devopsy.kinsta.cloud

Tag: rich mogull

  • DevOps Connect: SecDevOps @RSA the videos

    DevOps Connect: SecDevOps @RSA the videos

    Back in April we were proud to partner with RSA Conference, IT Revolution, Sonatype, TheNexus and RuggedSoftware.org to bring DevOps Connect: SecDevOps to the Moscone Center. It was a full day of great DevOps and Security presentations. For me personally it succeeded beyond my wildest dreams of highlighting the intersection of DevOps and Security.

    The line up of speakers and topics that day was extraordinary.  In no particular order:

    • Gene Kim/Josh Corman – Rugged DevOps: Going Even Faster With Software Supply Chains
    • Jez Humble – Continuous Delivery
    • David Mortman – DevOps Myths Versus Real World Realities
    • Julie Tsai – Windfall Wins: DevOps Empowers Agile Security and Compliance
    • Constantine Aaron Cois – DevOpsSecFail: DevOps Security Anti Patterns
    • Terri Potts – Leading a Horse to Water and Enticing Him to Drink
    • Nick Galbreath – BYOD: Bring Your Own Dependencies
    • Jessica Devita – No White Boards Allowed
    • Rich Mogull – Building Your SecDevOps Toolkit
    • Dan Cornell and Kris Curylo – Blending the Automated and the Manual
    • Damon Edwards and Alex Honor – Coaches and Toolsmiths
    • Dan Cundiff – Why DevOps != the Wild West and How Embracing it Can Improve Security
    • Chris Corriere – Automating Enterprise Security
    • Chris Walsh – I’m the New Security lead, and I’m Here to Help

    The good news is we had hired professional video crew to tape all of the presentations. Then through the efforts of Mark Miller and Derek Weeks of Sonatype the actual presentations were edited into the videos, creating a fantastic video recreation of the sessions.  Here is a short preview of sessions:

    In all there are over 10 hours of fantastic DevOps content here spread over the 14 presentations.  Through TheNexus and devopsy.kinsta.cloud we are making them available to you free. The only obligation is your fill out a registration form.

    Fill out the form here.

    Please note that the form submission will generate an email to verify your identity. You can access the entire video library via that email.  We ask that you please not share the URL of the videos and instead direct viewers to this page or TheNexus to download for themselves.

    Also, if you are attending InfoSecurity Europe this week, be sure to check out DevOps Connect: Rugged DevOps, Thursday, June 4 all day at the Olympia. Here is the lineup:

    Agenda

    8.30- 9.00             Meet and Greet

    9.00-9.10              Introductions: Alan Shimel and Wai Man Yau

    9.10-9.50              Keynote Presentation: Dr. StrangeOps: How I Came to Embrace Rugged DevOps & SW Supply Chains, Joshua Corman, CTO, Sonatype and Rugged  

    9.50-10.30           Maintaining Control While Letting Go, Gareth Rushgrove, Puppet Labs

    10.30-11.00         Security at Speed; Best Practices for a Secure DevOps Implementation, Florin Coada, IBM 

    11.00-11.30         The DevOps Toolkit, Helen Beal, Head of DevOps, Ranger4 Limited

     11.30-12.00         A Manifesto for High Velocity Compliance, Justin Arbuckle, Vice President, EMEA & Chief Enterprise Architect, Chef

     12.00-13.00         Opportunity to visit the Infosecurity Europe Exhibition

     13.00-13.30         Secrets Within Your Java-Based Software Supply Chain, Derek Weeks, VP, Sonatype & DevOps Advocate

     13.30-14.00         Automating Security Tests for Continuous Integration, Stephen de Vries, CTO, Continuum Security

    14.00-14.30         SecDevOps 2.0- Managing your Robot Army, Elizabeth Lawler, CEO and CoFounder, Co-Founder Conjur Inc

    14.30-15.00         Case study: DevOps Cost-Effectively Secured Quality and Time-to-Market for a Complex Hardware/Software Network Product, Marc Hornbeek, Senior Solutions Architect, Spirent Communications

    15.00-15.15         Afternoon break

    15.15-15.45         DevOps:  How the Industrial Revolution Got Us Here, Jonathan Fletcher, Enterprise Architect – Technology & Platform (DevOps) Lead

    15.45-16.15         Transforming to Devops in the Enterprise, Benjamin Wootten, Co-Founder, Contino

    16.15-16.45         SecDevOps: From Zero to $2.5B Revenue in 18 Months, Justin Lundy, CIO/CTO, Evident.io

    16.45-16.50         Thank you and close, Alan Shimel and Wai Man Yau

     

  • Welcome to the ADC (After DevOps Connect) era of DevOps and Security

    Welcome to the ADC (After DevOps Connect) era of DevOps and Security

    I was speaking with Britta Glade of RSA Conference after our DevOps Connect conference at RSA Conference Monday.  She congratulated us on putting together a great day of tracks and sessions (kudos to Gene Kim and Josh Corman).  But then she said something else that really struck me to my core.  She said after today there is no longer any question about security working with DevOps.

    Think about it.  Three years after Josh and Gene first presented Rugged DevOps at RSA Conference. After so many papers, articles, presentations and tracks, it has finally sunk in.  Security will embrace DevOps, Security will be better because of DevOps and as importantly, DevOps will be better because of Security.

    It is very fulfilling to know that this event we produced (along with Mark Miller and theNexus Community) was what finally pushed this over the finish line. For me personally it really represents one of the fundamental reasons I was so attracted to DevOps.

    It was 4 or so years ago that I first met Gene Kim and over a bottle or two of wine he explained to me what DevOps was about and what he was working on with the Phoenix Project.  While DevOps may seem primarily about Dev and Ops to some, for me it was about making security work better. It seemed like such a no brainer that of course security should embrace DevOps.

    But it was not that easy.  The besieged security industry faced with a never ending barrage of breaches and a continually escalating threat environment could not accept that automation, acceleration, velocity would also allow us to shift security left, leaving us more secure and more compliant. Many security people dug in their heels and said no, this wouldn’t work and they didn’t take the time to really explore it.

    Monday all of that changed.  Security folk came out in droves to see people like Jez Humble (many people in the audience weren’t really familiar with Jez when he first took the stage, but they were enthralled with him by the time he stepped off. Jez finished to a standing room only crowd of close to 700. They heard Damon Edwards and Alex Honor talk. Though they were also unfamiliar to the crowd, their message resonated to the core.

    When Julie Tsai of Walmart took the stage the audience heard how a “unicorn” like Wal-Mart used Agile and DevOps to be more secure. Terri Pots of Raytheon and Jessica Davita of Microsoft re-enforced the message that security needs to embrace this approach. I loved Jessica’s security org chart.  Chris Corriere who writes here on devopsy.kinsta.cloud, Dr. Aaron Cois of Carnegie-Mellon also had great sessions.

    Then names familiar to the crowd, Gene Kim and Josh Corman kicked it off with a great talk on Software Supply Chains.  Nick Galbreath had a great session. David Mortman delivered a terrific talk, Dan Cornell on web app security and more.  For me the perfect ending was when my friend Rich Mogull took the stage and demonstrated his Squirrel Monkey toolset. Rich’s scripts that he wrote himself showed how we could use automation to make our security better and easier.  People were stunned.

    Throughout the day, the buzz that was coming down the big hallway was that there were some great things happening over at the DevOps tracks. People from the Cloud Security Alliance meeting next door were hopping over to check it out. Other people joined in.  By the end of the day we had given out all of the materials we had prepared.

    By now I know you are wishing you were there.  The good news is the entire event was videotaped. We will have videos and slides of all of the presentations shortly so stay tuned.

    We are already starting to plan next year’s event. Also, the call for speakers is now open for DevOps Connect: Rugged DevOps event @InfoSecurity Europe June 4th.  But after Monday DevOps and security will never be the same again.  No longer can security deny that they must be part of DevOps. We are and should be. We are now in the ADC (After DevOps Connect) era.

  • devopsy.kinsta.cloud ANNOUCES DREAM TEAM BOARD OF ADVISORS

    Thought Leaders Gene Kim, Brad Feld, and David Cohen to Provide Strategic Direction and Advice to Foremost DevOps Community Site

    Boca Raton, FL – March 18, 2014 – devopsy.kinsta.cloud, where the world meets DevOps, today announced its Board of Advisors, including Gene Kim, renowned author and thought leader; Brad Feld, managing partner of Foundry Group; David Cohen, Techstars; Sean Charnock and Dean Mann of DH Capital; Rajat Bhargava, CEO, JumpCloud; Rich Mogull, CEO, Securosis; and, award winning, experienced tech journalists – George Hulme, Tony Bradley and Ericka Chickowski. This stellar lineup will help guide and position the company as it becomes the leading destination to help further the methodology and adoption of DevOps by organizations around the globe.

    “DevOps is changing the way our portfolio companies operate and I’m looking forward to helping devopsy.kinsta.cloud become a catalyst for the DevOps community,” said David Cohen, founder and CEO of Techstars.

    “I think that DevOps will be one of the most important trends in technology over the next 5 to 10 years, devopsy.kinsta.cloud can help accelerate its adoption and growth. Both Dean Mann and I recognized this which is why we helped found devopsy.kinsta.cloud and are honored to be on its Board of Advisors,” said Sean Charnock of DH Capital and co-founder of SoftLayer Technologies.

    “In founding JumpCloud I have seen for myself how DevOps is changing the game for organizations both big and small. We are strongly committed to DevOps at JumpCloud, and devopsy.kinsta.cloud is a terrific way for us to help the entire community, whether they are already invested in the DevOps movement or simply interested in learning more about the groundbreaking methodology,” said Rajat Bhargava, CEO of JumpCloud.

    “Coming from the information security industry, we recognize that DevOps is a tremendous opportunity for security finally to be built into instead of bolted on to applications and IT. I am looking forward to helping devopsy.kinsta.cloud bring DevOps to the security industry specifically and the entire IT industry in general,” said Rich Mogull, CEO of analyst firm Securosis.

    “As a 20 plus year veteran of the technology media industry, I am very excited to make sure DevOps fulfills its promise to change the way business is done. I am thrilled to be on the Board of Advisors of devopsy.kinsta.cloud to help guide it toward becoming the leading destination for the DevOps community,” said George Hulme, award winning technology journalist.

    The Board of Advisors will hold semi-annual meetings as well as quarterly virtual meetings. It will advise the Board of Directors and management of devopsy.kinsta.cloud to help it fulfill its goal of becoming the leading destination for the DevOps community[as1] .

    ## ##

    About devopsy.kinsta.cloud

    devopsy.kinsta.cloud is where the world meets DevOps. With over 100 new original content articles per month, it is the largest source of DevOps related news in the world. Additionally its community support and other DevOps information help DevOps community members the world over.