SecOps - Bringing Agility into Security

•

2 j'aime•19,368 vues

Security threats are all around. Over the past year, Atlassian's Security Intelligence Team has pursued a harmonious state to balance responding to new threats while remaining agile. We call it SecOps. SecOps is ChatOps, DevOps and SecInt - all wrapped up in one. We’ll show you how our team has created a Security Intel hub, as well as offer a few tips and tricks using our Atlassian products to make security programs work. Andrew Wurster, Security Intelligence Team Lead, Atlassian

Logiciels

SecOps
Bringing agility into security
ANDREW WURSTER | SECINT TEAM LEAD | @YOURCISCOKID

Security Intelligence
Incident detection, response
Who is the Atlassian Security Team?
Policies and Trust
Trust @ Atlassian
Security Engineering
Secure by design

Prepare Detect,
Analyze
Contain,
Eradicate,
Recover
Post-Incident
Review
Primer: Incident Handling Process

THE BACKSTORY
Apache Struts
Framework
Remote Code
Execution
Multiple
Products,
Services

Alerts
Logs / Alerts JIRA / Service DeskEmail Ingestion User ReportsIndustry Groups
Investigations
Incidents

INCIDENT TIMELINE
Apache
contacts us
06 Mar
Reported to
Apache
02 Mar ??
Vuln.
Published
0 Day
Investigations
kick off
Incident Raised
Incident —>
07 Mar
Investigation —>
09 Mar09 Mar

CROSSING THE STREAMS
Investigating the
exploit
Building and
deploying the fix
Forming and
sending comms

INCIDENT TIMELINE
Incident ActivitiesHipChat Fix
Customer Comms
Incident —>
Investigate Access
13 Mar09 Mar
Review —>
Crowd Fix
Bamboo Fix
Push fix to Bamboo Cloud
Validate Fix Revalidate Fix
Check Access
10 Mar
Vulnerability Annouce
CommsComms Draft
Recovery

INCIDENT TIMELINE
Conduct Incident
Review Carry out PIR
actions
Incident —>
05 April
Review —>
10 Mar 30 Mar13 Mar
Open PIR for
comment
Close PIR

Thank you!
ANDREW WURSTER | SECINT TEAM LEAD | @YOURCISCOKID

Contenu connexe

Tendances

Different Atlassian Enterprise customers have varying security and compliance standards that they expect their cloud application vendors to meet. In this talk, Jana Geddis will walk you through the approaches Enterprise companies take to vendor security reviews. We will look at common threats, different Enterprise expectations, and the security requirements that vendors of all sizes can fulfill with minimal investment. You'll leave with knowing how to complete your next Enterprise security review!

Behind the Scenes of Vendor Security Reviews in the Enterprise

Atlassian

The Atlassian Bug Bounty Program

Atlassian

Chaos engineering intro

Shantanu Deshpande

You know the story – your team needs to build a new integration for a new system and you decide, "A microservice would be perfect for this!" Before you know it, there are dozens of integrations and dozens of microservices spinning out of control. In this session, Matej Konecny will walk you through his team's process for herding dozens of microservices at Atlassian. He'll share the processes they've put in place to manage and scale incident responses, make the service dependencies discoverable, and architect sustainable systems as they keep on building more integrations.

Herding Microservices – the Atlassian Way

Atlassian

Chaos Engineering, When should you release the monkeys?

Thoughtworks

Building Reliability One Step at a Time Building reliability in our organizations allows us to continue giving our customers a great user experience when they need it most. Many companies measure their reliability via nines of availability or system uptime percentage. Site Reliability Engineering has taught us some of the practices we can adopt to reach our availability goals but we have to keep in mind that reaching your organization’s availability goals will be a learning experience and we have to be proactive about responding to failure. In this talk, Ana will share how she has been using Chaos Engineering since 2016 to learn more about the systems she worked on and how this practice can be used to decouple our system’s weak points, learn from incidents and improve monitoring and observability.

InfoQ Live - Reducing Uncertainty in Software Delivery - Building reliability...

Ana Medina

Привет, Санкт-Петербург! В этот раз мы решили провести встречу, посвященную Confluence и CI/CD. К нам в гости приедут из Atlassian Антон Шалеев (Амстердам), чтобы поделиться практиками Blueprint, и Антон Генкин, product manager (Сидней) расскажет про "DevOps философия Atlassian: люди, процессы, инструменты". После обсуждения докладов оба согласились провести небольшую сессию вопросов-ответов. Просим взять какой-либо документ на мероприятие, в связи с пропускным режимом. Место встречи: Selectel, Цветочная ул., 21 лит. А. Если у вас вопросы задавайте в канале Telegram: https://t.me/augspb

DevOps with Atlassian

Gonchik Tsymzhitov

Building an Open Source AppSec Pipeline

Matt Tesauro

Ops Happens: DevOps Beyond Deployment - Damon Edwards

SeniorStoryteller

Culture Hacker: How to Herd CATTs and Inspire Rebels to Change the World! - S...

SeniorStoryteller

AppSec Pipelines and Event based Security

Matt Tesauro

To watch this webinar replay, please join us here: https://info.dynatrace.com/apm_wc_devops_journey_series_tips_around_the_world_na_registration.html DevOps: Cultural and Tooling Tips Around the World DevOps! One of the most abused terms in the software industry over the last few years. One of the reasons for this is that the term can mean something totally different, depending on what your role is, and what kind of business you are in. Yet, it is a very real practice with solid benefits that allow companies to build better quality software faster, and with lower cost and risk. In this 30-minute “secret sauce” session, Andreas Grabner, DevOps Activist at Dynatrace, shares customer learnings and best practices from DevOps adopters around the world. You’ll gain insights from questions like: • What does DevOps really mean for developers, testers and operators? • How do companies like Facebook deploy twice a day without big issues? • How does DevOps work in industries like finance, government, and healthcare where tight regulations exist? • Is Dev responsible for Ops? Or only if you are working in a Cloud environment? • What is different and unique as we move from old-fashioned on-prem software to hybrid and Cloud apps? • Why is talking to people the forgotten DevOps tool?

DevOps: Cultural and Tooling Tips Around the World

Dynatrace

Whether you’re building an application in a DevOps + Security culture, or have already bridged the gap with DevSecOps, the task remains the same: How do you ensure that security best practices are understood, architected for and integrated into your application from day 1 AND remain relevant year 1. During this talk I’ll focus on how to achieve these goals amidst the ever changing landscape of people, process, and technology in the cloud, in the context of various compute environments like instances, containers and serverless functions. and how to do so using off-the-shelf AWS services and features. I’ll complete the story by accompanying this discussion with a reference application architecture and examples. Attendees of this talk will receive actionable best practices and guidance, with specific implementation details for AWS

From Zero to DevSecOps in 60 Minutes - DevTalks Romania - Cluj-Napoca

jerryhargrove

Datadog + VictorOps Webinar

Datadog

Security incident response is a reactive and chaotic exercise. What if it were possible to flip the scenario on its head? Security focused chaos engineering takes the approach of advancing the security incident response apparatus by reversing the postmortem and preparation phases. Contrary to Purple Team or Red Team game days, Security Chaos Engineering does not use threat actor tactics, techniques and procedures. It develops teams through unique configuration, cyber threat and user error scenarios that challenge responders to react to events outside their playbooks and comfort zones. Security Chaos Engineering allows incident response and product teams to derive new information about the state of security within their distributed systems that was previously unknown. Within this new paradigm of instrumentation where we proactively conduct “Pre-Incident” vs. “Post-Incident” reviews we are now able to more accurately measure how effective our security incident response teams, tools, skills, and procedures are during the manic of the Incident Response function. In this session Aaron Rinehart, the mind behind the first Open Source Security Chaos Engineering tool ChaoSlingr, will introduce how Security Chaos Engineering can be applied to create highly secure, performant, and resilient distributed systems.

Craft 2019 - Security Chaos Engineering - Security Precognition

Aaron Rinehart

https://www.gremlin.com/webinars/ce-on-azure/ Join us for a walkthrough on how to get started with Chaos Engineering on Azure. Learn the fundamentals of Chaos Engineering and how to build more reliable applications on Azure. In this live session, we’ll show you how to get started running experiments on Azure’s managed Kubernetes (AKS) and how to implement continuous Chaos Engineering using Azure Pipelines. Then be sure to stay until the end for live Q&A. AGENDA - Learn the history, principles and practice of Chaos Engineering - How to get started with Chaos Engineering on Azure - Run chaos experiments to simulate common real-world failures on AKS - How to implement Chaos Engineering Experiments on Azure Pipelines

Introduction to Chaos Engineering with Microsoft Azure

Ana Medina

Making Security Agile - Oleg Gryb

SeniorStoryteller

Chaos Engineering: Injecting Failure for Building Resilience in Systems

Yury Roa

Building a Secure DevOps Pipeline - for your AppSec Program

Matt Tesauro

Siloed IT and development organizations are becoming a thing of the past. If you are looking for ways to improve IT operations to support your dev teams, this talk is for you. Join Paul Buffington, Principal Solutions Engineer at Atlassian, as he shares ways to improve how IT teams work in a DevOps environment. We'll cover incident response to outages and and how to reduce resolution time. You'll see how a Service Catalog, Runbooks and Post Incident Reviews (PIRs) help unify these teams. ChatOps and automation are also key to success and topics for discussion. Finally we'll look at ways to create fast and continuous feedback. Paul Buffington, Principal Solution Engineer, Atlassian

Scaling IT Operations in a DevOps World

Atlassian

Tendances (20)

Behind the Scenes of Vendor Security Reviews in the Enterprise

The Atlassian Bug Bounty Program

Chaos engineering intro

Herding Microservices – the Atlassian Way

Chaos Engineering, When should you release the monkeys?

InfoQ Live - Reducing Uncertainty in Software Delivery - Building reliability...

DevOps with Atlassian

Building an Open Source AppSec Pipeline

Ops Happens: DevOps Beyond Deployment - Damon Edwards

Culture Hacker: How to Herd CATTs and Inspire Rebels to Change the World! - S...

AppSec Pipelines and Event based Security

DevOps: Cultural and Tooling Tips Around the World

From Zero to DevSecOps in 60 Minutes - DevTalks Romania - Cluj-Napoca

Datadog + VictorOps Webinar

Craft 2019 - Security Chaos Engineering - Security Precognition

Introduction to Chaos Engineering with Microsoft Azure

Making Security Agile - Oleg Gryb

Chaos Engineering: Injecting Failure for Building Resilience in Systems

Building a Secure DevOps Pipeline - for your AppSec Program

Scaling IT Operations in a DevOps World

En vedette

FlixBus is Europe's largest intercity bus network. In order to maintain 150,000 daily connections to 1000 destinations across 21 different countries, teams use JIRA, Confluence and Bitbucket to develop their website and mobile applications, and Trello to keep their business teams organized and company running. Find out how their teams use of these tools has evolved to fit their rapid growth and individualized teams needs. Daniel Krauss, Founder & CIO, FlixBus

From Start-up to Grown-up – FlixBus's Journey with Trello + Atlassian

Atlassian

At Nestlé Nespresso, we've set up more than 15 multidisciplinary and autonomous Scrum teams across several countries to support digital acceleration, and improve our E-commerce platforms and mobile applications. Learn how JIRA Software and several add-ons help us organize our teams’ backlogs, and streamline release management. David Berclaz, Development Manager, Nestlé Jérôme Wymann, Senior Consultant and Team Leader, Antaes

How Nespresso Uses JIRA Software for Release Management

Atlassian

JIRA Software is an extremely flexible and powerful tool, which can be used in a variety of ways. As a 9-year Atlassian veteran, Nick Pellow will outline the innovative ways JIRA Software is being used within Atlassian, and what features our teams find most useful to enhance their processes. I'll cover practical tips, such as how we run Scrum and Kanban, and how we've customized projects and boards to best plan, track, and ship software with the precision of a black-belt judo master. Nick Pellow, Development Manager JIRA Software, Atlassian

Black Belt Tips for JIRA Software

Atlassian

Throughout Europe, energy suppliers are replacing conventional electricity meters with smart meters to modernize and reduce energy consumption. Bringing smart meters into 300,000 Norwegian homes is no easy task, but requires an intricate and labor-intensive process to plan, book, dispatch and run each installation. At ReSight, we've set up JIRA Core to track this process. Learn how we customized our unique workflow, issue fields, screens and schemes. You’ll also gain insight into how we enhanced our instance with both custom-made and Marketplace add-ons and how we integrated our back-end systems using JIRA's REST APIs. Lastly, we'll show you how we monitor and report our progress using JIRA Core dashboards. From this talk, you'll walk away with lots of ideas on how JIRA can be used for all kinds of projects outside of software development. Helene Lund Engebø, CEO, ReSight

How JIRA Core Helps 300,000 Houses Become Smarter

Atlassian

Today's world is a DevOps one, and as a Product Manager that means you're part of the dev team. As teams transition from building products to running services, you must adapt your role as teams embrace DevOps and create dedicated Site Reliability Engineering (SRE) teams. Consider these questions: What's your role during an incident? How do you communicate to customers? Are you incorporating reliability metrics into your product roadmap? The good news is, you can contribute to running services just as much as building products. In this talk, learn how Product Managers on the JIRA team contribute to incident management and review, support a green build culture, plan for reliability, and roll out features and experiments in a services-first world. Dave Meyer, Senior Product Manager, Atlassian

A Product Manager's Place in a DevOps World

Atlassian

At Archimedes, we create exhibitions, brand spaces, and interactive installations for science centers, public institutions, and corporate clients worldwide. We embrace a highly integrated development process that covers project lifecycles from conception to fabrication to deployment. We started by using JIRA for small software projects and over the years increased our use of Atlassian products to the point where they are deeply tied to all our business processes and define a single source of truth for HR, cash flow management, procurement, in-house manufacturing – literally everything from buying the first washer to making our products shine. In this talk, learn how Atlassian helped us: -find transparency through defined processes -coordinate complex, fast-paced projects -integrate more workflows -balance workloads across different teams -manage thousands of issues every day Stephan Spenling, CTO, Archimedes Exhibitions GmbH

How Archimedes Uses Atlassian Tools Across All Teams

Atlassian

Are you someone who runs multiple stable Scrum teams, but is curious about migrating to Kanban? Do you think Kanban might lead to a loss of team control and productivity? Join me as I first discuss the pros and cons of Scrum and Kanban. Because whichever you choose, it should be for the right reasons. Next, I'll talk about how I used JIRA Software's powerful reports and metrics to migrate three Scrum teams to Kanban, without losing agility or control. I'll highlight some aspects of our migration: - Rituals - How to run metric driven planning meetings and retrospectives in a Kanban oriented team - Estimation - From point estimation to story consistency - Metrics - Fluency and cycle times for estimations Marcio Ghiraldelli, Senior Quality Engineer, Atlassian

Scrum Control or Kanban Agility? You Can Have both, Using Metrics

Atlassian

The newest addition to the Atlassian product lineup, Trello, was acquired in January, 2017. Trello is a visual collaboration tool that creates a shared perspective on any project. Trello’s boards, lists and cards enable you to organize and prioritize your personal and work life in a fun, flexible, and rewarding way. In this session, you’ll walk through numerous example boards to illustrate how you and your team can use Trello to get perspective, see how Trello works with other Atlassian products, and discover the tips and tricks that will help you become a Trello power user. Justin Gallagher, Group Product Manager, Trello, Atlassian

Hello, Trello! An insider's guide

Atlassian

Speed and efficiency. They're focal points for every business discipline, and IT Operations & Support is no exception. These teams must be on the lookout for the next generation of tools and technology to streamline their systems and stay competitive. Here are some of the many topics we'll cover in this talk: - Internal collaboration gaps between engineering and IT teams, and how to bridge them - Centralizing service operations management with self-service portals for internal employees and customers alike - Handoffs and metrics in a high volume (75K requests annually) and global support (over 100 service agents globally) context Advanced analytics data for proactive process and product improvements - We'll also talk about the criteria for selecting Atlassian as your go-to platform, and how to integrate and automate business rules into service requests using the Atlassian ecosystem. We hope you'll come away with a solid understanding of how to build, grow, and maintain a successful service operations .

How Trade Desk Built a Connected Team of 100+ Service Agents

Atlassian

As enterprises continue to transition their technology organizations to operate at higher velocity and break down barriers with DevOps transformations, they need to be able to respond to service disruptions and incidents quickly, and with minimal impact to the productivity of their teams. Learn how ViaSat — a global provider of satellite and wireless communications — securely connects businesses, governments, and military organizations to the Internet using structure, automated toolsets and teams. Join Marty Jackson, Director, Office of the CTO, xMatters and Chris Crocco, ViaSat’s Network Solutions Engineer, to learn how the ViaSat team managed the integration of alerting, issue tracking and change and release management with JIRA Software, JIRA Service Desk, HipChat and xMatters into a complex IT ecosystem and drove the company’s transition from an Operations to a DevOps-centric model of IT incident communications. Vincent Wong, Product Manager, Atlassian Jared Sutherland, Product Manager, Intuit

Modern Operations at Scale within Viasat – How to Structure Teams and Build A...

Atlassian

At Atlassian, we believe in a simple motto - automate everything that can be automated and streamline everything that can't. Join us on a journey into automation and demystify processes that allow you to supercharge JIRA Service Desk. From the automatic assigning of incidents to the correct team member, to resolving tickets once the linked JIRA software ticket is resolved -- discover how JIRA Service Desk scales with your business. Let the product work for you, so your IT team can work on what matters. Vincent Wong, Product Manager, Atlassian

Automation Awesomeness: Scaling JIRA Service Desk

Atlassian

Devops has transformed how teams build and run software: you build it, you own it! In this new Devops world, the methods of responding to and resolving incidents have changed dramatically. You no longer have a 24/7 NOC handling incident response; instead, developers and ops engineers must work closely together and go on-call to triage alerts and resolve incidents. At the same time, with more applications and services moving to the cloud, the impact of major outages has increased. Most enterprises have multiple major incidents each month and lose over $100K in revenue and lost productivity per incident. This session describes how to effectively manage the entire incident lifecycle end-to-end, helping teams lower the duration and frequency of outages. We will cover the following topics: - How to prepare and train your team up-front to respond to incidents quickly. - How to handle triaging large volumes of alerts, identify the severity of issues, and loop in the right people ASAP. - How to manage and run an incident effectively across multiple responders and stakeholders. - How to create a learning feedback loop in your incident lifecycle by conducting a blameless post-mortem. Overall, we will cover people, process, and tools as they relate to the incident lifecycle. In terms of tooling, we will feature a best-of-breed toolchain from Atlassian, PagerDuty, and other modern innovative companies. Alex Solomon, CTO and Co-Founder, PagerDuty

Agile Incident Response and Resolution in the Wold of Devops

Atlassian

Atlassian builds tools for all teams... including ourselves! There's no right or wrong way to use our tools, but we've developed some best practices that a lot of our teams have adopted. In this session you will learn how an Atlassian developer uses JIRA, Confluence, HipChat, BitBucket, and Bamboo to plan, build, test, and continuously deploy HipChat. You will also learn some tips and tricks for using the Atlassian toolset to take a project from a concept to a released application. David Cruz, Senior Software Developer - HipChat Desktop, Atlassian

A Day in the Life of a HipChat Developer

Atlassian

There are many styles of code review, and it can be tough to find a process that works for your team. Do you use Git, SVN, or something more exotic? Do you prefer pre-commit reviews or pull requests? Do you branch, fork, or do everything with patches? This talk examines the various review options adopted by professional teams. We'll investigate Bitbucket pull requests, Crucible reviews, and Gerrit, discussing the pros and cons of each workflow. Then I'll show you the battle-hardened peer review process - refined over thousands of code reviews and pull requests - that Atlassian teams use to maintain the high quality expected of our products. Tim Pettersen, Senior Developer Advocate, Atlassian

Code Reviews vs. Pull Requests

Atlassian

HipChat operates a ‘You Build It, You Run It’ service model, where developers are responsible for building, testing, and operating their systems. While we have a high speed of development, things can break – but we also recover quickly. Learn about how we've integrated best practices within our planning, building, operating and learning processes to optimize for speed and efficiency but also mitigate, prepare for, and handle incidents. The presenter will walk you through four steps for how to operate at a high speed of development and also prepare for any incident — planning, prevention, preparation and collecting feedback— and instruct you on how you can build these processes into your Atlasssian workflow (including JIRA Software, HipChat, Bitbucket, Confluence, Bamboo, and StatusPage). Learn about: - Planning: How we use JIRA Software and Confluence to plan roadmaps and sync up with teams - Prevention: Best practices during code reviews and testing - Preparation: How we prepare for incidents with war games Review: Collecting feedback, assessing incident causes and improving our processes Come out of this session with a newfound understanding of how to use Atlassian products within your DevOps workflow! Mickie Betz, Software Developer, Atlassian

How HipChat Ships and Recovers Fast with DevOps Practices

Atlassian

Do you think Bitbucket is just a tool for developers and their code? Or perhaps you feel features like diff-views, version control and pull requests have no place in your team's workflow? Well guess again, because Bitbucket works just as well for people like designers, analysts and content writers as it does for software developers! Join Product Manager Amber Van Hecke as she explains how Bitbucket can help your team. She'll explain the basics to get your non-coding related projects up and running, and showcase how various teams at Atlassian are using Bitbucket for marketing content, design, data sharing and more. Amber Van Hecke, Product Manager, Atlassian

Developers Use Bitbucket and So Can You

Atlassian

For those using Bitbucket Cloud, Bitbucket Pipelines makes Docker a first class citizen in your CI/CD cycle. Join Bitbucket Pipelines developer Philip Hodder to learn how containers are changing the way developers build software for the cloud, enabling faster development and safer deployments in a microservices world. He'll use practical, real-world examples to show best practices for testing, building, and pushing your Docker containers in the cloud when using Bitbucket Pipelines. Philip Hodder, Developer, Atlassian

Unleashing Docker with Pipelines in Bitbucket Cloud

Atlassian

Configuration as Code in Bamboo

Atlassian

Downtime is stressful. Don't let a lack of communication add extra weight to your issues. Join Scott Klein, co-founder and head of product for StatusPage, as he shares best practices for communicating effectively during an incident. He'll offer tips for increasing communication efficiency, reducing ticket load, and how to use StatusPage alongside the rest of your Atlassian toolset. Finally, Scott will discuss the expert ingredients of an effective incident response team: pre-incident preparation and post-incident followup with affected users. Scott Klein, Head of Product - StatusPage, Atlassian

Sink or Swim: How Incident Communication Keeps You Afloat

Atlassian

The rise of microservices and containers has dramatically accelerated software delivery. With shorter release times and increased complexity, access to real-time feedback from your build pipeline can be the difference between successful and failed releases. Join Dominick from Splunk for five best practices successful teams adopt to propel software delivery to warp speed while increasing collaboration and breaking down silos. Spoiler alert: this session will include best practices for using analytics to correlate insights into a variety Atlassian tools including JIRA Service Desk, JIRA, HipChat, Bamboo, and more! Domnick Eger, Global DevOps Practitioner, Splunk

Software Delivery at Warp Speed: Five Essential Techniques

Atlassian

En vedette (20)

From Start-up to Grown-up – FlixBus's Journey with Trello + Atlassian

How Nespresso Uses JIRA Software for Release Management

Black Belt Tips for JIRA Software

How JIRA Core Helps 300,000 Houses Become Smarter

A Product Manager's Place in a DevOps World

How Archimedes Uses Atlassian Tools Across All Teams

Scrum Control or Kanban Agility? You Can Have both, Using Metrics

Hello, Trello! An insider's guide

How Trade Desk Built a Connected Team of 100+ Service Agents

Modern Operations at Scale within Viasat – How to Structure Teams and Build A...

Automation Awesomeness: Scaling JIRA Service Desk

Agile Incident Response and Resolution in the Wold of Devops

A Day in the Life of a HipChat Developer

Code Reviews vs. Pull Requests

How HipChat Ships and Recovers Fast with DevOps Practices

Developers Use Bitbucket and So Can You

Unleashing Docker with Pipelines in Bitbucket Cloud

Configuration as Code in Bamboo

Sink or Swim: How Incident Communication Keeps You Afloat

Software Delivery at Warp Speed: Five Essential Techniques

Similaire à SecOps - Bringing Agility into Security

VIPIN_GUPTA_SECURITY_ANALYST

VIPIN KUMAR GUPTA

Is that requirement from NIST 800-53 Controls or NIST 800-190? If you've ever wondered where those pesky cloud security controls come from, this meetup is for you. In this Meetup, Jame Strong and Jason Lutz from Contino (an AWS Premier Consulting Partner) will discuss how Contino views DevSecOps. They will review the Benefits of DevSecOps: - Cost Reduction - Speed of Delivery - Speed of Recovery - Security is Federated - DevSecOps Fosters a Culture of Openness and Transparency During this Meetup, James and Jason will show you how to harden and secure a container pipeline and AWS network. Briefly, they will demonstrate how to deploy accounts with a Cloud Security Posture and review security best practices from AWS, CIS, and NIST. They will also touch on how to integrate changes in your infrastructure pipelines to adhere to your Enterprise's Security Compliance Guidelines. If you're interested in integrating security and compliance into your Application and Infrastructure pipelines to realize the benefits of DevSecOps, join us in this virtual meetup.

AWS Cloud Governance & Security through Automation - Atlanta AWS Builders

James Strong

2017-11 Three Ways of Security - OWASP London

Jeff Williams

According to Gartner, the IaaS market grew at a blistering 42.8% in 2017—twice as fast as SaaS. And with last year’s high-profile data exposures, the focus on bolstering IaaS security practices has increased. We’ve worked with AWS and hundreds of IaaS security professionals to develop a list of security practices specifically designed to protect AWS environments and the applications and data within them. In this session, you’ll discover: common yet preventable scenarios that can result in the loss of corporate data, security best practices for user and admin behavior monitoring, secure auditable configuration, Amazon S3 data loss and threat prevention, blueprints for how a solution-based approach (including bridging to your on-premises best practices) can provide IaaS visibility and control, step-by-step guidance on how to gain visibility across all workloads, protect against advanced threats, and discover insights into lateral threat movements, and recommendations for creating a successful DevOps workflow that integrates security.

McAfee Skyhigh: Elevating Your AWS Security Posture (SEC307-S) - AWS re:Inven...

Amazon Web Services

IAM and the rest of the security stack -- network and applications firewalls, threat and intrusion detection -- are often treated as entirely separate silos. It's time this changed. By orchestrating and integrating these disparate systems, information from the data security tier can inform your IAM processes in real-time, leading to better Authorization decisions and provide user experience improvements. This workshop, informed by and demonstrating real-world examples, will provide insight into the kind of cross-system orchestration that can help make a tangible difference to your security and to usability.

CIS 2015 Identity and Data Security : Breaking the Boundaries - Nathanael Cof...

CloudIDSummit

2009: Securing Applications With Web Application Firewalls and Vulnerability ...

Neil Matatall

Building an Automated Security Fabric in AWS

Amazon Web Services

Prevent Security Risks with Cloud Security Posture Management | Mindtree

AnikeyRoy

RSA 2014: Non-Disruptive Vulnerability Discovery, Without Scanning Your Network

Skybox Security

Building Security Operation Center

S.E. CTS CERT-GOV-MD

Application Security on a Dime: A Practical Guide to Using Functional Open So...

POSSCON

Revolutionizing Advanced Threat Protection

Blue Coat

스폰서 발표 세션 | 클라우드 환경에서의 SIEMLESS 통합 보안 서비스, Alert Logic 채현주 보안기술본부장, Openbase 클라우드 환경의 다양한 서비스로 인해 자산을 지키는 보안을 위한 작업은 더욱 복잡해지고 있다. 기존 온프라미스에서 해 오던 방식으로 클라우드 보안에 접근하는 것은 비용 및 자원활용 측면에서도 낭비이며, 기술의 발전 속도를 따라가기도 어렵다. 본 세션에서는 클라우드 환경의 보안 특성을 살펴보고 효율적인 보안시스템 구축을 위한 가이드를 제시하며, 아울러 전문적인 보안 지식이나 자체 구축 보안시스템 없이도 즉시 활용할 수 있는 Alert Logic의 보안 서비스를 소개한다.

클라우드 환경에서의 SIEMLESS 통합 보안 서비스, Alert Logic - 채현주 보안기술본부장, Openbase :: AWS Sum...

Amazon Web Services Korea

Public cloud providers operate on a shared responsibility model, which places the onus on the customer to define and secure the data and applications that are hosted within cloud infrastructure. To that end, it is critical that organizations accurately and selectively pinpoint which cloud workloads and virtual IT assets must be monitored, updated and patched based on developing threats to customer data and applications. In this webcast, Mark Butler, Chief Information Security Officer at Qualys, and Hari Srinivasan, Director of Product Management for Qualys Cloud and Virtualization Security detail how you can gain complete visibility of your organization’s entire cloud asset inventory and security posture to help you keep up with shared security responsibility models across public cloud infrastructure. The presentation covers: • Challenges surrounding increased migration to public clouds • Using automation for secure DevOps • How to ensure effective and efficient operations To watch the on-demand webcast, visit https://lps.qualys.com/securing-your-public-cloud-infrastructure.html

Securing Your Public Cloud Infrastructure

Qualys

AWS provides tools to improve your security posture, by providing ways of implementing detective and reactive controls that will detect and remediate security threats. We’ll look at the various services and the features that you can employee, such as AWS Inspector, AWS Trusted Advisor, AWS Config and Config Rules and CloudTrail. We’ll explore how they work and how they should be deployed as part of an overall security strategy.

Toward Full Stack Security

Amazon Web Services

Extending Amazon GuardDuty with Cloud Insight Essentials

Alert Logic

IT security teams are increasingly pressured to accomplish more, with fewer resources. Trend Micro Deep Security helps organizations understand and overcome their most common cloud security challenges, without having to expand their cloud tool set. Join the upcoming webinar to learn how Essilor, a world leader in the design and manufacturing of corrective lenses, has enabled their IT teams to apply, maintain and scale security across their AWS environments by overcoming these common challenges in cloud migrations. We will discuss how Essilor managed, and overcame, the pace of change when adopting a cloud environment, the transformation of their traditional IT security roles, and how they chose the right security tools and technology to achieve their business goals.

Seeing More Clearly: How Essilor Overcame 3 Common Cloud Security Challenges ...

Amazon Web Services

It is given that you will be hacked, irrespective of your level of cyber security. Learn how you can detect, respond & recover from cyber attacks. Quicker. Key Content: 1. The threat landscape and how existing monitoring and response capabilities are ineffective in detecting and responding to advanced cyber attacks 2. Lifecycle and speed of an attack and how early detection can help in responding and managing losses 3. Blueprint for an effective (and vendor agnostic) Incident Management Program If you have been tracking the Cyber Security News lately, one thing is for sure - Cyber Attacks are imminent and it is a matter of time when you will be the next one to come under an attack, if not already. What Robert Mueller, Former Director of FBI said in RSA Conference in March 2012 is still very relevant. "I am convinced that there are only two types of companies: those that have been hacked and those that will be. ” and what he says further makes it worse "And even they are converging into one category: companies that have been hacked and will be hacked again." Cyber attacks are no more a work of lone warriors or a group of hackers but involve cyber crime syndicates, collaborating and pumping large amount of money, precision, knowledge, expertise and persistence. Their capabilities are equal if not better than state sponsors. Data says that cyber security incidents affects all kinds of organizations - small, medium or large and across all industries - financial, telecom, utility, health care, education and more. Organizations fail to detect and respond to security incidents due to weak monitoring capabilities and lack of expertise, tools and procedures. In this webinar we will look at the cause and effect of the problem, analyze preparedness and learn how you can better prepare, detect, respond and recover from cyber attacks.

Webinar: Get Ready to Detect, Respond & Recover from a Cyber Attack

Aujas

Overview

Nathan Burke

Presentation for information security & hacking

faizanmalik255119

Similaire à SecOps - Bringing Agility into Security (20)

VIPIN_GUPTA_SECURITY_ANALYST

AWS Cloud Governance & Security through Automation - Atlanta AWS Builders

2017-11 Three Ways of Security - OWASP London

McAfee Skyhigh: Elevating Your AWS Security Posture (SEC307-S) - AWS re:Inven...

CIS 2015 Identity and Data Security : Breaking the Boundaries - Nathanael Cof...

2009: Securing Applications With Web Application Firewalls and Vulnerability ...

Building an Automated Security Fabric in AWS

Prevent Security Risks with Cloud Security Posture Management | Mindtree

RSA 2014: Non-Disruptive Vulnerability Discovery, Without Scanning Your Network

Building Security Operation Center

Application Security on a Dime: A Practical Guide to Using Functional Open So...

Revolutionizing Advanced Threat Protection

클라우드 환경에서의 SIEMLESS 통합 보안 서비스, Alert Logic - 채현주 보안기술본부장, Openbase :: AWS Sum...

Securing Your Public Cloud Infrastructure

Toward Full Stack Security

Extending Amazon GuardDuty with Cloud Insight Essentials

Seeing More Clearly: How Essilor Overcame 3 Common Cloud Security Challenges ...

Webinar: Get Ready to Detect, Respond & Recover from a Cyber Attack

Overview

Presentation for information security & hacking

Plus de Atlassian

International Women's Day 2020

Atlassian

10 emerging trends that will unbreak your workplace in 2020

Atlassian

Ever wondered what Atlassian engineers do in their 20% time? Join Forge engineering lead Tim Pettersen on a lightning tour of how Forge is being used inside Atlassian. Attendees will get a rare view into some of the apps, tools, and tweaks we’ve built internally on top of Forge in the spirit of dogfooding and innovation. Come along and be inspired with some great ideas for improving and automating your own teams' workflows!

Forge App Showcase

Atlassian

Race out of the gate with Forge UI: a new way of building UI extensions for Atlassian products. In this session, Forge UI Developer Experience lead Peter Gleeson will demonstrate how build an Editor macro from scratch! Attendees will learn about Forge foundational concepts such as the FaaS dev loop, Forge CLI, and how to construct UIs from Forge UI components. This session provides a great introduction to the Forge platform for any developer looking to get productive with editor apps and Forge UI.

Let's Build an Editor Macro with Forge UI

Atlassian

In the words of Jeff Atwood: “JavaScript is the lingua franca of the web”. It’s also the first language we’ve chosen to support in Forge. In this session, Forge engineer Shorya Raj will walk through the Node.js isolate based runtime you’ll be using to write apps for Forge. Attendees will learn about the unique features of the Forge JavaScript Runtime, such as automatic authentication and tenant context management. Shorya will also cover the differences between the Runtime, conventional browser, and Node.js APIs. Developers or attendees with some programming experience will get the most out of this session.

Meet the Forge Runtime

Atlassian

UI extensibility is an integral part of Atlassian's ecosystem story. In cloud, traditionally this has been accomplished with the humble iframe. In this session you will learn about Forge UI, an additional and innovative way to build visual apps for Atlassian products. Join Product Manager Simon Kubica and Senior Developer Michael Oates from the Forge team in exploring the underlying concepts and technology powering Forge UI, and learn how it will unlock exciting new opportunities in our ecosystem.

Forge UI: A New Way to Customize the Atlassian User Experience

Atlassian

The Forge platform contains some powerful primitives for binding functions to Atlassian events and webhooks emitted by third-party SaaS systems. Join Platform Services Engineer Tomek Sroka as he gets hands-on with Forge Product Triggers and Web Triggers to build a powerful integration with surprisingly little code. Attendees will walk away with a good understanding of the Forge dev loop and some tips and tricks for improving their own team’s workflows.

Take Action with Forge Triggers

Atlassian

Observability is a critical component of any Cloud development platform, and we have some exciting logging, monitoring, and debugging features planned for the Forge toolchain. In this lightning talk, Senior Developer James Hazelwood from Forge infrastructure team will give an overview of Forge logging and tunnelling features, explain how different environment types effect observability, and share some expert tips and tricks for detecting and troubleshooting issues in your Forge apps.

Observability and Troubleshooting in Forge

Atlassian

Security and trust have become increasingly important requirements for our customers in Cloud. We’re working to make it easier for you to build and maintain secure apps for Atlassian products. In this session, Engineering Team Lead Dugald Morrow and Principal Product Manager Joël Kalmanowicz will explain how security and trust have been baked into the Forge framework and the benefits the platform can offer you and your users. Learn how much less work it can be to build trusted apps customers will love on Forge by going deep on the safeguards we’re putting in place. Developers or attendees with some software security experience will get the most out of this session.

Trusted by Default: The Forge Security & Privacy Model

Atlassian

Creating apps with Forge and its UI frontend components is now easier than ever. Join Senior Designer Allard van Helbergen and Product Manager Josephine Lee as they walk through the story of designing Forge UI. What is a declarative UI and why did we choose this paradigm? What are all the considerations that go into defining the set of components to build apps with? And how do you make ‘creating apps’ simple? Walk away understanding the foundations of Forge, how all the different components work together, and where Forge UI is headed in the future.

Designing Forge UI: A Story of Designing an App UI System

Atlassian

After a day of learning about the exciting features of Forge, get ready for a peek under the hood to discover how it’s all implemented. Join Forge Architect Patrick Streule as he goes deep on topics such as Forge FaaS infrastructure, the internal workings of tenant isolation, and automatic authentication. Attendees will also get a glimpse of some features we’re looking at building into the future of Forge, such as a serverless data store for apps and more!

Forge: Under the Hood

Atlassian

How do you stay on top of your work when it is scattered across multiple Atlassian products? "If only there was a single place where I could see all my activity..." - sounds familiar? We are going to provide you an insight into what lead to the creation of a new Activity API. Following last year’s Atlas Camp announcement from our CTO Sri Viswanath, Atlassian is moving onto GraphQL - new Activity API is one the first pieces of the GraphQL Atlassian Platform and is the technology behind start.atlassian.com. Join Sergey Meshkov, Senior Developer, who will provide you a sneak peek of the new GraphQL Activity API as it will soon be available to our vendors.

Access to User Activities - Activity Platform APIs

Atlassian

Our designers work  3x quicker  with the Atlassian Vendor Sketch Plugin — and now we’re unleashing these superpowers to the Atlassian Ecosystem. If you mockup screens for code or marketing, we’ll help you drag and drop your way to an Atlaskit design in less than 10 minutes. And if you’re a designer, you’ll want to hear about our pixel-perfect component library and suite of seamless Sketch integrations. Join Atlassian’s resident Sketch aficionado, Huw Evans, to learn about:  Sketch Components: If it’s in Atlaskit, it’s now in Sketch. And introducing the Symbol Palette, the quickest way to find the right component for the job.  Product Templates: Spark inspiration by building your designs inside realistic screens from Jira & Confluence — or craft hero images for your Marketplace listing!  Color and Text Styles: Heard of N75? H400? If those mean nothing to you, we’ll run through how to make your users feel at home by using Atlassian colors & typography, right inside Sketch.  Data Suppliers: Say goodbye to Lorem Ipsum. Learn how to use Sketch Data Suppliers to generate realistic copy using live data from Jira, Confluence and Bitbucket. Bonus: How we used AI to create people who don’t exist! ‍♀️ It's All Open Source: How we made it really easy to customise the Atlassian Vendor Sketch Plugin for your team's needs.

Design Your Next App with the Atlassian Vendor Sketch Plugin

Atlassian

You’d never knowingly ship something to your customers that didn’t deliver value, would you? Would you still stand your ground if you were under pressure to get a team of developers working on something? You probably know that one of Atlassian’s most well-known values is “Don’t f*** the customer”, so learn what happened when a lean product team decided to tear up the roadmap because they were brave enough to admit they didn’t understand their customers well enough. Join Janel Blattler, as she shares how her team used research to unveil a new plan in just a few weeks. You’ll be able to practice some techniques and walk away with a bucket load of inspiration. Come along if you’d like to run research, but worry that you don’t have enough time or lack the skills to do so – you don’t need to be a researcher on your team. This session is for you if you’re looking for ways to drive customer empathy closer in the team, or you’d like to up your game and discover some new techniques for delivering lean research with actionable insights.

Tear Up Your Roadmap and Get Out of the Building

Atlassian

When it comes to designing apps and new features, we just can't get enough of metrics. In an age where we can collect data from almost anything, how can we cut through the noise and focus on the right metrics to measure the success and failures of the apps that we’re building? Join Atlassian Product Manager Josephine Lee as she delves through what exactly makes a good metric. Throughout the talk, we’ll walk through real Atlassian examples of good and bad metrics. By exploring a framework for measurement, we’ll cover detailed features that showcase how best to measure and choose the right set of success, supportive, and counter metrics. You'll walk away with tips and learnings from Atlassian’s approach to measuring success, and learn how to use data and metrics to inspire action in your apps.

Nailing Measurement: a Framework for Measuring Metrics that Matter

Atlassian

Color-blind people are using your apps. 1 in 12 men is color blind. And for women, this is 1 in 200. Building apps that work well for color blind people is not difficult. Some simple techniques help us with the design of our interface. And some tools help us see what color blind people see. In this talk, Maarten Arts of Avisi will look at common varieties of color blindness. We will look at apps through the eyes of a color-blind person. And we will discover what color-blind people struggle with. Regardless of whether you're a designer or developer, this talk will equip you with the skills and the tools you need to make sure that your app works for color-blind people.

Building Apps With Color Blind Users in Mind

Atlassian

The words we choose have the power to include or alienate our users. The reality is that for many, English is spoken as a second language. And unless you're going to localize your product for those major non-English speaking markets, you'll need to thoughtfully create content that is accessible to a larger audience. But how do we create products that maintain a sense of personality without isolating a wide audience of non-native speakers? Join Atlassian Content Designer, Roana Bilia, as she walks you through why thoughtful, inclusive content, is key to creating well-designed user experiences. You'll walk away with foundational principles for good UX copy when optimizing your product UI, a few quick wins that you as creators and developers can incorporate into your next products, as well as a set of mistakes to avoid that companies—including Atlassian—have made, which prioritized native speakers but isolated non-native speakers.

Creating Inclusive Experiences: Balancing Personality and Accessibility in UX...

Atlassian

We hear it all the time, and we get it. Diversity and inclusion are important! But isn't it an HR problem? HR may be able to help with diversity but inclusion or creating an inclusive environment is everyone's responsibility. So how do we create an inclusive environment that celebrates diversity and engages and supports everyone? Isabel Nyo will be sharing best practices and lessons she has learned along the way. She will also be sharing her experience as a minority, a female technical leader, in the technology industry.

Beyond Diversity: A Guide to Building Balanced Teams

Atlassian

In September 2018, K15t took its mission to go self-managed to the next-level when the entire company worked together to decide on the Next Big Thing™ to build for Atlassian users and present it at Summit in Las Vegas. In this session, Anshuman Dash, an intern turned software engineer, turned product manager, shares his journey of professional self-discovery. In under five months, he joins a freshly assembled, self-managed team in building a new Atlassian Marketplace app. Dash will give a quick intro to what it means for a team to be self-managed. Then, he'll share his observations and experiences on the team, as well as the best-practices, patterns, and processes K15t has discovered along the way. Whether you are a new team with a kick-ass product idea or a big company figuring out ways to scale, this talk will provide you with practical tips and ideas your team can try out!

The Road(map) to Las Vegas - The Story of an Emerging Self-Managed Team

Atlassian

Designing for the enterprise comes with a unique set of challenges; ensuring readability and accessibility at scale, meeting the needs of multi-layered organizations, and building a trust when your software - used by dozens of thousands of employees - is considered mission-critical. At Atlassian, we've spent countless hours digging deep into our enterprise customer's needs and we've gathered a vast repository of insights. In this talk, Pawel Wodkowski, a senior designer on Jira Server, will share all that we've learned from our research (while not being shy about busting some of those wild admin myths!). You'll get a crash course in what it means to design for scale the Atlassian way.

Building Apps With Enterprise in Mind

Atlassian

Plus de Atlassian (20)

International Women's Day 2020

10 emerging trends that will unbreak your workplace in 2020

Forge App Showcase

Let's Build an Editor Macro with Forge UI

Meet the Forge Runtime

Forge UI: A New Way to Customize the Atlassian User Experience

Take Action with Forge Triggers

Observability and Troubleshooting in Forge

Trusted by Default: The Forge Security & Privacy Model

Designing Forge UI: A Story of Designing an App UI System

Forge: Under the Hood

Access to User Activities - Activity Platform APIs

Design Your Next App with the Atlassian Vendor Sketch Plugin

Tear Up Your Roadmap and Get Out of the Building

Nailing Measurement: a Framework for Measuring Metrics that Matter

Building Apps With Color Blind Users in Mind

Creating Inclusive Experiences: Balancing Personality and Accessibility in UX...

Beyond Diversity: A Guide to Building Balanced Teams

The Road(map) to Las Vegas - The Story of an Emerging Self-Managed Team

Building Apps With Enterprise in Mind

Dernier

This presentation covers the following topics: What is logging? The purpose of logging: Debugging The purpose of logging: Security The purpose of logging: Stats & analytics Traditional logging Traditional logging: Advantages Traditional logging: Disadvantages The solution: Large-scale logging Large-scale logging: Core principles Large-scale logging: Solution types Large-scale logging: Cloud vs on-prem Large-scale logging: Operational complexity Large-scale logging: Security Large-scale logging: Costs Large-scale logging: On-prem comparison - Elasticsearch - Grafana Loki - VictoriaLogs On-prem comparison: Setup and operation On-prem comparison: Costs On-prem comparison: Full-text search support On-prem comparison: How to efficiently query 100TB of logs? On-prem comparison: Integration with CLI tools VictoriaLogs for large-scale logging VictoriaLogs demo instance - Ingestion rate: 3600 messages / minute - The number of log messages: 1.1 billion - Uncompressed log messages’ size: 1.5TB - Compressed log messages’ size: 23GB - Compression ratio: 47x - Memory usage: 150MB VictoriaLogs CLI integration demo - Which errors have occurred in all the apps during the last hour? - How many errors have occurred during the last hour? - Which apps generated the most of errors during the last hour? - The number of per-minute errors for the last 10 minutes - Status codes for the last hour - Non-200 status codes for the last week - Top client IPs for the last 4 weeks with 404 and 500 response status codes - Per-month stats for the given IP across all the logs Large-scale logging solution MUST provide excellent CLI integration VictoriaLogs: (temporary) drawbacks VictoriaLogs: Recap - Easy to setup and operate - The lowest RAM usage and disk space usage (up to 30x less than Elasticsearch and Grafana Loki) - Fast full-text search - Excellent integration with traditional command-line tools for log analysis - Accepts logs from popular log shippers (Filebeat, Fluentbit, Logstash, Vector, Promtail, Grafana Agent) - Open source and free to use!

Large-scale Logging Made Easy: Meetup at Deutsche Bank 2024

VictoriaMetrics

Devoxx UK 2024 - Going serverless with Quarkus, GraalVM native images and AWS...

Bert Jan Schrijver

WSO2Con2024 - Hello Choreo Presentation - Kanchana

WSO2

We specialize in Psychic Readings, Psychic Love Spells, Binding Love Spells, Obsession Spells, Voodoo Spells, Lottery Spells, Marriage Spells, Black Magic Spells, Palm Readings & much more. Are you depressed? We perform this come-to-me love spell that works instantly with the aim of Winnipeg back the victim to the person performing the magic. Have you lost your lover? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? Do u need to solve any relationship problem? Contact the powerful spells caster chief kule with love spells that work overnight and love spells that really work. Have you found yourself infatuated with a special someone you think could be the one? Are you looking for a spell to provide them with a nudge in the right direction? Or maybe the spell you cast didn’t achieve the results you were hoping for? Whether you’re new or versed in the ways of spell casting, we’re here to help. Today we’re going to provide you with a detailed guide on the types of love spells to cast. Not only that but there’s something for those who wish to find outside advice from more advanced spell casters. We’re also going to provide you with the top sites available to help you with your dilemma. Let’s begin our journey by educating ourselves on love magic and what a real love caster looks like. Love Magic and Love Casters Love magic made its first appearance back in Ancient Egypt and has been an active practice since. This type of magic is a branch of traditional magic and can be practiced in various ways. Typically the more common use of love magic is through the work of spells, but other methods look like Charms Rituals-LOVE Potions-Dolls and even Amulets If you are interested in becoming a love caster, be prepared for what’s to come. A genuine love caster knows that the art of love casting is no easy feat and shouldn’t be done casually. You should know that not only does it require you to be gifted spiritually, but you must be ready to serve others. Someone who is considered a real love caster has experience in all manner of spells, no matter the difficulty. Training yourself in attraction, commitment, and marriage spells is an excellent place to start. But this by no means will make you a professional. Practice your craft and expand your knowledge; understand that you will possess the ability to help others in time truly. Types of Love Spells What better way to start broadening your experiences with love spells than by learning more about them? These spells work like just about any other spell. Simply apply your intention, use a medium (sigils, mantras, candles, or charm bags), and top it off with establishing the belief that you will receive what you want. So what kind of spells are available and which ones suit your needs the best? Let’s take a look at the many options you have at your disposal. Attraction Spells

%+27788225528 love spells in Knoxville Psychic Readings, Attraction spells,Br...

masabamasaba

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Philip Schwarz

tonesoftg

lanshi9

WSO2CON 2024 - Building the API First Enterprise – Running an API Program, fr...

WSO2

WSO2CON 2024 Slides - Open Source to SaaS

WSO2

%in ivory park+277-882-255-28 abortion pills for sale in ivory park

masabamasaba

WSO2CON 2024 - Cloud Native Middleware: Domain-Driven Design, Cell-Based Arch...

WSO2

ADR, or Architecture Decision Record, is a valuable tool in software development for several reasons. It provides a centralized location for documenting and tracking architectural decisions, aiding both current and future team members. ADRs enhance communication among team members by documenting the rationale behind architectural decisions, especially beneficial during onboarding of new team members or when revisiting decisions. They serve as a knowledge base, enabling teams to learn from past decisions and refine their decision-making process. Additionally, ADRs contribute to transparency by helping stakeholders understand the reasons behind specific architectural choices. As with any other tool or process, introducing them into an organization can face several obstacles, and overcoming these challenges is crucial for successful implementation. In this talk I go through some common problems and our way of solving them.

Architecture decision records - How not to get lost in the past

Papp Krisztián

WSO2Con2024 - WSO2's IAM Vision: Identity-Led Digital Transformation

WSO2

We specialize in Psychic Readings, Psychic Love Spells, Binding Love Spells, Obsession Spells, Voodoo Spells, Lottery Spells, Marriage Spells, Black Magic Spells, Palm Readings & much more. Are you depressed? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? Do u need to solve any relationship problem? Contact the powerful spells caster chief kule with love spells that work overnight and love spells that really work. Have you found yourself infatuated with a special someone you think could be the one? Are you looking for a spell to provide them with a nudge in the right direction? Or maybe the spell you cast didn’t achieve the results you were hoping for? Whether you’re new or versed in the ways of spell casting, we’re here to help. Today we’re going to provide you with a detailed guide on the types of love spells to cast. Not only that but there’s something for those who wish to find outside advice from more advanced spell casters. We’re also going to provide you with the top sites available to help you with your dilemma. Let’s begin our journey by educating ourselves on love magic and what a real love caster looks like. Love Magic and Love Casters Love magic made its first appearance back in Ancient Egypt and has been an active practice since. This type of magic is a branch of traditional magic and can be practiced in various ways. Typically the more common use of love magic is through the work of spells, but other methods look like Charms Rituals-LOVE Potions-Dolls and even Amulets If you are interested in becoming a love caster, be prepared for what’s to come. A genuine love caster knows that the art of love casting is no easy feat and shouldn’t be done casually. You should know that not only does it require you to be gifted spiritually, but you must be ready to serve others. Someone who is considered a real love caster has experience in all manner of spells, no matter the difficulty. Training yourself in attraction, commitment, and marriage spells is an excellent place to start. But this by no means will make you a professional. Practice your craft and expand your knowledge; understand that you will possess the ability to help others in time truly. Types of Love Spells What better way to start broadening your experiences with love spells than by learning more about them? These spells work like just about any other spell. Simply apply your intention, use a medium (sigils, mantras, candles, or charm bags), and top it off with establishing the belief that you will receive what you want. So what kind of spells are available and which ones suit your needs the best? Let’s take a look at the many options you have at your disposal

%+27788225528 love spells in Boston Psychic Readings, Attraction spells,Bring...

masabamasaba

We specialize in Psychic Readings, Psychic Love Spells, Binding Love Spells, Obsession Spells, Voodoo Spells, Lottery Spells, Marriage Spells, Black Magic Spells, Palm Readings & much more. Are you depressed? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? Do u need to solve any relationship problem? Contact the powerful spells caster chief kule with love spells that work overnight and love spells that really work. Have you found yourself infatuated with a special someone you think could be the one? Are you looking for a spell to provide them with a nudge in the right direction? Or maybe the spell you cast didn’t achieve the results you were hoping for? Whether you’re new or versed in the ways of spell casting, we’re here to help. Today we’re going to provide you with a detailed guide on the types of love spells to cast. Not only that but there’s something for those who wish to find outside advice from more advanced spell casters. We’re also going to provide you with the top sites available to help you with your dilemma. Let’s begin our journey by educating ourselves on love magic and what a real love caster looks like. Love Magic and Love Casters Love magic made its first appearance back in Ancient Egypt and has been an active practice since. This type of magic is a branch of traditional magic and can be practiced in various ways. Typically the more common use of love magic is through the work of spells, but other methods look like Charms Rituals-LOVE Potions-Dolls and even Amulets If you are interested in becoming a love caster, be prepared for what’s to come. A genuine love caster knows that the art of love casting is no easy feat and shouldn’t be done casually. You should know that not only does it require you to be gifted spiritually, but you must be ready to serve others. Someone who is considered a real love caster has experience in all manner of spells, no matter the difficulty. Training yourself in attraction, commitment, and marriage spells is an excellent place to start. But this by no means will make you a professional. Practice your craft and expand your knowledge; understand that you will possess the ability to help others in time truly. Types of Love Spells What better way to start broadening your experiences with love spells than by learning more about them? These spells work like just about any other spell. Simply apply your intention, use a medium (sigils, mantras, candles, or charm bags), and top it off with establishing the belief that you will receive what you want. So what kind of spells are available and which ones suit your needs the best? Let’s take a look at the many options you have at your disposal. Attraction Spells

%+27788225528 love spells in Toronto Psychic Readings, Attraction spells,Brin...

masabamasaba

WSO2Con204 - Hard Rock Presentation - Keynote

WSO2

WSO2CON 2024 - Does Open Source Still Matter?

WSO2

MarTech Trend 2024 Book : Marketing Technology Trends (2024 Edition) How Data...

Jittipong Loespradit

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in Tembisa ● Abortion Pills For Sale in Tembisa ● Tembisa 🏥🚑!! Abortion Clinic Near Me Cost, Price, Women's Clinic Near Me, Abortion Clinic Near, Abortion Doctors Near me, Abortion Services Near Me, Abortion Pills Over The Counter, Abortion Pill Doctors' Offices, Abortion Clinics, Abortion Places Near Me, Cheap Abortion Places Near Me, Medical Abortion & Surgical Abortion, approved cyctotec pills and womb cleaning pills too plus all the instructions needed This Discrete women’s Termination Clinic offers same day services that are safe and pain free, we use approved pills and we clean the womb so that no side effects are present. Our main goal is that of preventing unintended pregnancies and unwanted births every day to enable more women to have children by choice, not chance. We offer Terminations by Pill and The Morning After Pill.” Our Private VIP Abortion Service offers the ultimate in privacy, efficiency and discretion. we do safe and same day termination and we do also womb cleaning as well its done from 1 week up to 28 weeks. We do delivery of our services world wide SAFE ABORTION CLINICS/PILLS ON SALE WE DO DELIVERY OF PILLS ALSO Abortion clinic at very low costs, 100% Guaranteed and it’s safe, pain free and a same day service. It Is A 45 Minutes Procedure, we use tested abortion pills and we do womb cleaning as well. Alternatively the medical abortion pill and womb cleansing !!!

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

Medical / Health Care (+971588192166) Mifepristone and Misoprostol tablets 200mg

WSO2CON 2024 - API Management Usage at La Poste and Its Impact on Business an...

WSO2

VTU technical seminar 8Th Sem on Scikit-learn

AmarnathKambale

Dernier (20)

Large-scale Logging Made Easy: Meetup at Deutsche Bank 2024

Devoxx UK 2024 - Going serverless with Quarkus, GraalVM native images and AWS...

WSO2Con2024 - Hello Choreo Presentation - Kanchana

%+27788225528 love spells in Knoxville Psychic Readings, Attraction spells,Br...

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

tonesoftg

WSO2CON 2024 - Building the API First Enterprise – Running an API Program, fr...

WSO2CON 2024 Slides - Open Source to SaaS

%in ivory park+277-882-255-28 abortion pills for sale in ivory park

WSO2CON 2024 - Cloud Native Middleware: Domain-Driven Design, Cell-Based Arch...

Architecture decision records - How not to get lost in the past

WSO2Con2024 - WSO2's IAM Vision: Identity-Led Digital Transformation

%+27788225528 love spells in Boston Psychic Readings, Attraction spells,Bring...

%+27788225528 love spells in Toronto Psychic Readings, Attraction spells,Brin...

WSO2Con204 - Hard Rock Presentation - Keynote

WSO2CON 2024 - Does Open Source Still Matter?

MarTech Trend 2024 Book : Marketing Technology Trends (2024 Edition) How Data...

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

WSO2CON 2024 - API Management Usage at La Poste and Its Impact on Business an...

VTU technical seminar 8Th Sem on Scikit-learn

SecOps - Bringing Agility into Security

1. SecOps Bringing agility into security ANDREW WURSTER | SECINT TEAM LEAD | @YOURCISCOKID

2. Meet Atlassian’s Security Team

3. BUILD TRUST WITH EVERY TEAM.

4. Security Intelligence Incident detection, response Who is the Atlassian Security Team? Policies and Trust Trust @ Atlassian Security Engineering Secure by design

6. How we work

7. Prepare Detect, Analyze Contain, Eradicate, Recover Post-Incident Review Primer: Incident Handling Process

8. Phase 0: Prepare

9. Phase 1: Detect and Analyze

10. THE BACKSTORY Apache Struts Framework Remote Code Execution Multiple Products, Services

11. Alerts Logs / Alerts JIRA / Service DeskEmail Ingestion User ReportsIndustry Groups Investigations Incidents

12. INCIDENT TIMELINE Apache contacts us 06 Mar Reported to Apache 02 Mar ?? Vuln. Published 0 Day Investigations kick off Incident Raised Incident —> 07 Mar Investigation —> 09 Mar09 Mar

13. Incidents

14.

15. Phase 2:  Contain, Eradicate, Recover

16. CROSSING THE STREAMS Investigating the exploit Building and deploying the fix Forming and sending comms

17.

18.

19.

20. INCIDENT TIMELINE Incident ActivitiesHipChat Fix Customer Comms Incident —> Investigate Access 13 Mar09 Mar Review —> Crowd Fix Bamboo Fix Push fix to Bamboo Cloud Validate Fix Revalidate Fix Check Access 10 Mar Vulnerability Annouce CommsComms Draft Recovery

21. Phase 3: Review

22.

23. INCIDENT TIMELINE Conduct Incident Review Carry out PIR actions Incident —> 05 April Review —> 10 Mar 30 Mar13 Mar Open PIR for comment Close PIR

24. Helping you

25.

26. Thank you! ANDREW WURSTER | SECINT TEAM LEAD | @YOURCISCOKID

SecOps - Bringing Agility into Security

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

En vedette

En vedette (20)

Similaire à SecOps - Bringing Agility into Security

Similaire à SecOps - Bringing Agility into Security (20)

Plus de Atlassian

Plus de Atlassian (20)

Dernier

Dernier (20)

SecOps - Bringing Agility into Security