<commit_before>---
layout       : blocks/working-session
title        : BDD for Cloud Security
type         : workshop
owasp-project: no
track        : DevSecOps
technology   :
related-to   :
status       : Final stage
when-day     : Tue
when-time    : AM-1
location     : Room-5
organizers   : <NAME>
participants : <NAME>,<NAME>,<NAME>,<NAME>,<NAME>
---

## Why

Developers, and operations and security teams need to collaborate on building and verifying that cloud architectures meet requirements for security.  This Working Session will consider how Behaviour Driven Development (BDD) may be a useful tool to both specify and then verify that the appropriate security controls are in place.   

## What

- Identify core security requirements for all cloud deployments, regardless of specific cloud technology
- Write BDD specifications for those requirements (no implementation code, just specs)
- Find existing tools/solutions that can be used as base implementations, e.g. Netflix's Security Monkey? NCC Group AWS auditor?
- Link specs to standards (CSA, NIST, etc.)?

## Outcomes

This Working Session will publish BDD specifications for those requirements (no implementation code, just specs), and will link the specs to CSA, NIST, and other standards.

## Who

The target audience for this Working Session is:

- Cloud Security architects
- Security teams
- Cloud Ops

--- 

## Working materials

Here are the current 'work in progress' materials for this session (please add as much information as possible before the sessions)

### Content

...add content...
<commit_msg>Taking ownership as agreed with Ste<NAME> Vries.<commit_after>---
layout       : blocks/working-session
title        : BDD for Cloud Security
type         : workshop
owasp-project: no
track        : DevSecOps
technology   :
related-to   :
status       : Final stage
when-day     : Tue
when-time    : AM-1
location     : Room-5
organizers   : <NAME>
participants : <NAME>,<NAME>,<NAME>,<NAME>,<NAME>
---

## Why

Developers, and operations and security teams need to collaborate on building and verifying that cloud architectures meet requirements for security.  This Working Session will consider how Behaviour Driven Development (BDD) may be a useful tool to both specify and then verify that the appropriate security controls are in place.   

## What

- Identify core security requirements for all cloud deployments, regardless of specific cloud technology
- Write BDD specifications for those requirements (no implementation code, just specs)
- Find existing tools/solutions that can be used as base implementations, e.g. Netflix's Security Monkey? NCC Group AWS auditor?
- Link specs to standards (CSA, NIST, etc.)?

## Outcomes

This Working Session will publish BDD specifications for those requirements (no implementation code, just specs), and will link the specs to CSA, NIST, and other standards.

## Who

The target audience for this Working Session is:

- Cloud Security architects
- Security teams
- Cloud Ops

--- 

## Working materials

Here are the current 'work in progress' materials for this session (please add as much information as possible before the sessions)

### Content

...add content...

{'fraction_non_alphanumeric': 0.06908408877774304, 'fraction_numerical': 0.0012503907471084713, 'mean_word_length': 3.761904761904762, 'pattern_counts': {'":': 0, '<': 16, '<?xml version=': 0, '>': 16, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '6883598', 'n_tokens_mistral': 826, 'n_tokens_neox': 782, 'n_words': 402}