2019)</h6> <hr> <h2 id="avant-propos">Avant propos</h2> <!-- .slide: data-background="#9a0007" data-transition="page" --> <p>L&rsquo;ensemble de la présentation porte sur ma mission DevOps Bigdata ALTRAN chez AMADEUS</p> <p>Les opinions sont les miennes et non les visions de mon ancien employeur, ni celles de mon employeur actuel</p> <h5 id="disclaimer">Disclaimer</h5> <hr> <h2 id="david-aparicio">David Aparicio</h2> <p>Double diplôme INSA de Lyon / UNICAMP (Brésil)</p> <p>Facebook Open Academy / MIT AppInventor</p> <p>2 ans à AMADEUS</p> <p>Nouveau job à Lyon</p> <!-- Curieux * Transactional Memories * Battery Profiling * MIT AppInventor * SMPC / BC --> <hr> <h2 id="analogie">Analogie</h2> <p>« Nul n&rsquo;est censé ignorer la loi »</p> <hr> <h2 id="ma-devise">Ma devise</h2> <h2 id="-nul-développeur-nest-censé-ignorer-la-sécurité-">« Nul développeur n&rsquo;est censé ignorer la sécurité »</h2> <h2 id="kerberos-kézako">Kerberos: kézako?</h2> <p> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/kerberos1.png" alt="Kerberos" loading="lazy" data-zoomable /></div> </div></figure> </p> <!-- KDC = Key Distribution Center --> <p>Source (EN): <a href="https://dzone.com/articles/introduction-to-kerberos-for-managers" target="_blank" rel="noopener">Kerberos pour les manageurs</a></p> <hr> <h2 id="authentification--autorisation">Authentification | Autorisation</h2> <h2 id="cours-en-6858-fall-2014-lecture-13-kerberoshttpsyoutubebcwxll8x33c"> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/kerberos2.png" alt="Authentication/Authorization" loading="lazy" data-zoomable /></div> </div></figure> Cours (EN): <a href="https://youtu.be/bcWxLl8x33c" target="_blank" rel="noopener">6.858 Fall 2014 Lecture 13: Kerberos</a></h2> <h2 id="contexte">Contexte</h2> <p>Kerberos est un SPOF (Point individuel de défaillance)</p> <p>Pas de ressource pour le rendre HA (Haute Disponibilité)</p> <p>Vite fait &amp; Bien fait</p> <hr> <h2 id="où-stocker-la-sauvegarde-">Où stocker la sauvegarde ?</h2> <ul> <li>HDFS alias Hadoop Distributed File System ?</li> </ul> <!--___ ## Architecture * GMock * Master * Worker * Gateway * Consul KV --> <hr> <h2 id="architecture-générale">Architecture générale</h2> <p> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/archi_gmock.png" alt="Architecture" loading="lazy" data-zoomable /></div> </div></figure> </p> <hr> <h2 id="résultat">Résultat</h2> <h2 id="architecture-avec-la-sauvegardeimgarchi_gmock2png"> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/archi_gmock2.png" alt="Architecture avec la sauvegarde" loading="lazy" data-zoomable /></div> </div></figure> </h2> <h2 id="sécurité">Sécurité</h2> <!-- https://media.giphy.com/media/PmXwiamUkK5qjKPPaa/source.gif--> <!-- .slide: data-background="/img/security_container.gif" data-transition="fade" --> <hr> <h2 id="modèle-de-menacehttpsfrwikipediaorgwikimodc3a8le_de_menace"><a href="https://fr.wikipedia.org/wiki/Mod%C3%A8le_de_menace" target="_blank" rel="noopener">Modèle de menace</a></h2> <h3 id="threat-modelhttpsenwikipediaorgwikithreat_model"><a href="https://en.wikipedia.org/wiki/Threat_model" target="_blank" rel="noopener">Threat model</a></h3> <hr> <h2 id="single-source-of-truth-ssothttpsenwikipediaorgwikisingle_source_of_truth"><a href="https://en.wikipedia.org/wiki/Single_source_of_truth" target="_blank" rel="noopener">Single Source of Truth (SSOT)</a></h2> <h2 id="puppet-master-avec-la-gestion-des-certificats">Puppet Master avec la gestion des certificats</h2> <h2 id="documentation">Documentation</h2> <p> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/doc.png" alt="Doc" loading="lazy" data-zoomable /></div> </div></figure> </p> <hr> <h2 id="configuration-optionnelle">Configuration optionnelle</h2> <p> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/custom.png" alt="Customization" loading="lazy" data-zoomable /></div> </div></figure> </p> <hr> <h2 id="chaos-monkey">Chaos Monkey</h2> <h2 id="qaimgqapng"> <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/qa.png" alt="QA" loading="lazy" data-zoomable /></div> </div></figure> </h2> <h2 id="quelques-problèmes">Quelques problèmes</h2> <ul> <li>Cluster sans Kerberos (MapR ticket)</li> <li>Pas de 50/50</li> <li>Temps de livraison</li> <li>Sécurité ?</li> <li>Accompagnement du Management</li> </ul> <hr> <h2 id="conclusion">Conclusion</h2> <hr> <h2 id="infos-à-retenir">Infos à retenir</h2> <!-- Key Takeaways--> <ul> <li>Security by design</li> </ul> <hr> <h2 id="sécurité-dans-lagilité">Sécurité dans l&rsquo;agilité</h2> <!-- Key Takeaways--> <p>Pour <a href="https://www.ssi.gouv.fr/administration/guide/agilite-et-securite-numeriques-methode-et-outils-a-lusage-des-equipes-projet/" target="_blank" rel="noopener">aller plus loin</a>: <figure > <div class="d-flex justify-content-center"> <div class="w-100" ><img src="./img/anssi_agile.jpg" alt="Guide de l&amp;rsquo;ANSSI, Agilité &amp;amp; Sécurité numériques" loading="lazy" data-zoomable /></div> </div></figure> </p> <ul> <li>Atelier d&rsquo;analyse de risque</li> <li>L&rsquo;appréciation des risques</li> </ul> <hr> <h2 id="merci">Merci</h2> <p>Questions ?</p> <hr> <h2 id="keep-in-touch">Keep in touch</h2> <!-- https://media.giphy.com/media/NEvPzZ8bd1V4Y/source.gif" --> <p>Ceci fût ma 1ère présentation tech</p> <p><em><a href="mailto:david@aparicio.eu">david@aparicio.eu</a></em></p> <!-- trans: default/cube/page/concave/zoom/linear/fade/none https://github.com/yusukebe/revealgo/blob/master/assets/templates/slide.html https://t.co/3MgS9jX2Ky | http://i.giphy.com/90F8aUepslB84.gif -->/talk/agility-and-security-case-study-with-kerberos-automated-backup/Tue, 08 Oct 2019 18:00:00 +0000/talk/agility-and-security-case-study-with-kerberos-automated-backup/<div class="alert alert-note"> <div> <p>This conference at Sophia Security Camp 2019 was not given due to company change</p> <p>But I did it at <a href="https://humantalks.com/cities/lyon/events/533" target="_blank" rel="noopener">HumanTalks (10 min)</a> and at <a href="https://www.meetup.com/GDG-Cloud-Lyon/events/lpnvdpybcdbrb/" target="_blank" rel="noopener">GDG Lyon Meetup (1h)</a></p> </div> </div>