~/talk

The Path Of DevOps Enlightenment For InfoSec

Talkat OWASP AppSec California 2018 · on Tuesday, 2018-01-30· at 14:00· Terrace Lounge· [devops-and-delivery, security]
slides:none on file

Claims that traditional security is in crisis and that embedding security into DevOps works by adding runtime telemetry and fast CI/CD feedback loops. Shows a deployed stack that does 10–15 deploys per day and reports roughly 10,000 deploys in 2.5 years, uses chaos engineering and bug bounties, and runs automated tests with a tool called gauntlet delivered as gauntlet docker to shift security left and detect attacks without blocking delivery.

AI-written summary · about

  1. 0:00Start
  2. 2:07SUMMARY
  3. 18:42Security vs. Rugged
  4. 26:43CHAOS ENGINEERING
  5. 27:26CHAOS SLINGR
  6. 28:18BUG BOUNTIES
  7. 28:53OLD PATH VS. NEW PATH
  8. 30:08FAST AND NON-BLOCKING
  9. 32:10PIPELINE PHASES
  10. 37:54THE PAVED ROAD
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.