devopsy.kinsta.cloud

Author: Rebecca Auguste

Open Your Ears and Get Ready to Listen: Cloud-Native Days with Kubernetes

If you think all the way back to primary and secondary school, you may remember hearing something like, “open your ears while your teacher is talking to you.” It’s true that someone tuned in to listening learns more than someone who doesn’t, but opening your ears is a lot more important than that. Open ears have the ability to open minds. And with the tech industry constantly changing it’s more important than ever to keep your ears—and your mind—open to change.

With Cloud-Native Days with Kubernetes approaching, attendees have the perfect chance to open their ears and listen to the best of the best in the tech industry. Cloud-Native Days with Kubernetes is a two day virtual summit boasting over 50 speakers and sessions led by industry thought leaders and doers in the cloud-native space. Attendees will walk away with a better understanding of cloud native, its impact on the IT landscape and a lot more after listening to the key practices and methodologies of these tech titans.

While there are a myriad of talented speakers at Cloud-Native Days with Kubernetes, there are two very special keynote speakers you’ll want to pay extra attention and listen extra closely to. Hosting keynote sessions Aug. 4 and 5, Tara Hernandez and Caroline Wong are prepared to talk about technology shifting and the future of cloud-native security. With loads of experience and sage advice, Tara and Caroline are without a doubt the top two tech experts you won’t want to miss.

If you’re unfamiliar with Tara Hernandez, she’s a senior engineering manager at Google Cloud Platform, Associate Board member of Women Who Code and the host of the 12 episode podcast series, ‘Women Who Code’. A specialist in software engineering infrastructure and early backer of the Continuous Integration revolution, Tara has done everything from developing developer tools such as Tinderbox and Bugzilla, working at Pixar Animation studios to reinvent development infrastructure to handle the challenges of writing software in a film production environment, and helping create cloud developer platforms at Google. Beyond being a wizard in her field, Tara is equally impressive in her drive to share useful things about engineering management.

No-one’s journey goes without its challenges. But for Tara, “One issue [she] has faced in her rise to success is a case of imposter syndrome. While she has always had the skills to overcome any challenges that came her way, it took a lot of work for her to develop mental self defenses, and tame the anxiety that came when she was presented with a project […] Getting involved with [Women Who Code] has made her aware of the need for advocacy at a grassroots level, and she’s become more confident brainstorming with peers and management teams about increasing diversity in her own work place. At the same time it’s helped her find the confidence to attend more conferences, and even start giving talks.” A supporter, advocate, mentor, and “shining example of someone who has overcome doubt to achieve success,” Tara is the ultimate speaker to inspire change and innovation, especially in creators.

Check out Tara’s podcast ‘Women Who Code’ and listen to her talk about the current state of DevOps here to learn more before her talk, ‘Those Little Tectonic Shifts,’ Wednesday Aug. 4 at 12:45 p.m. EDT.

Cloud-Native Days with Kubernetes is also incredibly proud to host Caroline Wong, Chief Strategy Officer of COBALT. Caroline is also an author, teaches cybersecurity courses on LinkedIn Learning, and similar to her fellow keynote speaker, hosts the ‘Humans of InfoSec’ podcast. With a background in communications and cybersecurity, Caroline holds deep-rooted expertise every attendee will want access to.

As Caroline says, “Cloud native is here; it is scaling, and it is not going anywhere. The more we can see the reality and necessity of what security must become, the better we will all be in the long run.” In her talk, ‘The Future of Cloud Native Security,’ Thursday Aug. 5 at 11 a.m. EDT, Caroline will share her observations on how companies must change the way they build security into their cloud-native projects, forecast what’s next for cloud-native security, and how organizations must double down on people and process innovation to overcome the misconceptions, education gaps and common mistakes we see when it comes to the cloud.

Be sure to check out Caroline’s podcast ‘Humans of InfoSec’ here before joining her keynote session next week.

It’s always important to listen. But when listening means driving ideas forward, opening your ears can be the most beneficial tool to be better than we were yesterday.

So open your ears, get ready to listen and join us Aug. 4 and 5 at 9 a.m. ET for a much needed active listening experience! Register today.

August 3, 2021
Mark Your Calendars and Meet the Best in Tech at Cloud-Native Days with Kubernetes
After over a year of dreaded isolation, many of us are ready to return to the networking and social atmosphere of pre-COVID life. While physical proximity continues to be a struggle, virtual proximity through events like virtual summits and teleconference meetings, is getting increasingly more helpful amidst the transition.

Here are the top 10 reasons why Cloud-Native Days with Kubernetes is a must-attend event:
1. Cloud-Native Days with Kubernetes is a continuation of the virtual social interaction we’ve seen throughout the last year but offers attendees more than just a chance to talk with session leaders and speakers.
2. Sessions will be geared toward practitioners, managers and C-level executives, and led by industry thought leaders and doers in the cloud-native space, allowing attendees an opportunity to meet and network with experts in the cloud-native field.
3. At the end of this two day virtual summit, attendees will walk away with a better understanding of cloud native and its impact on the IT landscape.
4. Cloud-Native Days is hardly short of talent with over 50 speakers holding featured, insight and spotlight sessions.
5. Attendees will have networking access to a variety of speakers through keynote sessions at Cloud-Native Days, but catching keynote speakers Tracy Miranda and Rosalind Radcliffe’s sessions will certainly be a highlight of the virtual summit.
6. Not only will attendees be able to network with speakers, by means of networking, attendees will have the opportunity to forge collaboration. Keynote speaker Tracy Miranda has some valuable words to share regarding projects born from collaboration. She says, “We had this idea that Continuous Delivery is bigger than just one project, and we should be working together to make things inter-operable and better for everybody. Then as we went around talking to people for that idea— when it resonated with other people— they really became fans, and they would be like, “How can we help? What can we do? This is how we build up on it.” So find that core set of folks who will be enthusiastic, and will get you through the honeymoon period.”
7. Learn from the best of the best in the cloud-native space. With cloud-native technologies becoming an integral part of IT environments, it’s incredibly valuable to learn from industry specialists changing the IT world as we know it.
8. Listen to the best of the best at Cloud-Native Days. It’s always important to listen. But when listening means driving ideas forward, opening your ears can be the most beneficial tool to be better than we were yesterday.
9. Get real-world insight into topics like: trends and best practices in the cloud-native space, addressing Kubernetes complexities, tackling cloud-native security from the onset, etc.
10. Have fun while learning new things! Who says networking and learning can’t be fun? With so many exciting people, sessions and topics, attendees have a lot to look forward to at Cloud-Native Days with Kubernetes.
Networking isn’t just about linking on LinkedIn anymore. Collaboration doesn’t come from a request, it comes from interaction, engagement and communication. Find all three and start collaborating at Cloud-Native Days with Kubernetes, Aug. 4 and 5 at 9 a.m. (ET).

Now mark your calendars and meet the best of the best in tech! Register today.
August 2, 2021
Learning from Loris Degioanni: Cloud-Native Days with Kubernetes Virtual Summit

Keeping up with information can be challenging. With all these changes, you’re probably left wondering, “who can guide me through all this information?” Fortunately, Cloud-Native Days with Kubernetes is focused on giving attendees the tools they need to become proficient in cloud-native technologies. At the virtual summit, attendees can tune into our expert-led featured sessions and learn how to leverage cloud native technologies to move faster and more securely.

Cloud-native technologies are quickly becoming an integral part of IT environments as organizations continuously accelerate their development efforts to meet business demands. Because of this, it’s incredibly valuable to learn from industry specialists changing the IT world as we know it. And who better to learn from than the industry thought leaders and doers in the cloud-native space? Through sessions touching on topics like security and observability, our featured tech titans will give you a better understanding of cloud native and its impact on the IT landscape.

Today, the CI/CD pipeline is mainly built on open source tools – Kubernetes, Jenkins, GitLab, etc. Security has traditionally been closed, but it’s now clear the pace of innovation cannot be constrained by proprietary development models. Keynote speaker Loris Degioanni, CTO and founder of Sysdig, will discuss key practices needed for a secure cloud and container environment, including: what is required to increase security, visibility and simplicity in the cloud, lessons learned from major attacks like Kaseya and SolarWinds, ways to leverage Secure DevOps to not only ‘shift left,’ but also ‘roll right’ for detection and response, and how open source is the key ingredient to see all your signals in a constantly changing landscape.

In his article, “Open Source is Taking Over Security,” published last year on The New Stack, Loris Degioanni elaborates on this idea that open source is essential to maintaining high security, stating, “I argue that, despite having lower penetration of open source, security is the industry that benefits the most from an open source approach. I also argue that open source will gradually take over and become the standard way to do security.” To understand this further, Loris breaks it up into a few key questions: Why is open source the best way to do security? and, Will open source become the standard way to do security?

Let’s start with the most important question: Why is open source the best way to do security? Loris is adamant that open source is the key ingredient to security because of one thing – speed of innovation. Loris points out that the rise of widely adopted and open computing platforms like Kubernetes have had a big impact on how distributed, coordinated ecosystems can beat out a ‘behind closed doors’ single vendor 100% of the time. Loris writes, “On one hand, Kubernetes and cloud native have such a fast innovation pace that it’s hard for a vendor to keep up by itself. On the other hand, thanks to Kubernetes, for the first time we have a completely open platform to run our applications, where security can be natively integrated rather than being bolted on top.”

Open source also increases the speed of innovation because it empowers end users to work with vendors. Any user, regardless of size and level of sophistication, Loris says, can provide feedback in a tight loop and they can also contribute. So why is this relevant to security? As Loris explains, “The intrinsically fragmented nature of vulnerabilities and threats makes this bazaar-oriented approach to contributing very effective.”

This brings us to Loris’s second question: will open source become the standard way to do security? Not only does Loris say yes, open source will become the standard way to do security, but in fact there is no escaping this. Using a metaphor of bad guys vs. good guys to describe cybersecurity battles, Loris says, “the army of the bad guys is big, smart, and aggressive. And the deck is stacked in their favor.”

So how do the good guys win in this scenario? Loris says the best chance at this is, “working together, as a team, leveraging each other’s strength, making sure that no energy is wasted.” Rather than having competing standards upheld by a variety of vendors, Loris is adamant that “a much better approach consists of leveraging a common set of standards that are deeply integrated in the platform, owned by the community, driven by consensus, on top of which all of the players can confidently innovate.”

Much like Loris’s approach to open source, innovation and security are also valuable key practices at Cloud-Native Days with Kubernetes. Life moves fast. Innovation cannot afford to be slowed down, especially now. So begin your cloud-native information journey by tuning into our expert-led sessions, gathering your questions and learning from our talented speakers August 4 and 5 at 9 a.m. ET.

July 29, 2021
Maximizing Capabilities and the Importance of Value Stream Management

Even if we don’t use them to the full extent, applications shape our entire lives. And more than half the time we have no idea what our applications are capable of. On a daily basis, the average person uses seven to eight apps on their mobile phone. Throughout the week, the average person uses 30 applications. But, how many of those applications do we thoroughly know how to use? That’s where Eric Robertson, SVP strategic advisor and Tim Stiling, manager of product marketing from ConnectALL come in. Both are speakers and will be holding sessions at TechStrong Con 2021.

Tell us more about ConnectALL and what you’ve been up to lately.

Tim: We really want to try to figure out how we can best deliver value to our customers’ businesses. On a very basic level, ConnectALL helps customers connect their tools! Now once your tools are connected—what you do with it—that’s where the fun can begin. I know Lance Knight, our president and COO, he has a fun saying where he talks about how it’s almost like electricity. So the electricity itself—kind of like the connecting of tools—it’s cool, but in and of itself doesn’t do anything. It’s what you can do with the electricity.

To answer the second part of your question about what we’re up to lately, it’s really trying to find and figure out all those possibilities (synchronizing records, facilitating communication, triggering different actions, etc.) and making sure that our customers in the market are aware of it.

Digital transformation is at the top of the mind for every organization and as consumer consumer demands are changing, in what ways has this affected the value stream management (VSM) industry?

Eric: Companies are organizing their entire businesses around delivery of business goals that are essential to customers and are leveraging value streams as an essential part of their digital transformation mission. Basically this allows them to improve business IT integration and better manage changing priorities across different organizations. This is happening because we are seeing that organizational teams, the processes, the tools and tech platforms are constantly changing because they need to adapt to different conditions in the marketplace. As a result, value stream management is quickly being seen as essential for building, transforming, and optimizing those organizations’ technology enabled business models and that’s why it’s critical right now.

Value stream management has kind of been a buzz word in the tech industry recently. Can you share the true business value behind utilizing value stream management?

Tim: Ultimately with value stream management, it’s hard to say that this will lead to business value because business value could be different for every company. When it comes to value stream management, it’s more about the methodology and the mindset behind it. It’s all about this idea of continuous improvement. It helps you and your organization constantly drive toward your business goal by continuously improving and being better today than you were yesterday and better tomorrow than you are today.

Is VSM for every business? And if so, how can these businesses effectively start incorporating this solution into their overall business strategy and operations?

Tim: Value stream management is absolutely for every business because whether they know it or not, every business has value streams. In fact, everything we do has a value stream, even something as simple as making a cup of coffee.

One of the prevailing myths when it comes to value stream management is that it’s synonymous with DevOps or that you have to be in a DevOps transformation in order to be able to do it. Some organizations might be in an agile transformation or DevOps transformation—which is great, we aren’t saying don’t do that and do value stream management instead—VSM is a way to make that transformation more effective.

You might already have all you need on your desktop right now, but there’s a chance you’re missing that link between your applications. It’s important to understand your applications—how they can maximize your workflow and cut down on time. So if you’re feeling disconnected, reach out to ConnectALL to connect all of your apps and don’t miss TechStrong Con 2021.

Register today and tune in to Eric and Tim’s sessions on value stream management happening Wednesday, July 14 and Thursday, July 15. The clock is ticking!

July 13, 2021
Change Is Knocking: The Future Readiness with Ian Khan

In preparation for TechStrong Con next week, MediaOps media guru Rebecca Auguste sat down with featured keynote speaker, CNN technology futurist, Forbes contributor and CEO and founder of Futuracy, Ian Khan to talk about future readiness.

A globally recognized technology futurist and creator of the Future Readiness Score, Ian will be hosting a live session at TechStrong Con, “The Art and Science of Future Readiness,” on July 15 at 11:45 a.m. (EDT). In this session, Ian will help put a realistic picture around what businesses need to do and must to not just survive but thrive and why a measurable method for success is key to purpose, growth and profitability. But, what is future readiness? What does a technology futurist do? And why is future readiness important to digital transformation?

As a stepping stone for what’s to come in next week’s live session, Ian’s interview with Rebecca not only sheds light on the questions above, but also how to make sense of the state of disruptive chaos in the world today. Modern technological change is impacting some businesses as it has never done so in the last 500 years. Within this era, the rules of success are somewhat different from what they were, even just 10 years ago, which is why Ian’s future readiness is as important as ever.

You can read more about future readiness on Ian’s website here, but he says, “the problem has been that future readiness is a misunderstood area of management and leadership. You ask somebody if they are future ready and they will possibly tell you about how many technologies they are using or not using and that’s just one part of it. Future readiness has to be at the highest level of importance in your business because it dictates and governs everything that is happening whether you’re selling, marketing, you’re a servicing client, it encompasses everything to help you grow.”

In addition to future readiness is your future readiness score. Ian says, “The future readiness score figures this out, helps you understand where do you stand with the respect of the systems of operation in the engagement category” and that, “organizations that are future ready have engagement mastered.” But it isn’t enough to read your readiness score. Ian is adamant that, “Your journey has to continue from there and you’ve got to keep on monitoring your future readiness score and work on improving it.”

So how can businesses not only keep up with all the changes, but find ways to anticipate future trends? The most important thing is that, “You’ve gotta be quick to adapt and to respond. You can’t just wait and get paralyzed from what’s happening out there. As a leader, your responsibility now is to be fast, responsive and to be quick to do anything that is required. You’ve also got to have phenomenal observational powers now where you’re looking at short-term, medium-term and long-term trends and identifying information that is coming from there and incorporating that into your business.”

Some advice Ian would give someone ready to start their journey with future readiness is that, “Change will continue happening to you. Change will continue knocking on the doors of your business. It’ll continue disrupting you and challenging you. Your sales models, your sales teams, there will always be competitors who will come up against your business so the environment is constantly going to change. Please expect that. Expect that every single day that you walk into work that you talk with your teams and customers and work with your customers to get them ready for change because that’s when they’ll love you. In order to make this golden exchange happen you’ve got to know what the change is, you’ve got to anticipate it, you’ve got to look into it. The future readiness score can help you do that. Or just being super aware of what’s happening in your world can do that. We’ve got to open our eyes to change, accept it, make it part of our everyday and success will knock at your doors.”

Begin your future readiness journey at TechStrong Con. To see the full agenda and secure your free spot at the virtual event, visit the TechStrong Con website.

July 9, 2021
A Data-Driven Approach to DevOps: Tips for Improving Speed and Scale

Data has an undeniable power in a business context — it can sway stakeholders, help identify pain points, and demonstrate how changes are making an impact on the company. As the creator of Jenkins, Kohsuke Kawaguchi has noticed from his conversations with business leaders in the industry that implementing a data-driven mindset can be a game changer in the DevOps journey.

While data may not initially seem like it provides a full enough picture for businesses to work with, it carries invaluable insights and a certain level of objectivity that allows for a smoother transition in the DevOps process. Additionally, adopting a data-driven approach helps to showcase the small wins in your DevOps journey that can help build more confidence and trust in the process.

In the interview below, Kohsuke teases his session, “Go Data Driven With Your DevOps: 5 Tips for Improving Speed and Scale,” at TechStrong Con. On July 15, Kohsuke, along with fellow Launchable Co-Founder Harpreet Singh, will provide tips on how a data-driven approach to DevOps can help improve speed and scale.

To see the full agenda and secure your free spot at the virtual event, visit the TechStrong Con website.

July 8, 2021
No More Hot Potato: How Collaboration is Key in Application Security
Technology is accelerating at an unprecedented rate and companies with little digital footprint or experience in application security are struggling to keep up. With more and more breaches and vulnerabilities being detected in applications, people are shifting blame like it’s a game of hot potato. But it doesn’t have to be that way.

With Shifting Left Virtual Conference rapidly approaching, Rebecca Auguste sat down with the CEO of ShiftLeft, Manish Gupta, to discuss how developers and application security teams can better collaborate to increase application security efficacy. The two talked about ShiftLeft’s strategy, how innovation and security can be at odds with one another, adopting modern solutions and everything in between.

What is ShiftLeft?

ShiftLeft is a next generation application security company. As companies are moving rapidly adopting the cloud, developing software ever faster so they can deliver features to their customers and drive ever increasing revenue, in that race we are starting to leave security behind because we are still using legacy tools. The idea is we need to shift left and we have to start fixing vulnerabilities as early on as possible in the process thereby reducing our cyber risk.

Are innovations and security at odds with each other now?

Historically they have been. Use of legacy technologies in a modern pipeline forces customers to choose between being agile delivering feature functionality faster or getting better at security. At ShiftLeft we are starting to show through our customer successes that that choice doesn’t have to be that way. We can become more agile and we can become more secure.

Here are some important statistics from ShiftLeft customers:
1. If you’re doing automated enforcement in ShiftLeft you are fixing 91.8% of the vulnerabilities
2. If you’re not doing automated enforcement but you’re using a modern solution like ShiftLeft you’re fixing 58% of vulnerabilities in the first sprint.
3. If you’re still stuck with a legacy solution, your team isn’t fixing 60% of the vulnerabilities ever – forget if it’s the first, second or third sprint. It becomes technical debt.
So why aren’t people adopting modern solutions like ShiftLeft and ditching legacy solutions?

Legacy solutions ask developers to slow down because they have to take a few hours to go scan and dump a long list of vulnerabilities. As the developer, seeing hundreds of vulnerabilities is like a deer in the headlights. Because it’s a mountain of work, it’s easy for developers to want to ignore the problems. The question shouldn’t stop at “what are our applications consisting of?” The real problem gets solved when we start asking what do our applications contain and what vulnerabilities do they have that can be exploited, therefore how quickly can we fix them. It’s all about moving to be proactive, not reactive.

How can development and security teams better collaborate to increase the efficacy of security with applications and software?

It’s extremely important for us to realize that developers are not responsible for security. Developers are measured, they are compensated to deliver feature functionality on time and to provide that feature functionality with minimum bugs. But bugs are not vulnerabilities. There is a lot of talk in the industry that developers should become responsible for application security. We aren’t there today but we can eventually.

There are two important application personas:
- Application security: Application security has a mile wide and inch deep knowledge of applications and who is compensated on app security improvements.
- Developers: Developers have a mile deep but inch wide knowledge of software because they are so focused on their own code.
Both personas are required because application security cannot fix vulnerabilities in applications, the developer must do that. But developers aren’t going to want to do that unless that work is prioritized by application security.

Key takeaway? Collaboration is essential to application security.

We need to create a workflow that allows application security to meet their end goals such as: What are the vulnerabilities of an application? What are the critical vulnerabilities? How can I provide these vulnerabilities to the developer in a developer workflow without asking them to go to a different console so they can fix vulnerabilities as quickly as possible? We need to start seeing a workflow that allows both application security and developer personas to work collaboratively to improve application security.

Shifting Left 2.0 is a two-day virtual conference taking place from 9 a.m. to 2 p.m. PDT on June 22nd-23rd that dives deep into application security in the modern tech space. To register for free and to check out the full agenda, visit the Shifting Left 2.0 website.
June 18, 2021
Security Heroes Wanted: Join Our Virtual DevSecOps Conference Shifting Left 2.0 this June
Every year data shows us that technology is advancing faster than ever. In January of this year, DataReportal estimated that 4.66 billion people around the world use the internet: a 316 million increase since 2020. Now, with global internet penetration standing at 59.5%, it’s clear our world has changed, and application security is no exception. The ⅗ of the global population represented in DataReportal’s emphasizes just how many people rely on digital services to live and work. With this rapid change in technology practices and a steady upward trend in digital usage, it’s imperative that application security keeps up. Because if it doesn’t, the implications for poor code security could be detrimental.

With everything accelerating at such an unprecedented rate, the question isn’t “will developers have a larger role in security,” rather “when will developers have a larger role in security?”

We know this evolution is important and that it’s better to get started early than be late to the game. Which is why we’re hosting Shifting Left 2.0: a free two-day virtual conference aiming to bring together Modern Dev Teams, Application Security Gurus, and the developers who are ready to become security heroes. Be sure to stick around our Fireside Chat where we’ll discuss how to measure the success of your AppSec program and how AppSec-developer collaboration is key to AppSec success in an agile world.

We have a great lineup of speakers and fireside chats that you won’t want to miss!

Who will be speaking at the event?

David Howell: Vice President, Zero North

Erich Smith: Principal Security Engineer, JupiterOne

Andra Lezza: Senior Application Security Engineer, Bulb [Fireside Chat]

Paolo del Mundo: Head of Application Security, The MotleyFool [Fireside Chat]

Adam Fletcher: CISO, Blackstone Group

Dr. James Ransome: Chief Scientist, CyberPhos

Shaleen Devgun: CIO, Schneider National

Izak Mutlu: Ex-CISO, Salesforce

David Estlick: CISO, Chipotle [Fireside Chat]

Enrique Salem: Partner, Brain Capital [Fireside Chat]

Stephen Scharf: CISO, DTCC [Fireside Chat]

Stuart McClure: Ex-CEO, Cylance [Fireside Chat]

Terence Runge: CISO, Reltio [Fireside Chat]

Nikhil Gupta: Co-Founder & CEO, Armorcode

What can attendees expect from this event?
1. Connectivity to security experts: Learn from the people behind ShiftLeft and the industry’s top visionaries as they discuss the future of application security. You’ll be able to ask questions, chat one-on-one, and join panel sessions like our Fireside Chat. This is the perfect networking opportunity for any level of developer involved in modern security solutions. Take the opportunity to strengthen your connections, build confidence, and gain more knowledge of application security and its importance.
2. Learn AppSec Best Practices: Hear directly from developers and security leaders as they discuss best practices for integrating security into CI/CD pipelines. Not only will developers be exposed to more security questions in the future, they’ll be asked to do things much faster than ever before. If you’re a developer tasked with incorporating modern security solutions into your workflows or an application security guru looking to learn, our event can help boost your technical skills and prepare you for intensive security situations you’ll face in the future.
3. Product Roadmap and Industry Trends: Get an exclusive first look at upcoming releases and our take on the latest trends in application security. With application security changing constantly, this event poses an opportunity to gain a different perspective and see application security in a new light.
Schedule

June 22:

9 am-9:30 am (PDT)

Opening Keynote

Manish Gupta – ShiftLeft

9:35 am-10:05 am (PDT)

The Need For Speed: Early and Accurate AppSec for the Modern SDLC

Rob Lundy – ShiftLeft

10:10 am – 10:40 am (PDT)

AppSec Ecosystem

10:45 am – 11:45 am (PDT)

A Fireside Chat – Future of Application Security

Manish Gupta – ShiftLeft

11:45 am – 12:00 pm (PDT)

Coffee Break

12:00 pm – 12:30 pm (PDT)

AppSec in Context

1:05 – 2:05 pm (PDT)

A Fireside Chat – How to Measure the Success of Your AppSec Program

Arun Balakrishnan – ShiftLeft

June 23:

9 am – 9:30 am (PDT)

Opening Keynote

Chetan Conikee – ShiftLeft

Fabian Yamaguchi – ShiftLeft

9:35 am – 10:05 am (PDT)

Incremental Data Flow Analysis with CPGS

Fabian Yamaguchi – ShiftLeft

10:10 am – 10:40 am (PDT)

Intro to Code Analysis

Vickie Li – ShiftLeft

Suchakra Sharma – ShiftLeft

10:45 am – 11:45 am (PDT)

A Fireside Chat – State of the Art in AppSec

Manish Gupta – ShiftLeft

11:45 am – 12 pm (PDT)

12:00 pm – 12:30 pm (PDT)

HackSec: A Hacker’s PoV for Finding Source Code Weaknesses

Chetan Conikee – ShiftLeft

Suchakra Sharma – ShiftLeft

12:34 pm – 1:35 pm (PDT)

TBA

When and where will the event be held?

This free event will take place virtually from Tuesday June 22 – Wednesday June 23, 2021 from 9am-2pm PT.

How can I register?
1. Click here to get to the registration portal.
2. Begin registration by providing your email and your registrant type (e.g. attendee).
3. Provide some essential information.
4. Get your confirmation and mark your calendar.
June 3, 2021
The Time for Collaborative Security Is Now

As Bruce Schneier famously said, “security is a process, not a product.” We commonly see companies pour millions of dollars into cybersecurity products and tools to protect against vulnerabilities and lower risks, and yet, more often than not these ample funds are not enough to defend against attacks.

Within the span of two decades, we have seen how social power can be leveraged to benefit the masses with applications like Waze, Airbnb, Uber and many others. This same innovative idea could revolutionize the way the cyber world operates by giving security professionals the edge in identifying potential threats.

CrowdSec CEO Philippe Humeau recognizes the capabilities of crowd power to invigorate the cyber realm. The community firewall created by CrowdSec uncovers thousands of malicious IP addresses worldwide and helps cripple hacker behavior before it can evolve into major cyberattacks and data breaches. Additionally, the start up just announced it raised $5 million to help take the collaborative firewall to the next level as they work to transform the cybersecurity landscape.

In the interview below, Philippe emphasizes the benefits of collaborative, open and transparent security environments in tipping the scales against the hacking dilemma that plagues companies across the globe.

Join Philippe at DevOps Connect 2021 on May 19, during the RSA Conference, where he expands on this topic in his session “The Age of Collaborative Security.” Also, learn more about CrowdSec and see a demo of the tool during his spotlight session, “Introducing CrowdSec, The Open-Source Massively Multiplayer Firewall.”

To see the full agenda and secure your free spot at the virtual event, visit the DevOps Connect website.

May 5, 2021
Recruiting Pro Tip: Treat External Recruiters As If They Work for You
The best recruiters are salespeople. Just because you have hired a salesperson does not mean they are going to know how to sell what you have to put out on the market. So many people believe that once you have hired an external recruiter the job is done—they will go out and find the right people for you.

Sure, most recruiters spend half an hour talking with someone in HR about what they should be telling candidates about the company and the position. They might even have a half-hour chat with a hiring manager. This is not enough—not even close to achieve what you hired these folks to do.

The technologists you want to hire have other offers or are happy at the jobs they have. To hire them, you have to sell—you have show them how your mission and your work environment are right for them. As the hiring manager, you may be great at this, you may be able to enthusiastically present this to anyone. But just because you can doesn’t mean your recruiters can!

Here is what you need to remember: Salespeople need to be sold. It’s easy to sell a product you believe in. That belief can’t just be bought—the salespeople you just hired to find and attract that hard to get talent need to be sold, too.

If you want them to believe in the product, then you need to show them what the product is all about—and, remember: A big part of the product is YOU, the hiring manager. You need to make sure your recruiters care about you, the position and the company.

Here are four ways to sell the salespeople and get them working harder and more effectively for you:
1. Bring them in for an office tour. Introduce them to key players and let them get a feel for the culture. If you don’t have an office, then set up a videoconference meeting and let them meet the team and ask questions. Make this an enthusiastic, fun meeting. It’s easier to sell something if it’s tangible, if you have seen it.
2. Spend at least an hour going over the mission, the company and what you are looking for. Have them give their pitch back to you to make sure they know the ins and outs.
3. Give them your cellphone number. Show them you care and they are at the top of your list, and be there to unblock anything that gets in the way or their success.
4. Continue to build the relationship over time: Have regular meetings. Bring them to a company happy hour. Don’t assume the job is done because you started off right. Successful external recruiting is a relationship, not a transaction.
If you help them understand and care about the company like an employee and show them you care just like you would an employee, external recruiters will work harder and smarter for you than anyone else.

Looking for the right talent? Please visit recruitops.com and learn how our talented recruiters can help you find the right fit for your team.
September 24, 2020