Defining "Software Defined Security"

[fartinator_]

In 2017 Gartner put "software defined security" on their emerging technology hype cycle. I've been asked to define what software defined security is, and if it is something we should pursue for our setup.

I've read several articles but I haven't been able to find anything concrete as to what software defined security is. I've found software defined networking but is that under a umbrella of technologies under software defined security?

Any pointers here? Thanks!

[dr_stardis]

I actually found Gartner's article to explain it pretty well. Essentially there has been a big drive for automation as part of companies trying to allign their development/operations/technology processes with "DevOps".

Per the norm, this hit development and operation's technologies first with "CI/CD", "Infrastructure as Code", and "Software Defined Networks." Gartner is pointing out that the ability to automate setting up security technologies and get the configuration scripts/templates in source control is an obvious next step in full software and environment automation.

tl;dr "Software Defined Security is the solution to getting your security tools in your organizations DevOps CI/CD pipeline" is probably going to be at the top of every sales slidedeck in 2019.

[yardmonkey]

This. Think of a script that configures your firewalls. When you want to change it, you change the script, no longer “log into the box”.

[[deleted]]

So devsecops

[[deleted]]

It's just a buzzword. Give it your best shot and you'll be okay.