devopsy.kinsta.cloud

Author: Alan Shimel

My picks for opening day of DevOpsDays Austin

As we wrote earlier, we are happy to be attending and sponsoring DevOpsDays Austin 2015. The opening day morning is chocked full of great sessions with the afternoon dedicated to openspaces as is the norm. While everything from breakfast to Damon Edwards keynote through JJ Ashgar’s session on Chef before lunch look tasty. Here are three sessions that I will be attending that I am really looking forward to:

The Coming Donkey Apocalypse by Michael Cote’ – Cote’ formally of 451 Research and now with Pivotal is going to talk about the “state of the union” of Devops. From the abstract:

DevOps is growing in popularity and even usage in “the real world.” It seems like we’re slowly getting past unicorns only and seeing many “horses” do DevOps. Soon we’ll see the mainstream market – the “donkeys” – start to pick it up and bend DevOps to its will. This talk will go over “the state of the union” of DevOps and provide some guidance for how to prepare for the donkey apocalypse.

I don’t know what to make of this title but it peaked my curiosity. I don’t think DevOps adoption moving mainstream is equal to moving from horses to donkeys and so it is not a very flattering title. On top of this not only don’t I think main stream adoption of DevOps means it is Donkeys adopting it, I do not think it means an apocalypse for DevOps. In fact I think it is a good thing. On top of this, I think the idea of calling mainstream adoption, adoption of the donkeys and them causing an apocalypse smacks of elitism and is against what DevOps is about. I don’t think it is a bad thing that more organizations will get involved and that they will “bend DevOps”. I don’t know Michael well and have only spoken to him once briefly. Everything I hear though is that he is a very bright guy and dynamic speaker and writer. So i am interested to hear what Michael has to say in this session and whether he thinks it is a good thing, bad thing or how we can help move it along. You can’t judge a book by its cover and you sometimes you can’t judge a session by its title and abstract.

Fixing your Organization by Continually Breaking It by J Paul Reed – Reed is a consultant and has over a decade of experience in the trenches as a build/release and tools engineer, working with such organizations as VMware, Mozilla, and Symantec. In 2012, he founded Release Engineering Approaches, a consultancy incorporating a host of tools and techniques to help organizations “Simply Ship. Every time.” From the abstract:

When we discuss DevOps, we often find ourselves mired in the “tools vs. culture” debate. A point often forgotten is the “amplify feedback loops” of DevOps “3 Ways” and how to build that into our cultures. In this talk, we’ll look at the importance of continually breaking your organization with experiments, some surprising examples, and how to do it in such a way that you aren’t left with a broken organization.

I love this concept going back to Netflix and the Simian Army and have heard similar talks before on it. Looking forward to what Reed has to say and learning. Amplifying feedback loops is something I would like to see more written about as well. I am looking forward to this one!

Continuous Acceleration: Why Continuous Everything Needs a Supply Chain Approach by Josh Corman – Josh is of course the CTO of Sonatype and a former 451 Research analyst too. Besides all that Josh is a friend from the security world that I know a long time. This talk sounds like a continuation of what Josh and Gene Kim presented at DevOps Connect at RSA Conference a few weeks ago. Also Ericka Chickowski wrote a good article on her interview with Josh on this last week. Here is the abstract:

Today we write less code & consume more re-usable open source code. Innovation accelerates & complexity grows. Complexity is the enemy of quality. Poor quality creates break-fixes & slows dev. It’s a continuous loop.
Learn about software supply chain management strategies to accelerate delivery: scrutinize your ‘suppliers,’ minimize risk & bloat, and improve traceability, visibility & response times.

Josh is a great presenter. I have seen him present many topics over the years at several events, I am sure this one won’t disappoint.

There are other good presentations including some stuff on Dockers and containers (what would a conference be without them?). Additionally the I am sure the open spaces will spawn some good stuff as well.

I will try to update throughout the day and give those who can’t attend a sense of what is going on.

I realize many of you can’t make Austin tomorrow, but if you are going and see me please introduce yourself and say hi.

May 4, 2015
We are sponsoring DevOpsDays Austin. Why?

I am really happy to announce that we have signed on as a media sponsor for DevOpsDays Austin, May 4-5. While we have served as media sponsor for any number of events over the last year, this is the first time we have signed on to sponsor a DevOpsDays event. I am going to Austin and will be there to participate and report first hand.

Why DevOpsDays? Why Austin? Why now? All good questions. I wanted to ask and answer them right here on devopsy.kinsta.cloud to be totally transparent.

Why DevOpsDays?

We do hold DevOps Connect conferences (our RSA event this week had 700 people there) and at first blush one might think they are competitive to DevOpsDays. But they never were in my mind and shouldn’t be in real life either. In InfoSec we have conferences like BlackHat, InfoSecurity Europe and RSA Conference, but we have Security Bsides too, which are much more like DevOpsDays. It is a big world and there is plenty of room for both. Not only plenty of room but plenty of need. One thing I have learned travelling all over the place these months is that there is still a lot of DevOps learning, sharing and as Gene Kim says, tribe building that needs to be done.

From everything I have seen and heard about DevOpsDays they do a great job on all of these fronts. I think as DevOps continues to gain acceptance there will be a much clearer difference in the audience and agendas at different DevOps conferences. The difference between a DevOpsDays versus a DevOps Connect will be obvious. The respective audiences will recognize this. There will be overlap at some levels and at other levels there won’t be.

But at the end of the day devopsy.kinsta.cloud is about spreading knowledge and learning about DevOps and DevOpsDays is too. So really the question is “Why shouldn’t we sponsor and support DevOpsDays?”

Why Austin?

That is easy. It’s not that Austin is weird (it is), it is the people and the history of what they have built in their DevOps community. I met first Boyd Hemphill about 6 or 8 months ago. He introduced me to Ernest Mueller, both of these guys were willing to hop in their cars and drive hours to come to San Antonio and Dallas to help educate people on DevOps at the recent DevOps Connect @ Innotech Conferences we held. They represent to me anyway, the very best of what the DevOps community should be. They weren’t territorial, judgmental or anything else but helpful. With people like that in leadership roles Austin has to be a great place to sponsor our first DevOpsDays.

In addition to Ernest and Boyd, I am familiar with what James Wickett has done with Rugged DevOps and Gauntlt (if you are not familiar with James and Gauntlt check out our new Ebook). Lastly, everyone you speak to say that Austin DevOps Days year in and year out is one of the best DevOpsDays anywhere. This year’s lineup looks like another stellar one.

Why now?

The answer is I think this is the right time for devopsy.kinsta.cloud to be involved with this part of the DevOps Community. I am not naïve or tone deaf enough that I have not seen or heard (how is that for a double negative) that some in the early adopter community were not big fans of what we have built at devopsy.kinsta.cloud. But I am also really proud of what we have accomplished in a little over a year. I am confident enough in our audience, our content and our place in the market to think that we can and have added to the discussion.

I believe that devopsy.kinsta.cloud has to offer value to the entire DevOps community. That includes people just looking to adopt DevOps, people who are just starting to learn about DevOps and all the way to people who have been leading and teaching about it for all these years now.

So we venture out into what is for us new territory. We are excited to support and be part of this great event. We hope that this will be the beginning of supporting other DevOpsDays around the world. Hope to see you in Austin, May 4-5.

What is in it for you?

Besides seeing coverage of the event here on devopsy.kinsta.cloud, there is more. As part of our sponsorship we were given two tickets to the event. I am only using one. We have another one available. The show is just about sold out and the tickets are a couple of hundred dollars at this point. If you would like to attend DevOpsDays Austin on us write me at editor@devopsdays.com with why you deserve this free ticket and it is yours. If more than one person rights I will pick the one with the best reason (in my opinion). I am not making the winners public or the reason they deserve it. So that is what is in it for you.

April 24, 2015
Welcome to the ADC (After DevOps Connect) era of DevOps and Security

I was speaking with Britta Glade of RSA Conference after our DevOps Connect conference at RSA Conference Monday. She congratulated us on putting together a great day of tracks and sessions (kudos to Gene Kim and Josh Corman). But then she said something else that really struck me to my core. She said after today there is no longer any question about security working with DevOps.

Think about it. Three years after Josh and Gene first presented Rugged DevOps at RSA Conference. After so many papers, articles, presentations and tracks, it has finally sunk in. Security will embrace DevOps, Security will be better because of DevOps and as importantly, DevOps will be better because of Security.

It is very fulfilling to know that this event we produced (along with Mark Miller and theNexus Community) was what finally pushed this over the finish line. For me personally it really represents one of the fundamental reasons I was so attracted to DevOps.

It was 4 or so years ago that I first met Gene Kim and over a bottle or two of wine he explained to me what DevOps was about and what he was working on with the Phoenix Project. While DevOps may seem primarily about Dev and Ops to some, for me it was about making security work better. It seemed like such a no brainer that of course security should embrace DevOps.

But it was not that easy. The besieged security industry faced with a never ending barrage of breaches and a continually escalating threat environment could not accept that automation, acceleration, velocity would also allow us to shift security left, leaving us more secure and more compliant. Many security people dug in their heels and said no, this wouldn’t work and they didn’t take the time to really explore it.

Monday all of that changed. Security folk came out in droves to see people like Jez Humble (many people in the audience weren’t really familiar with Jez when he first took the stage, but they were enthralled with him by the time he stepped off. Jez finished to a standing room only crowd of close to 700. They heard Damon Edwards and Alex Honor talk. Though they were also unfamiliar to the crowd, their message resonated to the core.

When Julie Tsai of Walmart took the stage the audience heard how a “unicorn” like Wal-Mart used Agile and DevOps to be more secure. Terri Pots of Raytheon and Jessica Davita of Microsoft re-enforced the message that security needs to embrace this approach. I loved Jessica’s security org chart. Chris Corriere who writes here on devopsy.kinsta.cloud, Dr. Aaron Cois of Carnegie-Mellon also had great sessions.

Then names familiar to the crowd, Gene Kim and Josh Corman kicked it off with a great talk on Software Supply Chains. Nick Galbreath had a great session. David Mortman delivered a terrific talk, Dan Cornell on web app security and more. For me the perfect ending was when my friend Rich Mogull took the stage and demonstrated his Squirrel Monkey toolset. Rich’s scripts that he wrote himself showed how we could use automation to make our security better and easier. People were stunned.

Throughout the day, the buzz that was coming down the big hallway was that there were some great things happening over at the DevOps tracks. People from the Cloud Security Alliance meeting next door were hopping over to check it out. Other people joined in. By the end of the day we had given out all of the materials we had prepared.

By now I know you are wishing you were there. The good news is the entire event was videotaped. We will have videos and slides of all of the presentations shortly so stay tuned.

We are already starting to plan next year’s event. Also, the call for speakers is now open for DevOps Connect: Rugged DevOps event @InfoSecurity Europe June 4^th. But after Monday DevOps and security will never be the same again. No longer can security deny that they must be part of DevOps. We are and should be. We are now in the ADC (After DevOps Connect) era.

April 22, 2015
Are You Embedding Security for a Rugged DevOps Experience?
As security thinkers try to wrap their heads around what’s broken in today’s security architecture and processes, DevOps and continuous delivery patterns may seem like yet another potential problem for already overwhelmed risk managers. But once security gurus get past the intimidation of working within a cycle of fast iterations, they could well find that continuous delivery model could actually provide a blueprint for fixing what’s wrong with security today.

Security leaders that work with operations, developers, architects, QA and the rest of the team to build continuous delivery momentum are helping their organizations develop a more rugged development life cycle that not only produces more secure software but that also supports faster fixes to security problems as they’re found.

Learn more about how to start moving toward a Rugged DevOps mentality in our inaugural eBook, Rugged DevOps: 10 Ways to Start Embedding Security into DevOps Patterns. Some of the insights security and DevOps experts shared with our reporter Ericka Chickowski in this special issue:
- The bad guys are already delivering malicious code continuously. Security can respond faster by working within the DevOps patterns.
- Security can a learn a lot from the DevOps propensity for smart automation.
- The DevOps model really can be compatible with compliance.
- The DevOps paradigm shift may give security pros the opportunity to finally bake security into IT processes rather than add it on as an afterthought.
We will be distributing printed copies of the book at the DevOps Connect event at RSA Conference this week, as well as at a special Rugged DevOps Breakfast Tuesday morning at Jillians. But you don’t have to be at RSA to download your own copy. Fill out the form below to download a copy.

The Ebook is sponsored by Evident.io and Incapsula. Thanks to them for their support.

Enjoy!
Download Rugged DevOps Ebook
Comments
This field is for validation purposes and should be left unchanged.
First name*
Last name*
Email*
Enter Email Confirm Email

Organization
*downloading the Ebook will add your email to our newsletter mailing list which you can opt out of at anytime.
April 20, 2015
Live Blogging DevOps Connect @RSAC

We will be live blogging the DevOps Connect: SecDevOps event from RSA Conference on Monday, April 20th. Stay tuned for updates

April 18, 2015
DevOps Connect: Rugged DevOps @ InfoSecurity Europe

Following up on the tremendous demand we have seen for DevOps Connect @RSA Conference, we are taking this concept across the pond to Europe’s largest InfoSecurity event. DevOps Connect: Rugged DevOps @ InfoSecurity Europe will be on June 4th, 2015 at the Olympia in London. Partnering with the InfoSecurity Group and Reed Exhibitions, DevOps Connect will feature a full day of DevOps sessions, followed by a cocktail reception.

We will be announcing some exciting keynote speakers shortly, but there are plenty of speaker slots still available. Here is some information on the event for attendees, speakers and sponsors:

Attendees: All registered attendees of InfoSecurity Europe are eligible to attend DevOps Connect. Even better registration for InfoSecurity Europe is free! So anyone can register for the event and come to DevOps Connect. Here is the link to register. While anyone can register and attend, the theater at the Olympia where the event will take place has limited seating. So our advice is register quickly and come early.

Speakers: We are issuing a formal call for speakers which is very similar to the CFS that we used for the RSA event (actually it is the same form). Here is the link to submit to speak. Please be sure to read the instructions in the Details section. It really explains what we are looking for in speakers for this event. We invite anyone who would like to speak to submit. The deadline for speaking submissions is May 4th. So don’t delay, submit early!

Sponsors: We have a full slate of sponsorship packages available for this event. Sponsor packages include sponsoring/exhibiting at both InfoSecurity Europe, as well as the DevOps Connect event. If your company is already sponsoring or exhibiting at InfoSecurity Europe, we have packages that allow you to leverage your existing investment. For information on sponsoring DevOps Connect and InfoSecurity Europe contact sponsor@devops.com. Sponsoring DevOps Connect is a great way to reach both of these communities, as well as help bring better awareness to both communities.

The idea of DevOps Connect: Rugged DevOps is to bring together the DevOps community and the InfoSec community. London has one of the most vibrant DevOps community in the world (it is the single biggest city for devopsy.kinsta.cloud visitors) and InfoSecurity is the largest InfoSec event in Europe with over 12,000 attendees. So this is a perfect venue to bring together these two great communities. We invite members of both the DevOps and the InfoSec world to participate in this.

Stay tuned for more news and information regarding DevOps Connect: Rugged DevOps over the next days and weeks. Stay tuned.

April 15, 2015
Docker Secures $95M in Series D Funding to Meet the Unrivaled Demand for Its Open Source Platform
Burgeoning Ecosystem Standardizes on Docker to Transform How Applications Are Built, Shipped and Run in the Modern Datacenter

SAN FRANCISCO – April 14, 2015 – Docker, Inc., the organization behind the open platform for distributed applications, today announced that it has raised $95 million of Series D funding. This latest infusion builds on the successful Series C round raised in September, and enables Docker to address the needs of the millions of ecosystem users and thousands of enterprises that have standardized on Docker’s technology. The financing will enable deeper integration with go-to-market partners such as AWS, IBM and Microsoft, who have made strategic product investments in support of Docker’s open source technology. It will also fuel new platform capabilities across the application development lifecycle, solidifying Docker as the foundation for a new generation of distributed applications.

The round was led by Insight Venture Partners, with new contributions from Coatue, Goldman Sachs and Northern Trust. Existing investors Benchmark, Greylock Partners, Sequoia Capital, Trinity Ventures and Jerry Yang’s AME Cloud Ventures also participated in the round.

“This financing is a strong vote of confidence in Docker management, and strengthens the company’s ability to fulfill the needs of the millions of developers who have made the commitment to utilizing its breakthrough products and services in their daily work,” said Jeff Horing, co-founder of Insight Venture Partners. “Docker will be able to continue to make additional hires in general to put more critically-needed products into the hands of developers.”

Docker’s model enables any application to be built and run as a consistent, low-overhead Docker container, liberating developers from infrastructure concerns and dramatically increasing innovation. Enterprises using Docker have reported that it shrinks deployment cycles from weeks to minutes and drives up to 20X improvement in computing resource efficiency. More than 300 million instances of Docker’s technology have been downloaded from its hosted service, Docker Hub, enabling organizations to create both an agile application environment and an agile organization.

“Our responsibility is to give people the tools they need to create applications that weren’t possible before,” said Solomon Hykes, founder and CTO of Docker. “We will continue to honor that commitment to developers and enterprises. We think they are still looking for a platform that helps them build and ship applications in a truly standardized way, without lock-in or unwanted bundled features. That is what we set out to build, and we are not yet content with what we have achieved so far. We are getting a clear message from the market that they like what we are building, and we plan to keep building it. The financing enables us to deliver on that promise.”

Dockerized applications are enabling increased productivity and continuous business innovation for organizations such as the BBC, Gilt, Goldman Sachs, Groupon, ING, Spotify and Yelp. Companies like these are often initially exposed to Docker by a few development teams that integrate Docker into their workflows and are able to immediately demonstrate the productivity benefits of the platform across the development organization. These grassroots efforts quickly receive executive attention when, almost overnight, application enhancements take minutes when they used to take months.

“With the accelerating pace of digitization in the financial industry, the breadth, complexity and diversity of our software and infrastructure services has grown materially,” said Don Duet, global co-head of the Technology Division at Goldman Sachs. “The ability to manage and run business-critical technology at scale in an agile and adaptive ecosystem has become fundamental to our firm. When our engineers discovered and started using Docker’s open source platform, they were immediately impressed by the portability it provides applications. It inspired us to move towards a standardized infrastructure for packaging, shipping and running our applications based on Docker’s technology.”

An April 2015 survey of 685 enterprise CIOs by Enterprise Technology Research highlights that Docker technology has the strongest buying intention score (known as a Net spending intentions score or “NET score”) ever recorded in the six years of the firm’s research, which covers 274 technology vendors across 24 sectors of enterprise technology. This aligns with the positive feedback that Docker has received on its flagship commercial product, Docker Hub Enterprise, which is being beta trialed by a number of Fortune 100 companies and will be made broadly available later this quarter.

“The combination of strong product demand and a rapidly-expanding ecosystem has put Docker on a growth trajectory far beyond what most companies experience in this phase of their development,” said Ben Golub, CEO of Docker. “This type of financial support, in addition to the high caliber of this group of investors, provides Docker with the resources and guidance needed to meet the demands of all aspects of our community – from open source contributors to Fortune 100 enterprises. Over the course of the last six months, we’ve exceeded every growth milestone we set for the company and the community. With the continued support of our investors, partners and community, Docker will continue to disrupt organizational conventions, transforming monolithic teams, processes and applications into more productive and agile microservices environments.”

Additional Information
- Blog post
- Docker website
- Take the Docker Tutorial
- Follow Docker on Twitter
- Join Docker on IRC
- Join Docker on Google
- Go to the Docker repository on GitHub
About Docker, Inc.
Docker, Inc. is the company behind the Docker open source platform, and is the chief sponsor of the Docker ecosystem. Docker is an open platform for developers and system administrators to build, ship, and run distributed applications. With Docker, IT organizations shrink application delivery from months to minutes, frictionlessly move workloads between data centers and the cloud, and can achieve up to 20X greater efficiency in their use of computing resources. Inspired by an active community and by transparent, open source innovation, Docker containers have been downloaded 300 million times and Docker is used by millions of developers across thousands of the world’s most innovative organizations, including eBay, Baidu, the BBC, Groupon, ING, Yelp, Spotify, Yandex, and Cambridge HealthCare. Docker’s rapid adoption has catalyzed an active ecosystem, resulting in more than 100,000 “Dockerized” applications, over 40 Docker-related startups, and integration partnerships with AWS, Cloud Foundry, Google, IBM, Microsoft, OpenStack, Rackspace, Red Hat and VMware.

Docker, Inc. is venture backed by AME Cloud Ventures, Benchmark, Coatue, Goldman Sachs, Greylock Partners, Insight Venture Partners, Northern Trust, Sequoia Capital, SV Angel , Trinity Ventures, and Y Combinator.
April 14, 2015
Continuous is the new Black

We have gone from the city that never sleeps to a world that is continuous. That’s right, it seems along with the world shrinking, it is always on, someone is always watching or doing. Continuous has become the new black.

Nowhere is this more true than in IT. We have Continuous Delivery, Continuous Integration, Continuous Testing, Continuous Monitoring, continuous this, continuous that, continuous everywhere. Infosec is not immune to this either. We are trying to protect against continuous attacks by deploying continuous scanning, continuous threat protection, continuous monitoring, all of it part of our continuous security. All of this sounds like an old George Carlin routine. But it’s not it, it is the way things are today.

Of course all of this continuous around security had to lead to continuous compliance. After all who would want to be compliant at only a point in time (even if that point was at the time of audit)?

The newest version of the PCI DSS tries to move compliance from point in time compliance to continuous compliance. Some question whether this puts too big a burden on merchants. How many resources can they dedicate to compliance to make sure it is continuous? Others say that continuous is the only way that makes sense.

For me there is a lesson here that security can learn from DevOps. The key is automation. Automation is the secret weapon in doing continuous. Without automation, continuous would require too many resources to truly succeed. But with automation we can duplicate, perform act over and over again without a human initiating every step, every move.

That is not to say that humans are no longer needed. On the contrary, automation frees up humans to work on tasks of a higher nature. Automation frees up humans from the repetitive, mundane tasks that need to be done over and over again. Working instead on things that are of a higher value (at least they should be).

But wait there’s more! Not only does automation empower continuous, automation brings speed. Once we automate, we can speed things up as well. So not only are we performing continuously, we are also performing faster.

Now we are automating tasks without human intervention and at the same time doing them faster. I know for many a security admin the hairs on the back of your neck are standing up. This can’t end well. Things are going out of control. Automating and speeding things up almost goes against being cautious and careful.

But as counter-intuitive as it may be, automating and performing faster can actually result in being more secure and more compliant. Wait lets repeat that again: by automating and speeding up performance we can actually become more secure and more compliant.

How? You don’t believe me? Impossible you think? How can continuous make us more secure and more compliant? Is it even possible to do all of this continuously?

This is the topic that I along with Jody Brazil, CEO of Firemon are going to explore as hosts of a P2P session at RSA Conference. The session is on Thursday at 10:20am, it is titled Continuous Network Compliance: Finding Flaws and Betting Futures, you can click on the link for more info. Put it on your RSA calendar if you are attending. The P2P sessions only hold 25 or 30 people so come early.

I will post a follow up to this post after the session with some of the discussion points around this. If you would like to hear the answers before then though, you will have to come to the session. See you in San Francisco at RSA Conference.

April 13, 2015
Complete speakers & schedule for DevOps Connect: SecDevOps @RSAC

The line up for DevOps Connect: SecDevOps @ RSAC is complete. What a great job Gene Kim and Josh Corman did lining up a power-packed schedule. Here is what the day is shaping up to be include:

8:50 to 9:00am Alan Shimel and Mark Miller – Opening remarks and welcome
9:00 to 9:50am Gene Kim/Josh Corman – Rugged DevOps: Going Even Faster With Software Supply Chains
9:50 to 10:30am David Mortman – DevOps Myths Versus Real World Realities

10:30 to 10:45am Bio and email break

10:45 to 11:20am Julie Tsai – Windfall Wins: DevOps Empowers Agile Security and Compliance
11:20 to 11:55am Jez Humble – Continuous Delivery

noon to 1:30pm lunch break

AFTERNOON SESSIONS (ROOM 1)
1:30 to 2:00pm Constantine Cois – DevOpsSecFail: DevOps Security Anti Patterns
2:10 to 2:40pm Terri Potts – Leading a Horse to Water and Enticing Him to Drink
2:50 to 3:20pm Nick Galbreath – BYOD: Bring Your Own Dependencies
3:30 to 4:00pm Jessica Devita – No White Boards Allowed
4:10 to 4:50pm Rich Mogull – Building Your SecDevOps Toolkit

AFTERNOON SESSIONS (ROOM 2)

1:30 to 2:00pm Dan Cornell and Chris Curlyo – Blending the Automated and the Manual: Making Application Vulnerability Management Your Ally
2:10 to 2:40pm Damon Edwards and Alex Honor – Coaches and Toolsmiths
2:50 to 3:20pm Dan Cundiff – Why DevOps != the Wild West and How Embracing it Can Improve Security
3:30 to 4:00pm Chris Corriere – Automating Enterprise Security
4:10 to 4:50pm Chris Walsh – I’m the New Security lead, and I’m Here to Help

Pre-registration for the event is already sold out, but seating is on a first come, first serve basis and open to all RSA badge holders. So Monday of RSA Conference week, April 20th, Moscone Center West, room 2018. Come be part of a great day of DevOps and Security!

April 13, 2015
April is Rugged DevOps Month

Some of you may be aware that we have published a full blown media kit including an editorial calendar for the rest of 2015. For the month of April our focus is Rugged DevOps. It started yesterday with a great post by David Geer, Rugged DevOps: From Idea to Automation to Impact. It will continue all month with stories around infosecurity and DevOps. At the end of the month we will pull these all together into a Rugged DevOps special edition available to all of our newsletter subscribers.

But that is not all we are doing with Rugged DevOps. We are also publishing an Ebook that will be available RSA Conference week, April 19th. The EBook written by our own Ericka Chickowski will take a deep dive on the intersection of security and DevOps. We will also be printing 1000 copies of the book which will be distributed at our various activities at RSA Conference. In case you are not already aware, here is what we have planned for RSA Conference week:

DevOps Connect: SecDevOps Edition– Monday, April 20th – 9am to 5pm, Moscone Center – Featuring keynotes by Gene Kim, Josh Corman, Jez Humble and over a dozen other top names in DevOps and Security, this events pre-registration is already filled up. However, seating is on a first come, first serve basis and open to all RSA badge holders. So come early or try later in the day if there are any open seats. If you are interested in DevOps and infosec, this promises to be a don’t miss event.

DevOps Wine-ing Event – The after party for the DevOps Connect conference, the DevOps Wine-ng event is a tradition started by Josh Corman and the Sonatype team. This year’s event is sponsored by Sonatype, Puppet Labs and devopsy.kinsta.cloud. In order to gain admission to the event you need an invite or pre-registration from one of the sponsors. devopsy.kinsta.cloud will be offering invites in the next week. Most of the speakers as well as DevOps community and InfoSec community members will mingle in a relaxed atmosphere.

devopsy.kinsta.cloud “Rugged DevOps breakfast” – 7am to 9am, Tuesday morning at Jillians, the breakfast celebrates the official release of our Rugged DevOps Ebook. The breakfast and Ebook are sponsored by Incapsula and Evident.io. There are only a few slots left to attend this event, so if you would like to join us for breakfast early register now at http://www.eventbrite.com/e/devopscom-presents-rugged-devops-breakfast-rsa-conference-registration-16228701483?ref=ebtnebregn.

In addition to these DevOps related events, I of course will be helping to produce (along with a great team of Jennifer Leggio, Mike Rothman and Rich Mogull) the 9th annual Security Bloggers Meet up and Blogger Awards. This event is open only to those who write or podcast about infosecurity. It is usually a highlight of RSA Conference week. If you do write about security and have not been invited, write me at editor@devops.com with where you write and we can try to get you an invite.

Beyond that I along with my good friend Jody Brazil, CEO of Firemon will be hosting a peer-to-peer session on Thursday at 10:20am, Continuous Network Compliance: Finding Flaws and Betting Futures. It should be a good discussion looking at the idea of Continuous Security. P2P sessions only sit 25 to 35 people so come early to make sure you have a seat for that one.

On top of all of this I will be live blogging RSA Conference here on devopsy.kinsta.cloud, so stay tuned for that.

BTW, last month’s topic was “Containerization”. We are in the process of gathering up all of the great articles we had around this topic last month. We will package this content into a PDF document that again will be available to our newsletter subscribers. You can subscribe to our newsletter in the right hand sidebar of this page.

April 7, 2015