Scaling Security Move fast and make things Paul Heffernan Revolut - PowerPoint PPT Presentation

Apr 19, 2023 •346 likes •487 views

Scaling Security Move fast and make things Paul Heffernan Revolut CISO paul.heffernan@revolut.com Vision: Global mobile banking Local current accounts in 2 minutes Multi-currency accounts Full control of cards and accounts on

Scaling Security Move fast and make things
Paul Heffernan Revolut CISO paul.heffernan@revolut.com
Vision: Global mobile banking • Local current accounts in 2 minutes • Multi-currency accounts • Full control of cards and accounts on your phone • Safe transactions online • Spending control, budgeting and saving • Investment • Free instant transfers globally
Traditional financial services is a target • Complex monolithic IT, hard to manage • Reliance on legacy systems • Supply chain complexity • Customer security burden • It’s where the money is!
Security First
Security = Trust Instant transaction notifications Disable/enable as you go • Location-based security • E-commerce • ATM • Contactless • Magstripe
Disposable virtual cards • More convenient, don’t have to worry about misplacing your plastic • Card details automatically deleted and updated after every transaction • Adds extra layer of security to online purchases and helps reduce online card fraud
Our Approach
Technology: Simple cloud native architecture • Containerisation hosted on Google Cloud • Microservices with API automation • Leverage security services Benefits: • Global resiliency • Fully automated infrastructure-as-code • Context-aware identity controls
Culture: Making security scale within the organisation • Put tools into the hands of the people • Facilitate knowledge sharing rather than rulebooks • Find and elevate the champions Examples: • Security toolbox for developers • Knowledge sharing sessions on security • Developer ‘hackathon’
Getting security into the CI/CD pipeline • Deploy to production speed • Keep build time down How: • Culture first, technology later • Automate the right tests and train the rest • Standardised components
We’re hiring! What’s next?

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

ETI se Scaling for many organizations Hierarchy Recursive vs T.to eRaokon traverses the

Discovery Naming or IN 5 Why name 172.217 11.14 or google.com Indirection Security Isafety concerns How name iEE f google.com Et Challenge Scaling Scaling for many clients Caching D y D ETI se Scaling for many organizations Hierarchy

215 views • 4 slides

Analysis of Scaling Algorithms for Matrix & Operator Scaling Contents Scaling Algorithms

Rafael Oliveira University of Toronto Analysis of Scaling Algorithms for Matrix & Operator Scaling Contents Scaling Algorithms Three Step Analysis Generalization One More Application of Scaling Non-Negative Matrices &

604 views • 15 slides

7 strategies for scaling product security QCon 2018 New York City Angelo Prado, Senior

7 strategies for scaling product security QCon 2018 New York City Angelo Prado, Senior Director Jet.com | Walmart about me 12+ years of experience in software development and Leading Product Security teams at Jet.com, Salesforce and

895 views • 78 slides

Scaling Strategies at USAID John E. Bowman, Ph.D. Senior Agriculture Advisor Office of

Scaling Strategies at USAID John E. Bowman, Ph.D. Senior Agriculture Advisor Office of Agricultural Research and Policy Bureau for Food Security Horticulture Innovation Lab Annual Meeting March 18, 2014 1 Scaling T echnologies Remarks by

344 views • 17 slides

Scaling From simple models to rich strategies PPPLab Day, November 30th Scaling: recent

Scaling From simple models to rich strategies PPPLab Day, November 30th Scaling: recent publications Insight Series Tool Animation The rationale for scaling As the SDGs require transformational change, scaling can provide: Reaching more

609 views • 37 slides

Scaling Security for Big, Parallel File Systems Andrew Leung and Ethan Miller University of

Scaling Security for Big, Parallel File Systems Andrew Leung and Ethan Miller University of California, Santa Cruz {aleung, elm}@cs.ucsc.edu FAST 2007 Work-in-Progress Motivation Large systems hard to secure Upwards of hundreds of

562 views • 6 slides

Outline Scaling Scalinga Plenitude of Power Laws Scaling-at-large Scaling-at-large

Scaling Outline Scaling Scalinga Plenitude of Power Laws Scaling-at-large Scaling-at-large Scaling-at-large Principles of Complex Systems Allometry Allometry Definitions Definitions Course 300, Fall, 2008 Examples Examples

568 views • 27 slides

So#ware Scaling Mo/va/on & Goals HW Configura/on & Scale Out So#ware Scaling

So#ware Scaling Mo/va/on & Goals HW Configura/on & Scale Out So#ware Scaling Efforts System management Opera/ng system Programming environment PreAcceptance Work HW stabiliza/on & early scaling

390 views • 19 slides

UMBC A B M A L T F O U M B C I M Y O R T 1 (10/18/04) I E S R C E O V

Advanced VLSI Design Scaling CMPE 640 Scaling Technology scaling rate is approximately 13%/year, halving every 5 years. 100 10 m 1 0.1 1960 1970 1980 1990 2000 The size of the circuits also continues to increase. Besides increasing

362 views • 7 slides

Outline Scalinga Plenitude of Power Laws Scaling-at-large Scaling-at-large Principles of

Scaling Scaling Outline Scalinga Plenitude of Power Laws Scaling-at-large Scaling-at-large Principles of Complex Systems Allometry Allometry CSYS/MATH 300, Fall, 2010 Definitions Definitions Examples Examples History: Metabolism

250 views • 20 slides

Scaling up the Implementation of the Sustainable Development Strategy for the Seas of East Asia

ASEAN Regional Forum - Intersessional Meeting for Maritime Security (ISM- MS) February 7-9, 2017 Tokyo, Japan Scaling up the Implementation of the Sustainable Development Strategy for the Seas of East Asia (SDS-SEA) Presented by Stephen

241 views • 13 slides

Web vulnerability scanning and exploitation tools Scaling vulnerability scanning Companies

Web vulnerability scanning and exploitation tools Scaling vulnerability scanning Companies with 1000+ web applications running Move to m -services architectures making things worse Huge shortage of skilled security engineers to

732 views • 48 slides

Scaling Pseudonymous Authentication for Large Mobile Systems ACM WiSec19, May 17, 2019

Scaling Pseudonymous Authentication for Large Mobile Systems ACM WiSec19, May 17, 2019 Mohammad Khodaei, Hamid Noroozi, and Panos Papadimitratos Networked Systems Security Group www.eecs.kth.se/nss 1 / 29 Secure Vehicular Communication

597 views • 32 slides

Outline Introduction What are the cusp anomaly and generalized scaling function? Superstring in

Scaling and integrability from AdS 5 S 5 Riccardo Ricci Imperial College London DAMTP Cambridge 14th October Work in collaboration with S. Giombi, R.Roiban, A. Tseytlin and C.Vergu Scaling and integrability from AdS 5 S 5 Riccardo Ricci

893 views • 50 slides

Communication Avoiding Power Scaling Power Scaling Derivatives of Algorithmic Communication

Communication Avoiding Power Scaling Power Scaling Derivatives of Algorithmic Communication Complexity John D. Leidel, Yong Chen Parallel Programming Models & Systems for High End Computing (P2S2 2015) Sept 1, 2015 1 Overview Intro:

776 views • 26 slides

Using EBS with Auto Scaling Groups How to use the immense power of AWS Auto-Scaling Groups for a

Using EBS with Auto Scaling Groups How to use the immense power of AWS Auto-Scaling Groups for a stateful Docker application. Background Background In a service-oriented world where requests can come from anywhere at any time, keeping a

1.04k views • 31 slides

Till Kahlbrock, Soenke Ruempler | 09.09.2019 Community Day 2019 Sponsors

Till Kahlbrock, Soenke Ruempler | 09.09.2019 Community Day 2019 Sponsors https://securityboulevard.com/2019/07/hacker-group-magecart-attacking-misconfigured-s3-buckets/ Soenke Till Ruempler Kahlbrock Low Maintenance Best Practices Secure

437 views • 26 slides

SWEN 256 Software Process & Project Management Predictions are hard,

SWEN 256 Software Process & Project Management Predictions are hard, especially about the future Yogi Berra Two Types of estimates: Lucky or Lousy 2 Created, used or refined during Strategic planning o

866 views • 29 slides

Continuous Improvement Toolkit Project Closure www. citoolkit .com Project Closure All projects

Continuous Improvement Toolkit Project Closure www. citoolkit .com Project Closure All projects have to be implemented within a specific period of time The process of closing the project is an important aspect in project management www. citoolkit

333 views • 14 slides

Restricted Community Accounts Securing Science Gateways at the Account Level Kevin J. Price

Restricted Community Accounts Securing Science Gateways at the Account Level Kevin J. Price June 14 th , 2006 Background Many Science Gateways use community accounts, a form of shared account Shared accounts are a potential weak

729 views • 26 slides

Access Control Lists Not all OS abstractions make sense as a file Examples: Don Porter

12/6/12 Background (1) If everything in Unix is a file Everything in Windows is an object Why not files? Access Control Lists Not all OS abstractions make sense as a file Examples: Don Porter Eject

801 views • 4 slides

Control Charts for x and s Introduction The R chart, based on the sample range , is sensitive

ST 435/535 Statistical Methods for Quality and Productivity Improvement / Statistical Process Control Control Charts for x and s Introduction The R chart, based on the sample range , is sensitive in detecting an assignable cause of variation

549 views • 15 slides

Continuous Improvement Toolkit Control Charts Continuous Improvement Toolkit . www.citoolkit.com

Continuous Improvement Toolkit Control Charts Continuous Improvement Toolkit . www.citoolkit.com Managing Deciding & Selecting Planning & Project Management* Pros and Cons Risk PDPC Importance-Urgency Mapping RACI Matrix

417 views • 29 slides

Single-Cycle CPU Control Logic CSE 141, S2'06 Jeff Brown Putting it All Together: A Single

Single-Cycle CPU Control Logic CSE 141, S2'06 Jeff Brown Putting it All Together: A Single Cycle Datapath We have everything except control signals CSE 141, S2'06 Jeff Brown Okay, then, what about those Control Signals? CSE 141, S2'06

460 views • 13 slides