Zero Trust Architecture andDevSecOps

for Cloud-Native Applications

MC: Dr. Michaela Iorga, Senior Security Technical Lead, NIST

Thursday, January 27, 2022

11:00 am EST [10]

8:00 am PST

Opening Remarks

 Dr. Michaela Iorga, Senior Security Technical Lead, NIST

 Zack Butcher, Founding Engineer, Tetrate

11:10 am EST [25]

8:10 am PST

Keynote: Zero Trust the Hard Way

 Kelsey Hightower, Principal Engineer, Google

11:35 am EST [25]

8:35 am PST

How to Use SASE and CASCE to Connect and Secure Distributed Applications 

and Users

 Joe Skorupa, VP Distinguished Analyst, Gartner

12:00 pm EST [25]

9:00 am PST

Transitioning to Engineering-based Cybersecurity: SP 800-160 and Applying 

Design Principles to Develop Trustworthy SecSure Systems

 Dr. Ronald Ross, Fellow, NIST

12:25 pm EST [10]

9:25 am PST

Break

12:35 pm EST [25]

9:35 am PST

External Authorization: A Deep Dive on SP 800-204B (Attribute-based Access 

Control for Microservices-based Applications using a Service Mesh)

 Zack Butcher, Founding Engineer, Tetrate

1:00 pm EST [25]

10:00 am PST

SP 800-204C: Implementation of DevSecOps for a Microservices-based 

Application with Service Mesh

 Dr. Ramaswamy Chandramouli, Senior Computer Scientist, NIST

1:25 pm EST [25]

10:25 am PST

Platform One: Successes with Istio, DevSecOps, and ZTA

 Gabriel R. Scarberry, USAF Platform One

 Christopher Rice, Senior Solutions Engineer, Tetrate

1:50 pm EST [45]

10:50 am PST

Lunch (See Information Below)

2:35 pm EST [25]

11:35 pm PST

Keynote: Leadership in Turbulent Times

 André Mendes, Chief Information Officer, Department of Commerce

3:00 pm EST [25]

12:00 pm PST

Continuous ATO with Open Security Controls Assessment Language (OSCAL)

 Dr. Michaela Iorga, Senior Security Technical Lead, NIST

3:25 pm EST [10]

12:25 pm PST

Break

3:35 pm EST [45]

12:35 pm PST

Demo: Service Mesh as the Security Kernel for Zero Trust Platforms

 Ignasi Barrera, Founding Engineer, Tetrate

Demo: BLOSS@M (Blockchain-based Secure Software Assets Management) & 

NGAC for Smart Contracts

 Joshua Roberts, Computer Scientist, NIST

4:20 pm EST [50]

1:20 pm PST

Panel: ZTA in Practice

 Moderator: Adam Zwickey, Global Solutions Engineer, Tetrate

Aradhna Chetal, Senior Director Executive of Cloud Security, TIAA

Alex Shulman-Peleg, Managing Director, Cloud Security Practice Leader, Ernst & Young

Robert Wood, CISO, Centers for Medicare and Medicaid Services, HHS

Vishwas Manral, Founder, Nanosec

Quint Van Deman, Principal, Office of the CISO, AWS Security

5:10 pm EST [10]

2:10 pm PST

Closing Remarks

 Matthew Scholl, Chief, Computer Security Division, NIST

Tetrate
Zero Trust Architecture and DevSecOps

for Cloud-Native Applications

MC: Dr. Michaela Iorga, Senior Security Technical Lead, NIST

Lunch Time Breakout Rooms (Parallel Tracks)

1:50 pm EST [10]

10:50 am PST

Break to grab lunch and join breakouts

2:00 pm EST [30]

11:00 am PST

Networking Rooms

Bring your lunch and discuss your concerns and aspirations around these new and emerging technologies

with experts in each field.

Mesh and Runtime Security

 Hosted By: Ignasi Barrera (Tetrate)

vRoom 1

DevSecOps

 Hosted By: Adam Zwickey (Tetrate), Ramaswamy Chandramouli (NIST)

vRoom 2

Multi-Cloud Challenges (ZTA)

 Hosted By: Zack Butcher (Tetrate), Ned Goren (NIST)

vRoom 3

Continuous Assessment / Continuous ATO

 Hosted By: Christopher Rice (Tetrate), Alexander Stein (NIST)

vRoom 4

2:00 pm EST [30]

11:00 am PST

NIST Movies Entertainment Room

 Enjoy your lunch during a showing an Emmy-Award short movie.

vRoom 5

2:30 pm EST [5]

11:30 am PST

Reconvene for main event 

Tetrate