DevOps with Sec-ops

•

0 j'aime•1,748 vues

it's presentation from a short 5-min talk at 1st DevOpsDays India about security implications and threats in DevOps related tasks

Technologie

Contenu connexe

En vedette

Integra Customer Presentation

Splunk

DevOps represents a profound change from the way most IT departments have traditionally worked: from siloed teams and high-anxiety releases to everyone collaborating on uneventful and more frequent releases of higher-quality code. It doesn't matter how large or small an organization is, or even whether it's historically slow moving or risk averse — there are ways to adopt DevOps sanely, and get measurable results in just weeks.

Demystifying DevOps for Ops - Including Findings from the 2015 State of DevOp...

Puppet

Mongo db eng

Михаил Фирстов

Ecetera uses Splunk to facilitate DevOps in forex

Ocean Software

DevOpsDays Baltimore 2017. As organizations begin the path towards Dev-ops, I often run across development teams who are ready to start the transition, but don't yet have their operations counterparts on board. This talk is about the experiences and techniques that I have seen work (and not work) in my time supporting customers as a Solutions Engineer for GitHub, as well as being a development team lead in an Organization whose Operations-side was reluctant to pursue DevOps.

~~Putting~~ Convincing the Ops in DevOps by Jamie Jones

DevOpsDays Baltimore

DevOpsDays Baltimore 2017. In my experience, I have found that the DevOps generalist that wears multiple hats is not as efficient as the DevOps practitioner that also understands Security and Business drivers but is able to focus on a primary area of expertise that is informed by the other domains. I propose, instead of limiting 'DevOps' to Development and Operations, to also include the dimensions of Security and Business. This talk will discuss practical means to help ensure security minded development, operations and prioritization and enabling innovation that delivers true business value. Practical means is more than just including a test tool; among other possible means, it includes commitment to cross-training, cultural norms such as trusting each team member, and incorporating business value validations in definition of done.

DevSecOpsNess: Adding the business dimension to DevOps by Tanusree McCabe

DevOpsDays Baltimore

Introduction to DevSecOps on AWS

Amazon Web Services

How to Close the SecOps Gap

BMC Software

SplunkLive! Utrecht 2016 - Exact

Splunk

Splunk for DevOps - Faster Insights - Better Code

Philipp Drieger

In this session, you’ll learn about security on AWS and why logging in the cloud is different than on-premises. We’ll explore AWS Cloudtrail, the logging service built into AWS. We’ll discuss Amazon Cloudwatch, a monitoring service for AWS cloud resources and the applications you run on AWS. We’ll also talk about Amazon Inspector, which is the recently announced application security assessment service from AWS. We’ll examine the AWS Config service and how you can use it to improve security and resource management on AWS. Finally, we will look at how the Splunk App for AWS ties all of these services together into deep insight and useful visualizations.

AWS on Splunk, Splunk on AWS

Splunk

44CON 2014 - Pentesting NoSQL DB's Using NoSQL Exploitation Framework, Francis Alexander The rise of NoSQL databases and their simplicity has made corporates as well as end users have started to move towards NoSQL,However is it safe?.Does NoSQL mean we will not have to worry about Injection attacks. Yes We Do. This paper concentrates on exploiting NoSQL DB’s especially with its reach towards Mongodb,Couchdb and Redis and automating it using the NoSQL Exploitation Framework.

44CON 2014 - Pentesting NoSQL DB's Using NoSQL Exploitation Framework, Franci...

44CON

This is a presentation on the "Business Value of Continuous Integration, Continuous Delivery, & DevOps(Sec): Scaling Up to Billion User Global Systems of Systems Using End-to-End Automation & Containerized Docker Ubuntu Cloud Image-Based Microservices," which are late-breaking 21st century approaches for rapidly and cost-effectively building high-quality global information systems, minimum viable products, minimum marketable features, service oriented architectures, web services, and microservices using containerization and end-to-end automation.

Business Value of CI, CD, & DevOpsSec: Scaling to Billion User Systems Using ...

David Rico

Dev secops opsec, devsec, devops ?

Kris Buytaert

Continuous Security in DevOps

Maciej Lasyk

LCU14 500 ARM Trusted Firmware

Linaro

From devOps to front end Ops, test first

Caesar Chi

En vedette (17)

Integra Customer Presentation

Demystifying DevOps for Ops - Including Findings from the 2015 State of DevOp...

Mongo db eng

Ecetera uses Splunk to facilitate DevOps in forex

~~Putting~~ Convincing the Ops in DevOps by Jamie Jones

DevSecOpsNess: Adding the business dimension to DevOps by Tanusree McCabe

Introduction to DevSecOps on AWS

How to Close the SecOps Gap

SplunkLive! Utrecht 2016 - Exact

Splunk for DevOps - Faster Insights - Better Code

AWS on Splunk, Splunk on AWS

44CON 2014 - Pentesting NoSQL DB's Using NoSQL Exploitation Framework, Franci...

Business Value of CI, CD, & DevOpsSec: Scaling to Billion User Systems Using ...

Dev secops opsec, devsec, devops ?

Continuous Security in DevOps

LCU14 500 ARM Trusted Firmware

From devOps to front end Ops, test first

Plus de Abhishek Kumar

Insecurity-In-Security version.2 (2011)

Abhishek Kumar

Insecurity-In-Security version.1 (2010)

Abhishek Kumar

DevOps?!@

Abhishek Kumar

xml-motor ~ What,Why,How

Abhishek Kumar

XML-Motor

Abhishek Kumar

Syslog Centralization Logging with Windows ~ A techXpress Guide

Abhishek Kumar

Squid for Load-Balancing & Cache-Proxy ~ A techXpress Guide

Abhishek Kumar

Ethernet Bonding for Multiple NICs on Linux ~ A techXpress Guide

Abhishek Kumar

Solaris Zones (native & lxbranded) ~ A techXpress Guide

Abhishek Kumar

An Express Guide ~ "dummynet" for tweaking network latencies & bandwidth

Abhishek Kumar

An Express Guide ~ Zabbix for IT Monitoring

Abhishek Kumar

An Express Guide ~ Cacti for IT Infrastructure Monitoring & Graphing

Abhishek Kumar

An Express Guide ~ SNMP for Secure Rremote Resource Monitoring

Abhishek Kumar

Presentation on "XSS Defeating Concept in (secure)SiteHoster" : 'nullcon-2011'

Abhishek Kumar

XSS Defeating Concept - Part 2

Abhishek Kumar

XSS Defeating Trick ~=ABK=~ WhitePaper

Abhishek Kumar

FreeSWITCH on RedHat, Fedora, CentOS

Abhishek Kumar

Plus de Abhishek Kumar (17)

Insecurity-In-Security version.2 (2011)

Insecurity-In-Security version.1 (2010)

DevOps?!@

xml-motor ~ What,Why,How

XML-Motor

Syslog Centralization Logging with Windows ~ A techXpress Guide

Squid for Load-Balancing & Cache-Proxy ~ A techXpress Guide

Ethernet Bonding for Multiple NICs on Linux ~ A techXpress Guide

Solaris Zones (native & lxbranded) ~ A techXpress Guide

An Express Guide ~ "dummynet" for tweaking network latencies & bandwidth

An Express Guide ~ Zabbix for IT Monitoring

An Express Guide ~ Cacti for IT Infrastructure Monitoring & Graphing

An Express Guide ~ SNMP for Secure Rremote Resource Monitoring

Presentation on "XSS Defeating Concept in (secure)SiteHoster" : 'nullcon-2011'

XSS Defeating Concept - Part 2

XSS Defeating Trick ~=ABK=~ WhitePaper

FreeSWITCH on RedHat, Fedora, CentOS

Dernier

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

wesley chun

Effective data discovery is crucial for maintaining compliance and mitigating risks in today's rapidly evolving privacy landscape. However, traditional manual approaches often struggle to keep pace with the growing volume and complexity of data. Join us for an insightful webinar where industry leaders from TrustArc and Privya will share their expertise on leveraging AI-powered solutions to revolutionize data discovery. You'll learn how to: - Effortlessly maintain a comprehensive, up-to-date data inventory - Harness code scanning insights to gain complete visibility into data flows leveraging the advantages of code scanning over DB scanning - Simplify compliance by leveraging Privya's integration with TrustArc - Implement proven strategies to mitigate third-party risks Our panel of experts will discuss real-world case studies and share practical strategies for overcoming common data discovery challenges. They'll also explore the latest trends and innovations in AI-driven data management, and how these technologies can help organizations stay ahead of the curve in an ever-changing privacy landscape.

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

TrustArc

In this session, we will delve into strategic approaches for optimizing knowledge management within Microsoft 365, amidst the evolving landscape of Copilot. From leveraging automatic metadata classification and permission governance with SharePoint Premium, to unlocking Viva Engage for the cultivation of knowledge and communities, you will gain actionable insights to bolster your organization's knowledge-sharing initiatives. In this session, we will also explore how to facilitate solutions to enable your employees to find answers and expertise within Microsoft 365. You will leave equipped with practical techniques and a deeper understanding of how there is more to effective knowledge management than just enabling Copilot, but building actual solutions to prepare the knowledge that Copilot and your employees can use.

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Drew Madelung

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Automating Google Workspace (GWS) & more with Apps Script

wesley chun

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

Advantages of Hiring UIUX Design Service Providers for Your Business

Pixlogix Infotech

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Rafal Los

MySQL Webinar, presented on the 25th of April, 2024. Summary: MySQL solutions enable the deployment of diverse Database Architectures tailored to specific needs, including High Availability, Disaster Recovery, and Read Scale-Out. With MySQL Shell's AdminAPI, administrators can seamlessly set up, manage, and monitor these solutions, ensuring efficiency and ease of use in their administration. MySQL Router, on the other hand, provides transparent routing from the application traffic to the backend servers in the architectures, requiring minimal configuration. Completely built in-house and supported by Oracle, these solutions have been adopted by enterprises of all sizes for their business-critical applications. In this presentation, we'll delve into various database architecture solutions to help you choose the right one based on your business requirements. Focusing on technical details and the latest features to maximize the potential of these solutions.

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Miguel Araújo

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

Scaling API-first – The story of a global engineering organization

Radu Cotescu

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Enterprise Knowledge’s Urmi Majumder, Principal Data Architecture Consultant, and Fernando Aguilar Islas, Senior Data Science Consultant, presented "Driving Behavioral Change for Information Management through Data-Driven Green Strategy" on March 27, 2024 at Enterprise Data World (EDW) in Orlando, Florida. In this presentation, Urmi and Fernando discussed a case study describing how the information management division in a large supply chain organization drove user behavior change through awareness of the carbon footprint of their duplicated and near-duplicated content, identified via advanced data analytics. Check out their presentation to gain valuable perspectives on utilizing data-driven strategies to influence positive behavioral shifts and support sustainability initiatives within your organization. In this session, participants gained answers to the following questions: - What is a Green Information Management (IM) Strategy, and why should you have one? - How can Artificial Intelligence (AI) and Machine Learning (ML) support your Green IM Strategy through content deduplication? - How can an organization use insights into their data to influence employee behavior for IM? - How can you reap additional benefits from content reduction that go beyond Green IM?

Driving Behavioral Change for Information Management through Data-Driven Gree...

Enterprise Knowledge

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

apidays

With more memory available, system performance of three Dell devices increased, which can translate to a better user experience Conclusion When your system has plenty of RAM to meet your needs, you can efficiently access the applications and data you need to finish projects and to-do lists without sacrificing time and focus. Our test results show that with more memory available, three Dell PCs delivered better performance and took less time to complete the Procyon Office Productivity benchmark. These advantages translate to users being able to complete workflows more quickly and multitask more easily. Whether you need the mobility of the Latitude 5440, the creative capabilities of the Precision 3470, or the high performance of the OptiPlex Tower Plus 7010, configuring your system with more RAM can help keep processes running smoothly, enabling you to do more without compromising performance.

Boost PC performance: How more available memory can improve productivity

Principled Technologies

Real Time Object Detection Using Open CV

Khem

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

Dernier (20)

Powerful Google developer tools for immediate impact! (2023-24 C)

TrustArc Webinar - Unlock the Power of AI-Driven Data Discovery

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

2024: Domino Containers - The Next Step. News from the Domino Container commu...

How to Troubleshoot Apps for the Modern Connected Worker

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Automating Google Workspace (GWS) & more with Apps Script

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Strategies for Landing an Oracle DBA Job as a Fresher

Advantages of Hiring UIUX Design Service Providers for Your Business

The 7 Things I Know About Cyber Security After 25 Years | April 2024

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Finology Group – Insurtech Innovation Award 2024

Scaling API-first – The story of a global engineering organization

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

Driving Behavioral Change for Information Management through Data-Driven Gree...

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Boost PC performance: How more available memory can improve productivity

Real Time Object Detection Using Open CV

Partners Life - Insurer Innovation Award 2024