Identity Management and Access Control in

Multi-Cloud

MC: Dr. Michaela Iorga, Senior Security Technical Lead, NIST

DAY 1: Thursday, January 23, 2020

7:30 am Registration and Networking n 101/Foyer

8:30 am Welcome, Introduction and Administrative issues

 Matthew Scholl, Chief, Computer Security Division, NIST

n 101/Green

WHY ARE WE HERE?

8:40 am Opening Keynote: Trusting Native Cloud Applications

 Varun Talwar, Co-founder and CEO, Tetrate 

n 101/Green

9:10 am Zero Trust Architecture

 Scott Rose, Computer Scientist, NIST 

n 101/Green

9:40 am The Yellow Brick Road to ZTA in the Cloud

 Juanita Koilpillai, Founder and CEO, Waverley Labs

n 101/Green

10:10 am Questions (with Slido) n 101/Green

10:30 am Coffee Break

FOUNDATIONAL PIECES

10:45 am Next Generation Access Control for ZTA and Multi-cloud

 David Ferraiolo, Manager, Secure Systems and Applications Group, NIST

n 101/Green

11:15 am SP 800-204A – (Public Draft) Guidelines for Deploying Service Mesh for 

Securing Microservices-based Application Systems

 Ramaswamy Chandramouli, Senior Scientist, NIST

 Zack Butcher, Founding Engineer, Tetrate

n 101/Green

12:00 pm Istio and Envoy

 Liam White, Engineer, Tetrate

n 101/Green

12:30 pm Questions (with Slido) n 101/Green

12:45 pm Lunch n NIST Cafeteria

OPERATIONALIZE

1:45 pm How did the DoD move to Kubernetes and Istio?

 Nicolas M. Chaillan, Chief Software Officer, Air Force

 Co-Lead, DoD Enterprise DevSecOps Initiative

n 101/Green

2:30 pm Demo 1: Tetrate Q + Istio for Service-to-Service Access Control

 Ignasi Barrera, Founding Engineer, Tetrate

Demo 2: ABAC for Files and DBMS Elements in Multi-cloud

 Joshua Roberts, Computer Scientist, NIST

n 101/Green

3:15 pm Administering Access Control Logic

 Jayanta Kumar Debnath, InfoBeyond Technology

 Ulrich Lang, ObjectSecurity

n 101/Green

3:45 pm Questions (with Slido) n 101/Green

4:00 pm Break

Tetrate
4:15 pm Panel: What are the greatest identity and access control issues and 

opportunities facing the cloud going forward?

 Moderator: Vincent Hu, Senior Scientist, NIST

 Panelists:

Sandi Roddy, Chief Scientist, Cyber Warfare Systems, JHU/APL

Ron Turner, XpressRules

Ramaswamy Chandramouli, Senior Scientist, NIST

Sarbari Gupta, President, Electrosoft

 Mike Fisk, Deputy CISO, Capital One

n 101/Green

5:00 pm Day 1 Closing Remarks and Adjourn n 101/Green

DAY 2: Friday, January 24, 2020

7:30 am Registration and Networking n 101/ Foyer

Welcome n 101/Green

EARLY ADOPTERS AND GOING FORWARD

8:30 am Panel: Experiences – Early Adopters (NOTE: This portion will not be webcast)

 Moderator: Deepak Jeevankumar, Dell Tech Capital

 Panelists:

Anil Vatti, Chief Architect, Visa

 Lixun Qi, Senior Tech Lead, Freddie Mac

 Aradhna Chetal, Global Head Cloud Sec Architecture, HSBC

n 101/Green

9:15 am Keynote: Cyber Future: Evolution, Mutations, Salutations. Oh my!

 Andre’ Mendes, Chief Information Officer (Acting), DoC 

n 101/Green

10:00 am Coffee Break

10:15 am We All Live in a Yellow Submarine (Multi-cloud World): DevSecOps 

Challenges and Best Practices

 Anil Karmel, President, Cloud Security Alliance - DC Metro Area Chapter; 

 CEO, C2 Labs

n 101/Green

10:45 am Cloud Smart, Application Rationalization, and ICAM 

 Stephen Naumann, Senior Advisor – Data Center Practitioner, GSA

n 101/Green

11:15 am Questions (with Slido) n 101/Green

11:30 am Ad-hoc Panel: What is in Your Mind When You Think ZTA & DevSecOps

Co-Moderator: Michaela Iorga, Senior Security Technical Lead, NIST

Co-Moderator: Jeyappragash Jeyakeerthi, Co-Founder, Tetrate

This is an ad-hoc panel and the panelists will be selected randomly from the members of the 

audience that expressed interest in participating in this dialog by registering at the time they 

picked up their conference badges.

n 101/Green

12:00 pm Day 2 Closing Remarks and Adjourn n 101/Green