The Justice Engine is a plugin that we’ve developed for Security Monkey that acts as Judge and Jury of resources. It begins by calculating the risk any given cloud resource poses to our company. This risk is calculated based on the resource’s configuration over time. Configurations such as having a resource accessible to the whole Internet are weighed heavily by the Justice Engine and are more likely to be flagged to be removed.
Open Source Developments at SendGrid: The Justice Engine
Note: This post comes from SendGrid’s Security Team. For more technical posts like this, check out our technical blogroll.
As described within SendGrid Security teams’ last post, we are using a tool we call Krampus to help us mitigate potential risk within our cloud infrastructure. Our aim within this post is to explain and share how we leverage that tool to make our lives easier. In our initial post on our team’s approach to cloud security, we mentioned the following:
“Our ability to enable the business to quickly execute on our cloud security strategy relied on us being able to stand on the shoulders of giants. For example, we have opted to run a modified version of Netflix’s Security Monkey project in order to identify resources with security issues.”
And one might very well ask “What kind of modifications did you make?”
The answer to that…we call the Justice Engine.
What is this Justice Engine that you speak of?
The Justice Engine is a plugin that we’ve developed for Security Monkey that acts as Judge and Jury of resources. It begins by calculating the risk any given cloud resource poses to our company. This risk is calculated based on the resource’s configuration over time. Configurations such as having a resource accessible to the whole Internet are weighed heavily by the Justice Engine and are more likely to be flagged to be removed.
Once the resources’ score has been calculated, the Justice Engine continues by formatting the results into a standard that Krampus can action, and finishes by warning the various resource owners of the planned action.
If you are new to SendGrid, check out this blog post for some general information on getting started with SendGrid.
Let's get started!Getting Started with SendGridHandySends has seen steady growth over the past few months as our presence as the SendGrid by Twilio premiere reseller in India has grown.
There are many tutorials on how to migrate from other email marketing platforms to SendGrid and how to integrate SendGrid into applications, but we wanted to help our new users get up and running faster by starting off with using some of the basic features of SendGrid.
SendGrid is an email marketing platform that allows users to reliably send email.
SendGrid’s marketing campaigns allow your business to not only market to clients, but to carefully strategize announcements, promotional campaigns, newsletters, and even transactional emails such as password resets and order confirmations.
SendGrid allows you to get up and running in minutes with customizable pre-built templates or to migrate existing formats or code from the ground up with its built-in code editor.SendGrid’s Automation CapabilityThis year SendGrid added an automation feature that is available even in our free trial accounts.
