Category: RSAC 2020

  • DevSecOps Days Virtual Summit: The Best of Dev, Sec and Ops

    DevSecOps Days Virtual Summit: The Best of Dev, Sec and Ops

    We’re fresh off RSA Conference 2020 and the live version of DevOps Connect: DevSecOps Days, a daylong event packed with industry experts speaking on all things Dev, Sec, Ops and variations of the three. It was highly successful in both attendance and knowledge-sharing, so once again we’ve taken the entire event virtual and bringing it to you.

    The return of DevOps Connect: DevSecOps Days Virtual Summit will take place Thursday, March 26, at 10 a.m. EST. The all-day event will feature speaking sessions and panels focusing on digital transformation and disruption, with experts and practitioners discussing their company’s transformation to DevSecOps, the issues that have impeded their progress and how they get buy-in from all levels of the company.

    Our virtual summits are just like a real conference but without the hassle of traveling, tickets and crowds (and, this year, nasty coronaviruses). The online environment at DevOps Connect: DevSecOps Days Virtual Summit features a lobby, expo lined with booths full of downloadable resources, and an auditorium where attendees can watch sessions by Bryson Koehler and Jamil Farshchi, CTO and CISO of Equifax; Larry Macherrone, director of DevSecOps Transformation at Comcast; and other industry forward-thinkers to get an exclusive look into DevSecOps initiatives at large enterprises and organizations across industries.

    Here’s an at-a-glance lineup of our speakers:

    • Bryson Koehler, Equifax
    • Jamil Farshchi, Equifax
    • Dr. Amit Elazari, Intel
    • Jennifer Czaplewski, Target
    • Bill McArthur, TD Bank
    • Jasmine James, Delta Airlines
    • Charlene Li, author
    • Larry Maccherone, Comcast
    • Sladjana Jovanovic, TD Bank
    • Ross Clanton, executive consultant
    • Sean Davis, Equifax
    • Chris Roberts, Attivo
    • Chris Riley, Splunk
    • Alan Shimel, MediaOps
    • Mark Miller, Sonatype

    DevOps Connect: DevSecOps Days Virtual Summit is truly an all-day affair, with sessions running from 10 a.m. to 5 p.m. Eastern. The expo hall will be open throughout the event, giving attendees the opportunity to chat with vendor sponsors, download information and even take part in a scavenger hunt to win prizes including Amazon gift cards.

    Plus, those who register but can’t make the event will be able to access it later—all registered attendees will receive a link to access the virtual summit on-demand.

    Space is limited, so don’t wait. Register today for DevOps Connect: DevSecOps Days Virtual Summit to hear the best of what’s happening in the DevSecOps space from those who are actually doing it.

    — Charlene O’Hanlon

  • Coronavirus Update: A Slowdown Already Occurring

    Coronavirus Update: A Slowdown Already Occurring

    I have been watching the real-time regional situation reports about the coronavirus from the Chinese medical association site ncov.dxy.cn (the same site the John’s Hopkins outbreak dashboard sources its data from) closely now since very close to the beginning of the outbreak, and my daily routine has been to snapshot the regional outbreak tallies and compare the numbers with previous data to discern the trends.

    The top-level executive summary is that while three nearby provinces have peaked now at around 3,000 cases of the coronavirus, the majority of the other provinces got up to a few hundred to a thousand cases. Cases are declining universally now as folks recover, and new case increases have slowed from the initial fast-spreading burst now down to a trickle outside of Hubei.

    The percentage of overall cases has gradually increased in locality from its initial widespread that saw half of all cases in Hubei Province centered in Wuhan now steadily inching up to closer to 90% (above 83%) of cases being centralized in Hubei and Wuhan. Essentially, the outbreaks were sporadic in small clusters and contained in the other provinces, and the counts are all going down—a positive sign. The only place it ever really saw huge unrestrained growth was in the city of Wuhan, where new cases continue to be diagnosed, but as I mentioned above, even that has seemed to be under control now, with the rate of overall new cases in an almost-steady linearly decline for two weeks now, as presumably, the containment seems to be working. The quarantine that many experts said was unlikely to succeed is showing every indication of actually succeeding.

    coronavirusThe graph above IMHO best describes the progression of the coronavirus. Ignore the big spike—that was a numeric anomaly from the redefinition of “clinically prescribed” cases situations where patients had pneumonia symptoms but test swabs indicated negative for the virus, presumably where health officials cleared the virus and only the symptoms from the induced pneumonia remains. They redefined the counting criteria and classification so that those patients could access care facilities, which is why the graph seems to spike—though this bureaucratic anomaly caused undue panic in many folks observing the numbers before the Chinese-language information about this redefinition reason percolated out and was translated as an explanation to international media. Overall, this graph illustrates what I saw from the regional counts: There was an initial rapid ramp up and then containment and a slow, steady decline in new case increases. The yellow line is suspected cases and the red line is confirmed tested cases. As you would expect, the suspected numbers led the confirmations by around a day.

    The situation right now is that really the only place case counts of the coronavirus are increasing is in Wuhan itself, with the greatest density of cases. Starting one to two weeks ago the cases rates finished their rapid expansion in the other provinces and began their long, slow, steady decline as patients recover, with a small number of fatalities. New cases seem to be fairly limited small clusters of one to 10 cases and isolated, as well as declining for weeks now.

    Internationally, the only trouble spot is the quarantined cruise ship in Japan, which seems to be acting as an incubator. I can tell you a lot about that ship because one of my co-workers’ parents are on board and I’ve been getting first-hand reports of what is going on. After a burst of cases last week on the ship, those in charge have fortunately decided to disembark the ship to national quarantine facilities set up by the passenger’s origin governments. This is good because conditions aboard were becoming pretty miserable, entertainment was limited and unlocking the porn and movie channels did little to appease the occupants, who were becoming frustrated with the limited food choices in particular. It was a terrible time for the staff—essentially on a jail ship forced to feed and the occupants. I’m told disembarking is due to begin over the next few days.

    Outside China, excepting the cruise, there were relatively few cases of non-direct secondary infection of the coronavirus that weren’t directly linked to someone who had been in Wuhan or in contact with someone from Wuhan. There were a few clusters of infection, particularly in one Hong Kong apartment building and another one in Singapore, but pretty much all the cases were primary contact up until now, so it seems international diligence and containment is holding.

    There is plenty for folks to be diligent about, but for now, there seems very little to panic about and every indication that this impossible quarantine is going to be studied as a model of how to respond in the future.

    Let me also pre-empt the inevitable distrust of the Chinese government some folks have to mention that the inevitable conspiracy fear-mongering and panic you see being spread in paranoid YouTube rants and misrepresentation clickbait is completely unfounded from the data and news sources I monitor. To quote a WHO press conference, “The Chinese authorities have shown exceptional transparency and openness in this outbreak.” Another expert I heard on the radio who worked on the earlier SARS outbreak noted that one of the key lessons learned in that incident was the importance of rapid and accurate information dissemination to control and respond to infection outbreaks, and the Chinese medical association seems to have taken this lesson to heart to not repeat those missteps with the coronavirus. The fact that I was able to monitor regional situation reports over the last two months is a clear indication of that.

    The folks who feel that somehow the Chinese government is sandbagging the numbers and the problem may be worse than indicated aren’t really acknowledging the stupidity of such a fiction. Misrepresenting the situation to their own medical professionals combatting the outbreak would not only be irresponsible and dangerous but also extremely unlikely and infeasible. There is little incentive to misreport, and such a fiction would need to involve concerted action from hundreds of thousands of medical professionals—and likely beyond the capabilities of even the Chinese bureaucracy; in the end, their government is as clumsy and bumbling as ours and it would require far too widespread a meddling to maintain consistency. The Chinese censors can stomp down and suppress anything that makes the bureaucrats jumpy, but it is likely incapable of producing such a coherent fiction across so many sources, sites and reports as would be required to fulfill the paranoid fantasies of wary folks. Not only is there no motive or gain, but there is also likely a huge disincentive and probably penalty for misreporting and misrepresentation, if the rapid fall from grace and dismissal of the bureaucrats who made the initial mistake and sandbagging of the numbers that led to the initial outbreak is any indication. As a matter of fact, the only indication I’ve seen with any substantive evidence of government information suppression was the blocking of the online lynch mobs for those bureaucrats who were at fault for the doctor who sounded the alarm’s arrest after that doctor tragically died. Anyone who would dare tamper with the numbers likely would face the same fate.

    There is by definition underreporting as the visibility to cases of the coronavirus with very mild symptoms or test errors or any number of other anomalies in mass counts, but the numbers from a macro level look promising.

    Overall, I’m relieved to see that the situation is resolving with only sporadic and isolated lapses in containment—there were only ever 85 cases internationally outside of Asia with a single fatality. That number is down to 52 now as folks recover and no recorded incidents of secondary infection without direct contact with a traveler from Wuhan. The mortality rate statistic is ever sinking as patients among the roughly 60,000 cases cumulatively diagnosed recover, and it’s proving to be primarily a threat to the elderly, though interestingly I’ve seen reports that few children seem to be affected.

    Later next week we should see the results from the clinical study of the cocktail of repurposed HIV antivirals that showed such great promise in simulations and early tests that had some severe patients recover in as little as two days. The study was rolled out in amazingly rapid fashion and the medical community seems to have focused on combatting this new disease with a vengeance—supposedly vaccine trials are to begin as early as next month.

    Vigilance and wariness are due, but at this time there seems to be no cause to panic, forward panic or feed conspiracy fears preying on phobias about diseases or likely even change any day-to-day activity or future plans for folks outside of China regarding the coronavirus. The estimate from current numbers is placing the potential of the quarantine lift at the beginning of April in the only forecast I have seen.

    — Dragos Ruiu

  • Acting Rationally Regarding Coronavirus: RSAC Conference Update

    Acting Rationally Regarding Coronavirus: RSAC Conference Update

    With all the hype surrounding the coronavirus, let’s take a step back, take a breath and not give in to emotional conference mob fear-mongering

    We have all read the headlines: Mobile World Congress in Barcelona has been canceled. Facebook pulled the plug on a smaller conference next month in San Fransisco. IBM Security has pulled out of RSA Conference next week. Health and safety are everyone’s concerns, but are we acting rationally regarding coronavirus?

    RSA Conference (RSAC) put out an update on Friday (use that link to stay up to date on RSAC) with some great metrics on some of the risk factors and attendance numbers. It is also important to note that RSAC is expected to draw a crowd of about 50,000 visitors (some of them attending the DevOps Connect: DevSecOps Days event that we produce).

    Yes, eight vendors have withdrawn from exhibiting at RSAC. Six of these were from China and frankly, given current travel restrictions, probably couldn’t get here anyway. One is from Canada and one from the U.S. (presumably that is IBM).

    But should we give in to emotional conference mob fear-mongering? There is some serious clickbait nonsense being bandied about, including “RSA in Doubt After IBM Pulls out of Conference.”  To be fair, the clickbait headline was updated, but still, that is just fear-mongering at its worst.

    Why would IBM and the Canadian company pull out? Well, two obvious reasons. One is for the safety of their employees and their potential customers. The other is economic if they feel attendance will suffer. But while I don’t have any facts to back it up, I would have to assume that unless the event is outright canceled, vendors pulling out at this late date won’t be refunded their deposits and payments. This is true not only of their fees to RSAC but also of the money they’ve ponied up for hotels, airfare, party deposits, etc. While potential liability for unnecessarily exposing people to the virus could be a legal option, reasonable precautions are being taken. So I don’t think economics play into the decision to pull out.

    As of Friday, RSAC reports that including the members of the canceled vendors, only 0.79% of attendees had canceled their attendance. I would assume that the overwhelming majority of these were attendees from Asia or other impacted regions who could not get flights here anyway. Something like 82% of attendees are from the U.S. On top of this, RSAC is taking additional precautions to keep the conference as germ-free as possible.

    I was in touch with RSAC management earlier last week regarding the DevSecOps event. At that point, I was informed that they were working closely with the City of San Francisco to do everything possible. They are following CDC and WHO guidelines. BTW, CDC still says the impact here in the U.S. to coronavirus is low.

    So, then, are we seeing an overreaction to coronavirus? The security industry, more than the mobile application or other tech industries, is more attuned to risk management. Are we managing this risk adequately? Are we giving in to the fear-mongers among us? The flu has killed so many thousands more people (albeit with higher infection rates), but that has never caused us to shut down conferences or question gathering in groups.

    Personal health and safety is everyone’s own right and responsibility, as well as the responsibility of the authorities. Of course, you should do what you think is best for you and your family. But I think times like this call for a moment of lucidity and the use of the risk management fundamentals so many of us practice in our professional lives.

    Those of you who know me personally know I am a huge Pittsburgh Steelers fan. Their coach, Mike Tomlin, has a saying that I think applies to this situation: “We don’t live in our fears, we live in our hopes.” I hope the current trend of withdrawing from our community is not one that will continue. I refuse to give in to exaggerated fears.

    I do want to announce two things, though, in regard to this coronavirus situation. First, for any conference organizers who have made the decision to cancel their event for this reason (it is your event, your decision), MediaOps is offering a conference disaster program (CDP) that will allow you to use our virtual conference platform and team to take your event virtual with almost all of the features of an in-person conference.

    We have produced more than 10 virtual conferences in the last year or so that have drawn tens of thousands of visitors with hundreds of sessions, exhibit halls, interactive booths, signage, live chat and more. You can go to the home page of Predict 2020, our most recent virtual event, and click “Recent Events” to get an idea here, but just a caution, registration is required. Please see our press release on this for details. It is important that the tech community continues to engage in the very important exchange of ideas, learning and community that is so vital to our success and progress.

    Secondly, Accelerated Strategies Group, DevOps Institute,  JumpCloud and MediaOps are hosting a survey to learn about what you and your organizations are doing in light of the coronavirus outbreak and whether this is forcing you to rethink actions and behaviors going forward—not just for attending conferences, but as part of disaster recovery and business continuity. For instance, is this situation changing your views around working remotely versus working in a large office, going to customer premises or international engagements? Help us gather the information—please take moment and head over to http://acceleratedsurvey.com to answer a few questions.

    As is the mission of Accelerated Strategies, all of the research and analysis will be made available to everyone to use without registration or any payment. Because “knowledge wants to be free.” I couldn’t think of a better example of why that mission is so important.

    “We appreciate being invited to support the efforts of Accelerated Strategies to learn how this global situation will impact people professionally. We know that the JumpCloud community has been impacted, so we are thankful to be able to help in a small way,” said Rajat Bhargava, co-founder and CEO of JumpCloud. “Supporting primary research into the impact of coronavirus across this community is important work, and will hopefully help shape the actions that organizations can take with their teams and business to successfully navigate the future.”

    “DevOps Institute’s mission is to advance the Humans of DevOps and we are obviously concerned about the impact on the thoughts and behaviors of our global community,” said Jayne Groll, CEO of DevOps Institute. “The best way to overcome the hype and adapt to changing times is to collect and share community data.”

    Finally, Mitchell Ashley, CEO of managing analyst of Accelerated Strategies Group, Groll and I sat down for a video discussion of the coronavirus discussion and the reasons behind the survey. The video appears just below. For information, we recorded this just before the news of IBM Security’s withdrawal from RSAC came out.

    [videopress 5RyZpLsG]

    — Alan Shimel