Conf42 DevSecOps 2024
| title | author | length |
|---|---|---|
| Comprehensive protection for Infrastructure and Web Apps | Lukasz Karwacki | 35m |
Claims global footprint of 180 PoPs and 50+ cloud locations, presents layered DDoS plus WAF protection for layer 3/4 and 7, and insists on always‑on real‑time… | ||
| Preventing Accidental Secret Commits with Gitleaks | Dewan Ahmed | 15m |
Gitleaks plus Harness Open Source actually stop accidental secret commits by applying pattern-based scanning at pre-commit/CICD time; demo shows a pushed… | ||
| AIOps: New Approaches to Reduce Alert Noise | Birol Yildiz | 26m |
Claims 93% reduction in alert volume and more than 4 hours faster response time come with a concrete pipeline: alerts are normalized and cleaned, converted to… | ||
| AI Is Coming For Our Secrets | Chandler Mayo | 18m |
Panelists list concrete risks and rules: generative AI enables automated, personalized phishing and scalable ransomware, and Splunk finds adoption outpacing… | ||
| Building Trust in Conversational AI | Shradha Kohli | 09m |
Study interviews 150 users across retrieval, generative and hybrid chatbots and reports specific gains: 30–35% trust increase, 48% better understanding of… | ||
| Enhance Healthcare Chatbot Transparency | Abhishek Vajpayee, Rathish Mohan | 09m |
Claims concrete steps toward transparent healthcare chatbots: 24/7 symptom triage and context retention for chronic care, use of LIME and SHAP plus… | ||
| Adaptive, AI-Driven Security Assessments | Vijay Kumar Valaboju | 15m |
Claims that reinforcement learning delivers real-time adaptation of assessments, with an implemented agent that tracks learner state and takes actions to… | ||
| Leveraging AI in Fintech: Security, Compliance & Automation | Sudeep Meduri | 09m |
Contains concrete claims and deployables: reduced false positives by almost 60%, compliance cost down up to 30%, descriptions of deep learning models for… | ||
| Leveraging AI for Resilient Supply Chains | Madhusudan S Vadigicherla | 27m |
Claims concrete gains: 60% forecast uplift, 20–30% inventory reduction and up to 95% order fill accuracy, tied to specific AI uses — demand sensing… | ||
| The Power of SecretOps: Automating Secrets Workflows | Nic Manoogian | 16m |
A concrete framework names four layers: storage, governance, orchestration and rotation, with Doppler positioned as a hub-and-spoke source of truth. Claims… | ||
| Revolutionize SAP Prod Planning with Hyperautomation | Karthiksai Chenna | 12m |
Hyperautomation applied to SAP Production Planning combines RPA automates MRP runs with AI/ML for predictive demand and maintenance and process mining and IoT… | ||
| Kubernetes Networking 101 | Abdul Karim Memon | 20m |
Covers concrete claims and demos: every pod gets a unique IP and Kubernetes delegates address allocation to the CNI plugin, packet paths show veth → bridge →… | ||
| Pushing the boundaries of security with Azure Arc | Carlos Solís Salazar | 33m |
Live demo builds an Azure Virtual Desktop environment with Terraform, creates two session hosts, wires AAD authentication and RDP properties, and stores state… | ||
| Monolith to Microservices: A Guide to Seamless Transitions | Daniil Koshelev | 31m |
Claims a concrete migration path: a working token management service extracted from a monolith, validated by dual writes and gradual traffic shift, using CDC… | ||
| A DevSecOps Approach to Advanced Cloud Integration] | Praveen Valaboju | 09m |
Claims concrete outcomes: an EKS/Kubernetes autoscaling setup that cuts cloud spend by about 40% and keeps critical services running during peaks, Documentum… | ||
| Infrastructure as a Code Best Practices with Terraform | Madhu Kumar Yeluri | 10m |
Terraform code organizes into reusable modules (example: VPC landing‑zone module that creates multiple subnets and scales by input variables), stores state… | ||
| A Primer on Software Bill of Materials for DevSecOps | Safeer C M | 25m |
Demonstrates how to enumerate and act on real dependencies rather than theory: generates an SBOM from a container image with a lightweight generator that… | ||
| Navigating Security in the Subscription Economy | Kiran Nagubandi | 17m |
Subscription businesses must show concrete measures not buzzwords: adopt PCI DSS and 3D Secure for payments, deploy AI‑driven threat detection, MFA, encryption… | ||
| The CISO is Dead, Now What ? | Ilan Finkelstein, Pieter VanIpere | 28m |
Claims a repeatable method for building DR/IR/BCP exercises: define clear goals, ban production, inject randomness with dice/envelopes or simulate randomness… | ||
| People-Powered Security: The Role of Soft Skills | Victor Onyenagubom | 11m |
Claims that specific soft skills — effective communication, empathy, collaborative problem solving, and a growth mindset — measurably change security outcomes… | ||
| Careers in Educational AI and Digitalization | SantoshKumar Pulijala | 18m |
Claim: AI-driven adaptive learning adjusts lessons in real time and automated grading reduces teacher admin time, with deployed tools named like Moodle Canvas… | ||
| Data Analytics for Security in Pharmaceutical Launches | Harpreet Singh | 13m |
Claims concrete performance numbers: development costs average $2.6B, about 60% of lifetime revenue in the first six months, predictive systems hit 85–90%… | ||
| Transforming Data Security and Efficiency | Prashanth Reddy Kora | 08m |
Claims include hard numbers — 95% of digital workloads cloud native by 2025 and 175 ZB global data sphere — plus market projections (multicloud ~$15B to $44B… | ||
| Digital Security and Efficiency Through Single Sign-On | Mahesh Vankayala | 10m |
Claims a 80% onboarding time reduction for banks and a 90% identity-fraud reduction saving about $7B, with healthcare savings near $30B and GDP uplift of 3–13%… | ||
| GitOps Dynamics: Navigating the new era of DevOps | Megha Kadur | 21m |
Read the abstract ➤ https://www.conf42.com/DevSecOps_2024_Megha_Kadur_gitops_devops_navigation
Other sessions at this event ➤… | ||
| Internal Developer Platform and Kusion | Hoang Dinh Nguyen | 23m |
Slides show a concrete claim: Kusion merges platform-defined models and app configs into a one-to-one spec that maps to Kubernetes and cloud resources, with a… | ||
| Improving DevOps workflows with GenAI | Julio Arruda | 41m |
Shows concrete prompts that change outputs, comparing a terse request to a contextual one that includes Express TypeScript and a scale of more than 1,000 users… | ||
| Green Code: Transforming DevOps for a Sustainable Future | Clifton Reddy | 16m |
Claims concrete savings and measurement: the GSF/Sci metric is calculable (energy E × location L + embodied M normalized by functional unit R) and corporate… | ||
| A Policy-as-Code Approach to RBAC Authorization | Graziano Casto | 14m |
Policy as code is implemented with Open Policy Agent (OPA) and Rego and deployed via a lightweight ROND sidecar that decouples authorization from application… | ||
| Designing for Failure: Build Resilient Services | Abhishek Vajarekar | 51m |
Claims concrete steps and tools: redundancy split into infrastructure data service replicas, failover demonstrates automatic vs manual and DNS failover… | ||
| Securing the Future of Mobility | Spandana Sagam, Govardhan Reddy Kothinti | 09m |
Claims concrete numbers and concrete gaps: autonomous stacks use AI sensor fusion and real‑time decision making and reportedly respond ~25% faster than humans… | ||
| The Hidden Danger in Financial Transactions | Paul Edward | 17m |
A real breach story shows a wallet system where a race condition lets simultaneous withdrawals double‑spend funds, a Python stress script (a Python concurrent… | ||
| Securing the Kubernetes Ecosystem | Thiyagarajan Aramudhan | 11m |
Claims that 67% of orgs delay deploys and 46% lose revenue from Kubernetes incidents and proposes a five level framework that moves security from 20% at… | ||
| Breaking Down Silos | Joshua Arvin Lat, Raphael Joseph Rosario | 13m |
Claims clear and actionable: a coffee shop with CCTV maps continuous monitoring to CI/CD, the pipeline automates build test secure deploy and catches… | ||
| Modern Web APIs for Secure UI/UX Enhancements | Karthik Vallamsetla | 12m |
Concrete claims and outcomes: a real‑time inventory feed reduces cart abandonment by 15% and lifts revenue 10%; a geolocation‑driven hiking recommendation… | ||
| API-First Development: Future-Ready Systems | Nikhil Bharadwaj Ramashasthri | 05m |
Claims concrete outcomes: at Turo API‑first workflow uses OpenAPI 3.0, design tools like Stoplight Swagger Postman, and a pattern of define contract →… | ||
| How AIOps Drives Operational Resilience on AWS | Indika Wimalasuriya | 31m |
Cloud workloads face a cited $4.4M average breach cost and 46% involve personal data, so the emphasis is on concrete wins: baseline logs and metrics for… | ||
| Secure SRE Practices: An Expertise-Driven Approach | Nagarjuna Malladi | 12m |
Slides enumerate concrete stacks and practices and claim expertise-driven SRE reduces recovery time and manages error budgets with tooling rather than slogans… | ||
| Introducing the power of Rating in Cybersecurity | Ramon Izaguirre Bilbao | 22m |
Claims an operational system that rates ISPs and uses AI-driven ISP ratings to assign persistent reputations to networks not individual IPs the rating updates… | ||
| API Security in DevSecOps: Built-In, Not Bolted On | Anirudha Karandikar | 24m |
Claims that matter: APIs will carry >80% of web traffic by 2025, 91% of organizations see API incidents yearly, and fixing bugs is ~30× costlier in production… | ||
| Vulnerability Management that developers won't hate | Anthony Laiuppa | 44m |
Shows concrete moves: generate and commit VEX documents with an automated justification so CI stops failing for not-affected libs; run renovate bot to open PRs… | ||
| Mastering K8s Security | Deepu K Sasidharan | 25m |
Lists concrete procedures and tools: how to enable RBAC via kube-apiserver authorization-mode=RBAC, how to wire OIDC with OCTA and kubectl login for SSO… | ||
| Building and deploying secure apps by “shifting left” | Peter De Tender | 43m |
Walkthrough of actual steps and demos: live pipelines run code scanning with Sonar and built‑in scanners, multi‑repo branching plus enforced pull‑request… | ||
| nothing matches | ||