Adapting DevOps in a World of Growing Software Supply Chain Attacks
As we embrace movements like CI/CD and DevOps to cut down on release cycles - and innovate faster, we as developers must also embrace the reality that the risk landscape is too complex to leave “security” to just those with security in their title.
Instinctively, we understand how critical this is, especially in a time of growing high profile attacks on software supply chains across the world - most recently Dependency Confusion, the Cloudflare and SolarWinds breach - embracing security as a development team has never been more important.
Done properly, DevSecOps practices shouldn’t interrupt the DevOps pipeline - but instead aid it - preventing costly rebuilds and build failures, down the road. By creating automated governance that is embedded early and throughout the software development lifecycle, developers have transparent access to digital guardrails integrated within our native tools — an approach that ensures security is being built in without slowing us down.
In this talk, you'll learn about:
- Real-world examples of how large and small companies are implementing DevSecOps practices in their own delivery pipelines, and increasing developer awareness of risks.
- Key insights into the Dependency Confusion and Cloudflare breach - what steps can developers take to prevent similar future attacks?
- A walkthrough of how security principles have been embedded in a Continuous Integration pipeline and what standards for implementation are beginning to follow suit.
-
The Psychology of UXFabio PereiraTuesday Jun 14, 13:15
-
Is Software Engineering Still an Oxymoron? (live streamed)Alan KayWednesday Jun 15, 09:15
-
The Zen of ProgrammingSander HoogendoornMonday Jun 13, 13:15
-
Welcome to a New Age of RefereeingPierluigi CollinaWednesday Jun 15, 15:30
-
The Importance of LaughterAino Vonge CorryTuesday Jun 14, 17:45
-
Design for the Utopia You Want, Not the Dystopia You're InChris AthertonWednesday Jun 15, 13:15
-
#FAILKevlin HenneyTuesday Jun 14, 09:15
-
Rediscovering Humanity in TechEric JohnsonMonday Jun 13, 09:15
-
Agility is InefficientKlaus Bucka-LassenMonday Jun 13, 17:45