devopsy.kinsta.cloud

Tag: devops connect

DevOps Leadership Series: Security at Velocity

If it does not fit, it does not get done. For many DevOps practices, application security falls into the “does not get done” bucket. That’s because for many DevOps-centric organizations, application security has historically been done somewhere else, by someone else, who is slow.

Go faster. Shift left. Remove complexity. Reduce rework. All mantras of DevOps practices. And while DevOps practices have changed dramatically in recent years, many experts will tell you that application security has not changed enough.

In this installment of the DevOps Leadership Series, you will hear Chris Corriere (DevOps Engineer, Autotrader) and Mitchell Ashley (VP Information Technology, CableLabs) share perspectives on the state of DevOps and security. It is about security at velocity.

But is going faster and automating resulting in better security? There are still security pros who are uncomfortable with that premise. Nevertheless, that is where this is headed. The security community has to come to the mountain, otherwise the mountain is coming to them.

First, listen to Chris’ Corriere of Autotrader tell us his perspective that security can move at DevOps speed, as long as you take a diversified approach:

https://youtu.be/8DdfHkAK1Fk

Then hear from Mitchell Ashley, VP of IT at CableLabs as he remarks on the evolution of security from a validation role (at the right) to an integrated, ingrained role that has shifted left:

https://www.youtube.com/watch?v=pg_m7dYqUPU

This is the third in our series of interviews from this event. Stay tuned as the actual sessions from DevOps Connect will be posted shortly.

NOTE: If you have missed any of the other videos from this series, you can find them here. (We’re up to 15 so far).

May 21, 2015
DevOps Leadership Series: Software Supply Chains
We kicked off this series on Monday with Gene Kim (@RealGeneKim) sharing his views on the big theme for DevOps in 2015: proving that DevOps is applicable for large organizations.

Another theme that arose often during our recent “DevOps: Wine-ing, Not Whining” event was the importance of software supply chains. Every software development organization has a software supply chain, and DevOps leaders are now applying principles from lean manufacturing, Deming, and Toyota supply chain management to improve their operations.

They are applying software supply chain management principles help:
- choose higher quality parts (e.g., software binaries, containers, microservices)
- select higher quality suppliers (e.g., fewer defects, faster MTTR records), and
- improve traceability (e.g.., identifying defects or known vulnerabilities to expedite break/fix)
Today, we will hear from Jez Humble (Chef), Julie Tsai (Retail Giant) and Nick Galbreath (Signal Sciences) as they discuss on importance of software supply chains and DevOps. Then after watching the videos, you can learn more about the sea change in software supply chain automation in these two blogs from Mike Hansen (Software Supply Chain Automation) and Ericka Chickowski (Security, DevOps and the shift to a software supply chain).

Here are today’s short videos from our 2015 DevOps Leadership Series:

[youtube http://www.youtube.com/watch?v=4L4nrNpdTM4]

[youtube http://www.youtube.com/watch?v=UEkVYJ1T2NY]
[youtube http://www.youtube.com/watch?v=nTv8Yx0CpfY]

NOTE: If you have missed any of the other videos from this series, you can find them here. (We’re up to 15 so far).
May 19, 2015
We are sponsoring DevOpsDays Austin. Why?

I am really happy to announce that we have signed on as a media sponsor for DevOpsDays Austin, May 4-5. While we have served as media sponsor for any number of events over the last year, this is the first time we have signed on to sponsor a DevOpsDays event. I am going to Austin and will be there to participate and report first hand.

Why DevOpsDays? Why Austin? Why now? All good questions. I wanted to ask and answer them right here on devopsy.kinsta.cloud to be totally transparent.

Why DevOpsDays?

We do hold DevOps Connect conferences (our RSA event this week had 700 people there) and at first blush one might think they are competitive to DevOpsDays. But they never were in my mind and shouldn’t be in real life either. In InfoSec we have conferences like BlackHat, InfoSecurity Europe and RSA Conference, but we have Security Bsides too, which are much more like DevOpsDays. It is a big world and there is plenty of room for both. Not only plenty of room but plenty of need. One thing I have learned travelling all over the place these months is that there is still a lot of DevOps learning, sharing and as Gene Kim says, tribe building that needs to be done.

From everything I have seen and heard about DevOpsDays they do a great job on all of these fronts. I think as DevOps continues to gain acceptance there will be a much clearer difference in the audience and agendas at different DevOps conferences. The difference between a DevOpsDays versus a DevOps Connect will be obvious. The respective audiences will recognize this. There will be overlap at some levels and at other levels there won’t be.

But at the end of the day devopsy.kinsta.cloud is about spreading knowledge and learning about DevOps and DevOpsDays is too. So really the question is “Why shouldn’t we sponsor and support DevOpsDays?”

Why Austin?

That is easy. It’s not that Austin is weird (it is), it is the people and the history of what they have built in their DevOps community. I met first Boyd Hemphill about 6 or 8 months ago. He introduced me to Ernest Mueller, both of these guys were willing to hop in their cars and drive hours to come to San Antonio and Dallas to help educate people on DevOps at the recent DevOps Connect @ Innotech Conferences we held. They represent to me anyway, the very best of what the DevOps community should be. They weren’t territorial, judgmental or anything else but helpful. With people like that in leadership roles Austin has to be a great place to sponsor our first DevOpsDays.

In addition to Ernest and Boyd, I am familiar with what James Wickett has done with Rugged DevOps and Gauntlt (if you are not familiar with James and Gauntlt check out our new Ebook). Lastly, everyone you speak to say that Austin DevOps Days year in and year out is one of the best DevOpsDays anywhere. This year’s lineup looks like another stellar one.

Why now?

The answer is I think this is the right time for devopsy.kinsta.cloud to be involved with this part of the DevOps Community. I am not naïve or tone deaf enough that I have not seen or heard (how is that for a double negative) that some in the early adopter community were not big fans of what we have built at devopsy.kinsta.cloud. But I am also really proud of what we have accomplished in a little over a year. I am confident enough in our audience, our content and our place in the market to think that we can and have added to the discussion.

I believe that devopsy.kinsta.cloud has to offer value to the entire DevOps community. That includes people just looking to adopt DevOps, people who are just starting to learn about DevOps and all the way to people who have been leading and teaching about it for all these years now.

So we venture out into what is for us new territory. We are excited to support and be part of this great event. We hope that this will be the beginning of supporting other DevOpsDays around the world. Hope to see you in Austin, May 4-5.

What is in it for you?

Besides seeing coverage of the event here on devopsy.kinsta.cloud, there is more. As part of our sponsorship we were given two tickets to the event. I am only using one. We have another one available. The show is just about sold out and the tickets are a couple of hundred dollars at this point. If you would like to attend DevOpsDays Austin on us write me at editor@devopsdays.com with why you deserve this free ticket and it is yours. If more than one person rights I will pick the one with the best reason (in my opinion). I am not making the winners public or the reason they deserve it. So that is what is in it for you.

April 24, 2015
Live Blogging DevOps Connect @RSAC

We will be live blogging the DevOps Connect: SecDevOps event from RSA Conference on Monday, April 20th. Stay tuned for updates

April 18, 2015
DevOps Connect: Rugged DevOps @ InfoSecurity Europe

Following up on the tremendous demand we have seen for DevOps Connect @RSA Conference, we are taking this concept across the pond to Europe’s largest InfoSecurity event. DevOps Connect: Rugged DevOps @ InfoSecurity Europe will be on June 4th, 2015 at the Olympia in London. Partnering with the InfoSecurity Group and Reed Exhibitions, DevOps Connect will feature a full day of DevOps sessions, followed by a cocktail reception.

We will be announcing some exciting keynote speakers shortly, but there are plenty of speaker slots still available. Here is some information on the event for attendees, speakers and sponsors:

Attendees: All registered attendees of InfoSecurity Europe are eligible to attend DevOps Connect. Even better registration for InfoSecurity Europe is free! So anyone can register for the event and come to DevOps Connect. Here is the link to register. While anyone can register and attend, the theater at the Olympia where the event will take place has limited seating. So our advice is register quickly and come early.

Speakers: We are issuing a formal call for speakers which is very similar to the CFS that we used for the RSA event (actually it is the same form). Here is the link to submit to speak. Please be sure to read the instructions in the Details section. It really explains what we are looking for in speakers for this event. We invite anyone who would like to speak to submit. The deadline for speaking submissions is May 4th. So don’t delay, submit early!

Sponsors: We have a full slate of sponsorship packages available for this event. Sponsor packages include sponsoring/exhibiting at both InfoSecurity Europe, as well as the DevOps Connect event. If your company is already sponsoring or exhibiting at InfoSecurity Europe, we have packages that allow you to leverage your existing investment. For information on sponsoring DevOps Connect and InfoSecurity Europe contact sponsor@devops.com. Sponsoring DevOps Connect is a great way to reach both of these communities, as well as help bring better awareness to both communities.

The idea of DevOps Connect: Rugged DevOps is to bring together the DevOps community and the InfoSec community. London has one of the most vibrant DevOps community in the world (it is the single biggest city for devopsy.kinsta.cloud visitors) and InfoSecurity is the largest InfoSec event in Europe with over 12,000 attendees. So this is a perfect venue to bring together these two great communities. We invite members of both the DevOps and the InfoSec world to participate in this.

Stay tuned for more news and information regarding DevOps Connect: Rugged DevOps over the next days and weeks. Stay tuned.

April 15, 2015
April is Rugged DevOps Month

Some of you may be aware that we have published a full blown media kit including an editorial calendar for the rest of 2015. For the month of April our focus is Rugged DevOps. It started yesterday with a great post by David Geer, Rugged DevOps: From Idea to Automation to Impact. It will continue all month with stories around infosecurity and DevOps. At the end of the month we will pull these all together into a Rugged DevOps special edition available to all of our newsletter subscribers.

But that is not all we are doing with Rugged DevOps. We are also publishing an Ebook that will be available RSA Conference week, April 19th. The EBook written by our own Ericka Chickowski will take a deep dive on the intersection of security and DevOps. We will also be printing 1000 copies of the book which will be distributed at our various activities at RSA Conference. In case you are not already aware, here is what we have planned for RSA Conference week:

DevOps Connect: SecDevOps Edition– Monday, April 20th – 9am to 5pm, Moscone Center – Featuring keynotes by Gene Kim, Josh Corman, Jez Humble and over a dozen other top names in DevOps and Security, this events pre-registration is already filled up. However, seating is on a first come, first serve basis and open to all RSA badge holders. So come early or try later in the day if there are any open seats. If you are interested in DevOps and infosec, this promises to be a don’t miss event.

DevOps Wine-ing Event – The after party for the DevOps Connect conference, the DevOps Wine-ng event is a tradition started by Josh Corman and the Sonatype team. This year’s event is sponsored by Sonatype, Puppet Labs and devopsy.kinsta.cloud. In order to gain admission to the event you need an invite or pre-registration from one of the sponsors. devopsy.kinsta.cloud will be offering invites in the next week. Most of the speakers as well as DevOps community and InfoSec community members will mingle in a relaxed atmosphere.

devopsy.kinsta.cloud “Rugged DevOps breakfast” – 7am to 9am, Tuesday morning at Jillians, the breakfast celebrates the official release of our Rugged DevOps Ebook. The breakfast and Ebook are sponsored by Incapsula and Evident.io. There are only a few slots left to attend this event, so if you would like to join us for breakfast early register now at http://www.eventbrite.com/e/devopscom-presents-rugged-devops-breakfast-rsa-conference-registration-16228701483?ref=ebtnebregn.

In addition to these DevOps related events, I of course will be helping to produce (along with a great team of Jennifer Leggio, Mike Rothman and Rich Mogull) the 9th annual Security Bloggers Meet up and Blogger Awards. This event is open only to those who write or podcast about infosecurity. It is usually a highlight of RSA Conference week. If you do write about security and have not been invited, write me at editor@devops.com with where you write and we can try to get you an invite.

Beyond that I along with my good friend Jody Brazil, CEO of Firemon will be hosting a peer-to-peer session on Thursday at 10:20am, Continuous Network Compliance: Finding Flaws and Betting Futures. It should be a good discussion looking at the idea of Continuous Security. P2P sessions only sit 25 to 35 people so come early to make sure you have a seat for that one.

On top of all of this I will be live blogging RSA Conference here on devopsy.kinsta.cloud, so stay tuned for that.

BTW, last month’s topic was “Containerization”. We are in the process of gathering up all of the great articles we had around this topic last month. We will package this content into a PDF document that again will be available to our newsletter subscribers. You can subscribe to our newsletter in the right hand sidebar of this page.

April 7, 2015
Jez Humble Leads Next Round of Speakers Announced for DevOps Connect @ RSA Conference

The next round of speakers has been announced for the DevOps Connect: SecDevOps event at RSA Conference. Joining the previously announced group we are pleased to announce the following distinguished presenters added to the agenda:

Jez Humble of Chef and renowned author
Jessica Devita of Microsoft
Nick Galbreath of Signal Sciences Corp and formally of Etsy
Dan Cundiff of Target
Chris Walsh of Signal
Sarah Alhafidh of Intuit
David Mortman of Dell
Rich Mogull of Securosis

Most of these people need no introduction to the Infosec and DevOps community. The exact schedule with titles of talks as well as the final wave of speakers will be released next week.

Additionally, Gene Kim and Joshua Corman will be delivering the opening keynote titled: Rugged DevOps: Faster/Safer with Software Supply Chains

It promises to be quite a day of DevOps and security that you don’t want to miss. The event is open and free to all badge holders of the RSA Conference. Unfortunately, there were only 600 pre-registrations allowed and we reached that level last week. However, pre-registration does not guarantee a seat, RSA Conference will seat you on a first come, first serve basis. So come early even if you are not pre-registered.

The event is all day on Monday April 20th. The event starts at 9am but you can arrive early. People may not stay for the full day, so again you should be able to attend even if you missed the pre-registration window. We are just a few weeks away and hope to see you in San Francisco for RSA Conference!

March 27, 2015
DevOps Connect: SecDevOps, how to register if you already registered for RSA Conference
Several people have written asking us how to pre-register for the DevOps Connect: SecDevOps conference on the Monday of RSA Week at the Moscone Center. All registrations are handled by RSA. The event is free to anyone who has any RSA badge. So you can go register for an RSA expo pass and still attend Monday’s event. If you are already registered for RSA, here is how to add DevOps Connect: SecDevOps to your registration.

Steps to register for additional course:
1. Log into your registration record
2. You’ll be on a landing page with several options. In the Purchased Items section near the bottom, click “Purchase Registration Items”
3. On the next page, scroll to the bottom and click Continue:
4. The next page will have the Monday activities. The Seminars are at the bottom, check off selection and click continue again.Obviously pick DevOps Connect: SecDevOps as your activity. Hope that helps. Any more questions about DevOps Connect: SecDevOps or other RSA activities please email us at rsac@devops.com.
March 19, 2015
devopsy.kinsta.cloud and InnoTech Conferences Partner on DevOps Connect

We are very happy to announce that devopsy.kinsta.cloud is teaming up with the folks at InnoTech Conferences to bring DevOps Connect to San Antonio and Dallas this April! The press release is below with details. You can find out more at DevOpsConnect.com. Also if you are interested in presenting at DevOps Connect @ InnoTech you can contact to devopsconnect@devops.com. Please include which event you would like to speak at and we will respond with details. If you are interested in sponsoring or exhibiting at DevOps Connect @InnoTech, please contact parker@devops.com.

devopsy.kinsta.cloud and InnoTech Conferences Partner on DevOps Connect

DevOps Conference Comes To Dallas and San Antonio at Popular Innotech Conferences With Full Day of DevOps Learning

Boca Raton, Fl, Febraury 12, 2015 – devopsy.kinsta.cloud, where the world meets DevOps and InnoTech Conferences today announced that they will team up to add DevOps Connect to the InnoTech Conferences in San Antonio and Dallas on April 9th and 16th, 2015 respectively. Both conferences will feature a full track of DevOps sessions in addition to sponsors and exhibits from the DevOps community.

InnoTech is an annual conference and exhibition built specifically for business and technology executives, highlighting the region’s innovation and technology development opportunities. InnoTech is designed to be the most comprehensive and collaborative regional technology event available in a one- or two-day format. Over 1,000 I.T. professionals will attend each InnoTech conference. Featuring over 25 breakout sessions on Security, Big Data, DevOps, Infrastructure, more, InnoTech offers an affordable educational opportunity for the I.T. community. This year, InnoTech is thrilled to partner with devopsy.kinsta.cloud to offer a full day track on DevOps in each of their conferences.

“Our attendees have been telling us they would like DevOps related content more and more over the past few years. Partnering to bring DevOps Connect to InnoTech allows us to provide them with premium DevOps content and opens our conferences to the DevOps community,” said Sean Lowery, CEO of InnoTech. “We look forward to a great lineup of sessions around DevOps at our next conferences in San Antonio and Dallas.”

The InnoTech Conferences are a perfect partner/venue for devopsy.kinsta.cloud to spread the word and increase awareness and knowledge about DevOps, said Alan Shimel, CEO of devopsy.kinsta.cloud. “DevOps Connect events work well in conjunction with a broader IT conference, so we think these will be great events.”

Registration, exhibit and sponsor information are available at http://www.innotechconferences.com/ and http://www.devopsconnect.com. You can also write to devopsconnect@devops.com for specific DevOps

sponsor and exhibitor information.

About devopsy.kinsta.cloud

devopsy.kinsta.cloud is where the world meets DevOps. With over 100 new original content articles per month, it is the largest source of DevOps related news in the world. Additionally its community support and other DevOps information help DevOps community members the world over.

About InnoTech Conference

In one focused day, InnoTech creates an environment where education, innovation, peer-to-peer networking and the latest technology and business solutions are all available specifically for IT professionals. InnoTech assembles the leading business and technology executives in the region for a day of answers to your IT issues, real world case studies and your best chance to see the latest products and solutions to support your business.

InnoTech is your best, local opportunity to meet and interact with those leaders driving the IT industry in the region.

February 12, 2015
DEVOPS CONNECT: SECOPS EDITION SPOTLIGHTS THE INTERSECTION OF DEVOPS AND INFORMATION SECURITY

A daylong event highlighting the rapid of ascent of DevOps and its intersection with information security on April 20 – 24, at the Moscone Center in San Francisco

Boca Raton, FL – January 14, 2015 – devopsy.kinsta.cloud, where the world meets DevOps, today announced DevOps Connect: SecOps Edition, a daylong event highlighting the rapid of ascent of DevOps and its intersection with information security. DevOps Connect: SecOps Edition will take place the Monday of RSA Conference 2015, April 20 – 24, at the Moscone Center in San Francisco.

The keynote and co-chairs for the DevOps Connect program are author and DevOps pioneer Gene Kim of IT Revolution Press and Joshua Corman, CTO of Sonatype and co-founder of RuggedSoftware.org and IamTheCavalry.org. Gene and Joshua first introduced “Rugged DevOps” at RSA 2012 and have been building collaborations and bridges between those worlds ever since.

In addition to the keynote, the daylong event will feature panels, discussions and sessions that highlight the advent of DevOps in high-performing IT organizations and how the information security community is interacting in it. A formal call for speakers will be announced shortly.

“DevOps is one of the fastest rising trends in technology with a tremendous impact on the information security landscape,” said Linda Gray, general manager, RSA Conference. “We are excited to hear the direction and insights speakers such as Gene Kim and Josh Corman will bring to this event and to our RSAC attendees.”

“The interest of the security community in DevOps has been growing rapidly for a few year now, as evidenced by some of the earlier panels and events we have held that received enthusiastic support,” said Mark Miller, leader of TheNexus Community Project. “We are happy to assist in bringing this important opportunity for learning and sharing to RSA Conference.”

The event is free to all RSA Conference 2015 attendees who pre-register for it at the time of RSA Conference registration, up to 600 people. So early registration is encouraged, as it is expected to fill up quickly. Following the sessions the second annual DevOps wining happy hour will be open to event attendees.

The Call for Papers to apply to speak at the event is now open. Submissions can be made at: https://devopsy.kinsta.cloud/features/cfp-devops-connect-devopssec-rsa-conference-now-open/

About devopsy.kinsta.cloud

devopsy.kinsta.cloud is where the world meets DevOps. devopsy.kinsta.cloud is the largest source of original DevOps related content, community support and other DevOps information helping DevOps community members the world over. DevOps Connect are a series of DevOps conferences being held the world over to further DevOps leaning and understanding.

Media Contact:

Alan Shimel

ashimmy@devops.com

(516) 857-7409

February 10, 2015