Author: Jules Louis

This presentation is about applying anomaly detection models and algorithms to monitoring DevOps environments. We survey a collection of techniques that we have applied successfully in DevOps configurations that range from very small to huge. Each of the techniques has strengths and weaknesses that are illustrated via real-world (anonymized) customer data.

Techniques discussed include deterministic and statistical models as well as uni-variate and multi-variate analytics. Examples are given that show concrete evidence where each can succeed and each can fail. This presentation is about concepts and how to think about alternative anomaly detection techniques. This presentation is not an academic discourse in math, statistics or probability theory.

RECORDING AVAILABLE: (CLICK HERE)

SLIDES

[seoslides embed_id=”3778c60221c4″ script_src=”https://devopsy.kinsta.cloud/embed-script/netuitive-devops-com-webinar/11827/” overview_src=”https://devopsy.kinsta.cloud/slides/netuitive-devops-com-webinar/” site_src=”https://devopsy.kinsta.cloud” site_title=”devopsy.kinsta.cloud” title=”Netuitive devopsy.kinsta.cloud Webinar” /]

QUESTIONS

Q. What is in the black box as you described in the section on statistical machine learning?

A. The short answer is a collection of algorithms that perform uni-variate and multi-variate generalized linear regression models with exponential smoothing applied to the stream of incoming metric observations. The uni-variate models are executed for each metric, as a default. The multi-variate models are applied to various collections of metrics that are defined based upon any one of several possible criteria and specifically tagged for adaptive learning. There are several patents that provide a lot more detail on our algorithms and they are publicly available for you to read if you like. A list of our patents is available on our web-site at www.netutive.com.

Q. What have you encountered in model and matrix sizes?

A. Matrix sizes are limited via a settable collection of parameters. Our current settings specify either 1024 or 2048 metrics per multi-variate model. Some of our “secret sauce” is in the implementation of the algorithms that execute the models.

The good news is that our implementation is amenable to subdivision into individual collections of metrics, so we can scale linearly by adding microservics to meet demand. I will say that the big matrices that we need to deal with are symmetric and positive semi-definite which are characteristics that make the matrices amenable to task-specific optimization strategies.

Also, you mentioned SVMs and neural networks. We like SVMS, but, after multiple attempts, have not had much success with neural networks.

Not surprisingly, we have discovered that 1) having a broad array of models/algorithms and 2) providing a mechanism to add context are critical to increasing precision and SNR.

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelist

We’re now seeing a new “marriage” of SecOps and DevOps that is creating a whole new mentality for driving innovation inside and outside of organizations. DevOps and security teams are now actively collaborating as peers, rather than in the traditional requestor/approver relationship, and making a seat at the table for security professionals. With the rise of DevSecOps, we get to truly redefine how operations, engineering, and security can be brought together in harmony to achieve unparalleled success. DevSecOps is propelling forward-thinking organizations by doing something simple — fostering collaboration of seemingly contradictory teams to align their disparate goals into a singular effort.

Join devopsy.kinsta.cloud Editor-in-Chief Alan Shimel, award winning CTO and author Gene Kim, Intuit’s DevSecOps leader Shannon Lietz, and Evident.io cofounder and CEO Tim Prendergast as they discuss how accelerating security intelligence to keep pace with the continuously updated cloud environments enables teams to detect problems sooner, respond faster, and protect their resources more effectively.

Date: Thursday, December 10th, 2015

Time: 1:00 pm eastern standard time

REGISTRATION LINK: (CLICK HERE)

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

Gene Kim is a multiple award winning CTO, researcher and author. He was founder and CTO of Tripwire for 13 years. He has written three books, including The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win and the upcoming DevOps Handbook. Gene is a huge fan of IT operations, and how it can enable developers to maximize throughput of features from “code complete” to “in production,” without causing chaos and disruption to the IT environment. He has worked with some of the top Internet companies on improving deployment flow and increasing the rigor around IT operational processes. In 2007, ComputerWorld added Gene to the 40 Innovative IT People Under the Age of 40 list, and was given the Outstanding Alumnus Award by the Department of Computer Sciences at Purdue University for achievement and leadership in the profession.

Shannon Lietz is currently the DevSecOps Leader for Intuit where she is responsible for setting and driving the company’s cloud security strategy, roadmap and implementation in support of corporate innovation. Previous to joining Intuit, Ms. Lietz worked for ServiceNow where she was responsible for the cloud security engineering efforts. Prior to this, Ms. Lietz worked for Sony where she drove the implementation of a new secure data center and led crisis management for a large-scale security breach. She has founded a metrics company, led major initiatives for hosting organizations as a Master Security Architect, developed security software and consulted for many Fortune 500 organizations.

CEO Tim Prendergast co-founded Evident.io to help others avoid the pain he endured when helping Adobe adopt the cloud at a massive level. After years of building, operating, and securing services in AWS, he set out to make security approachable and repeatable for companies of all sizes. Tim led technology teams at Adobe, Ingenuity, Ticketmaster, and McAfee.

As organizations move more deeply into continuous development and deployment modalities, the importance of implementing continuous security behaviors becomes non-negotiable. Cloud environments undergo dramatic changes during deployments, auto-scaling events, and through natural growth. While static data center environments were simple enough to be evaluated by humans, the dynamic nature of cloud environments are too complex to adequately secure without automation. Your operational tools deliver continuous monitoring and alerting — why doesn’t your security suite?

Join devopsy.kinsta.cloud Editor-in-Chief Alan Shimel, Andrew Storms, Vice President of Security Services at New Context, and Evident.io cofounder and CEO Tim Prendergast as they discuss why DevOps shops need to automate key functions in order to ensure their Cloud Infrastructure Security.

Date: Wednesday, November 18th, 2015

Time: 1:00 pm eastern standard time

REGISTRATION LINK: (CLICK HERE)

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

Andrew Storms, Vice President of Security Services, New Context

Andrew Storms is the Vice President of Security Services at New Context. Previously, Storms was the Senior Director of DevOps for CloudPassage and the Director of Security Operations for nCircle (acquired by Tripwire). At nCircle, he was responsible for the definition and enforcement of the security programs, delivering EAL3 certification, SOC2 audits and managed the company’s PCI ASV program. He has been leading IT, Security and Compliance teams for the past 2 decades. His multi-disciplinary background, also includes product management, quality assurance and software engineering. Storms commentary on IT security issues has appeared in CNBC, Forbes and The New York Times, as well as many other publications. He is a CISSP, a member of Infragard and a graduate of the FBI Citizens’ Academy.

Tim Prendergast, Co-Founder, Evident.io

CEO Tim Prendergast co-founded Evident.io to help others avoid the pain he endured when helping Adobe adopt the cloud at a massive level. After years of building, operating, and securing services in AWS, he set out to make security approachable and repeatable for companies of all sizes. Tim led technology teams at Adobe, Ingenuity, Ticketmaster, and McAfee.

The role of Docker on a Jenkins platform is much more than just packaging applications as Docker images. Docker can dramatically change and simplify the way to manage a Jenkins infrastructure.

You will learn in this webinar how Jenkins administrators can solve the headaches of customizing slaves (installing build tools…) with Docker enabled slaves and configure the build environment inside the Docker image.

This session will show how Jenkins administrators can empower application teams giving them the capabilities to create their own Docker images to define the build environment of their applications.

After a review of the patterns of integration of Jenkins with Docker, we will illustrate with a real life example how to Dockerize a CloudBees Jenkins Platform infrastructure.

Date: Thursday, November 19th, 2015

Time: 12:00 pm eastern standard time

REGISTRATION LINK: (CLICK HERE)

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

Cyrille Le Clerc is a product manager at CloudBees, with more than 15 years of experience in Java technologies. He came to CloudBees from Xebia, where he was CTO and architect. Cyrille was an early adopter of the “You Build It, You Run It” model that he put in place for a number of high-volume websites. He naturally embraced the DevOps culture, as well as cloud computing. He has implemented both for his customers. Cyrille is very active in the Java community as the creator of the embedded-jmxtrans open source project and as a speaker at conferences.

There is no single path to a DevOps approach that works for every organization, but there are fundamental principles and techniques used by the DevOps elite that give them distinct advantages. Applying DevOps principles to security operations is not a one-time practice or a stand-alone process — it’s a whole new approach requiring new ways of working collaboratively across departments. There are always learning curves and initial obstacles when making fundamental changes to your daily security practices and operations, but when done right, the benefits far outweigh the costs.
Join devopsy.kinsta.cloud Editor-in-Chief Alan Shimel, Evident.io cofounder and CEO Tim Prendergast, and former Chief Security Architect and a Distinguished Engineer for Dell Software David Mortman, as they discuss the fundamentals required to renovate your organization’s processes and behaviors to gain huge efficiencies for your security operations in the cloud.

Date: Thursday, November 5th, 2015

Time: 1:00 pm eastern standard time

REGISTRATION LINK: (CLICK HERE)

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

David Mortman, Chief Security Architect, Dell Software

David Mortman is the former Chief Security Architect and a Distinguished Engineer for Dell Software and Contributing Analyst at Securosis. Before that, he was the Director of Security and Operations for C3, LLC. Formerly the Chief Information Security Officer for Siebel Systems, Inc., David and his team were responsible for Siebel’s worldwide IT security infrastructure, both internal and external. Mr. Mortman is a regular speaker conferences including RSA, BlackHat and DEFCON.

Tim Prendergast, Co-Founder, Evident.io

CEO Tim Prendergast co-founded Evident.io to help others avoid the pain he endured when helping Adobe adopt the cloud at a massive level. After years of building, operating, and securing services in AWS, he set out to make security approachable and repeatable for companies of all sizes. Tim led technology teams at Adobe, Ingenuity, Ticketmaster, and McAfee.

Faster delivery of software that better meets the needs of your customers. The story is compelling in theory – the real challenge enterprises are facing is how to get started.

Find out how on November 17th. Bring your questions to an interactive panel with the experts and they will field them live.

Gary Gruver and Tommy Mouser, authors of Leading the Transformation: Applying Agile and DevOps Principles at Scale and Andrew Phillips, VP, Product Management for XebiaLabs and co-author of the IT Manager’s Guide to Continuous Delivery, will draw on their experience implementing Continuous Delivery transformations at major organizations to prepare you for how to plan and what to expect as you start your journey to DevOps and Continuous Delivery.

Some questions that will be covered:

• What are the essentials for preparing for your transformation?
• What are the most common business objectives and crucial first steps?
• How can you scale Continuous Delivery for the Enterprise?
• What are the key measurements along the way?

Bonus: Register and attend the webinar to receive the first two chapters the new book:Leading the Transformation: Applying Agile and DevOps Principles at Scale. Make sure to submit your questions upon registration – we’ll be giving away free copies of the entire book to the registrants with the most interesting questions!

Date: Tuesday, November 17th, 2015

Time: 11:00 am eastern standard time

REGISTRATION LINK: (CLICK HERE)

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

Tommy Mouser, Co-Author, “Leading the Transformation”

Tommy Mouser has been directly involved in the design, development, qualification, and delivery of software systems for over 30 years. For the past 8 years, while working at HP and Macy’s.com, his primary focus has been on working with his teams and partners on a journey towards Agile methodologies. He has led, managed, and applied these principles with many teams, both large and small, and has experienced the significant quality and productivity gains that are possible.

Gary Gruver, Co-Author, “Leading the Transformation”

Gary Gruver is currently working with Executives across the industry to help them transform their development and delivery processes. As Co-author of “Leading the Transformation” he shows executives of large traditional organizations how to lead their transformation by applying Agile and DevOps principles at scale. As co-author of “A Practical Approach to Large-Scale Agile Development” he documents how they revolutionized software development processes at HP while he was the Director of the LaserJet Firmware development lab.

Andrew Phillips, VP of Products, XebiaLabs

Andrew is a cloud, service delivery and automation expert and has been part of the shift to more automated application delivery platforms. In his spare time Andrew contributes to a number of open source projects, including Apache jclouds, the leading cloud library.

Testing is one of the core parts of infrastructure as code. However, when thinking of testing, what role does security play?

In this informative webinar, we will discuss:

• Security’s role in testing

• Guidelines for doing active testing while incorporating sound security principles

• 5 security considerations for testing implementations of infrastructure

Date: Tuesday, November 10th, 2015

Time: 1:00 pm eastern standard time

REGISTRATION LINK: (CLICK HERE)

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

Jamesha Fisher, System Administrator DevOps at CloudPassage, Inc.

Jamesha Fisher is a CloudPassage systems administrator working on DevOps.  She has gained her technical knowledge from working in systems administration and technology roles at companies such as Google, GoGrid, and Norvax, Inc.  With a wide range of technical experience in security, networking, and information systems, Jamesha has the knowledge and expertise to back her up as a leading professional within the DevOpsSec community.

Recording

Slides

Your Host

Alan Shimel, Editor-in-Chief devopsy.kinsta.cloud, An often-cited personality in the security and technology community and a sought-after speaker at industry and government events, Alan has helped build several successful technology companies by combining a strong business background with a deep knowledge of technology.

About the Panelists

Greg Keller, JumpCloud, Chief Product Officer, 

Greg is JumpCloud’s Chief Product Officer, overseeing the product management team, product vision and go-to-market execution for the company’s Directory-as-a-Service offering.

Erik Gustavson ,Bitium, Chief Technical Officer

As Bitium’s co-founder and CTO, Erik establishes the technical and product vision, guides product development activities and oversees the engineering organization.