You are viewing content from a past/completed QCon -

SESSION + Live Q&A

The Three Faces of DevSecOps

DevSecOps is the buzzword du jour in the world of security. Organisations increasingly understand that if you transform development and embrace DevOps, you must transform security as well. Failing to do so would either leave you insecure, or make your security controls negate the speed you aimed to achieve in the first place.   

 

So doing DevSecOps is good... but what does it even mean?

This talk unravels the different stages in the evolution of DevSecOps. It separates the term into securing DevOps technologies, methodologies and shared ownership, giving concrete examples of good and bad in each. In the end, you'll have the tools you need to choose your interpretation of DevSecOps, and choose the practices and tooling you need to support it.


Speaker

Guy Podjarny

Co-founder @SnykSec, previously CTO @Akamai

Guy Podjarny (@guypod) is a cofounder at Snyk.io, focusing on open source and cloud security. Guy was previously CTO at Akamai following their acquisition of his startup, Blaze.io, and worked on the first web app firewall & security code analyzer. Guy is a frequent conference speaker, the...

Read more
Find Guy Podjarny at:

Location

Whittle, 3rd flr.

Track

Security Transformation

Topics

DevOpsSecurityLondon

Share

From the same track

SESSION + Live Q&A Security

A Continuation of Devops: Policy as Code

Organisations large and small are embracing devops and agile practices and transforming themselves into software companies. As part of that movement many organisations have embraced infrastructure as code, the idea that rather than systems administrators managing...

Gareth Rushgrove

Product Manager @Docker

SESSION + Live Q&A Agile

Speed The Right Way: Design and Security in Agile

“Blame the programmer” was an emerging theme in the security breaches of the last year placing coders and “their bugs” squarely in the security spotlight. But what is upstream of implementation bugs of causing these security issues? Application architecture and design. Effective...

Kevin Gilpin

Enterprise Software Engineer

SESSION + Live Q&A Security

Securing Services Using SSO

As BuzzFeed transitioned to microservices it needed to secure a growing number of internal tools. Our first solution was an open source auth service deployed in front of each app, but this approach had a number of scaling issues. The talk will discuss sso, our open-source, homegrown, centralized...

Shraya Ramani

Software Engineer @BuzzFeed

SESSION + Live Q&A Security

The Evolving Practice of Security

As technology has evolved from on-premise data centres to cloud native systems, the practices of managing that technology has evolved giving us benefits like continuous integration and deployment and configuration as code and cloud orchestration platforms. But security practices have generally...

Michael Brunton-Spall

Independent Security Consultant, previously Deputy Director for Technology and Operation, & Head of CyberSecurity of Government Digital Service

UNCONFERENCE + Live Q&A Open Space

Security Open Space

Ian Robins

View full Schedule