Flying to DevSecOps with a USAF Cyber Weapon System - Year 1
summary
Technica Corporation moves a USAF Cyber weapon system (CVAH) from waterfall to DevSecOps and ships three releases in nine months, a 400% release-rate increase. The team (under 50 people) replaces Jenkins with GitLab, uses Ansible, SonarQube, Winlogbeats, Tenable ACAS and DI2E, builds an on‑prem virtual lab plus hardware testing, migrates servers 2012→2019, and integrates security into each team. Continuous monitoring and documentation practices drive authority‑to‑operate evidence and collapse roughly 900→47 POA&Ms so the pipeline runs and the system meets compliance.
AI-written summary · about
chapters (17)
- 0:00Intro
- 0:20Mission Background
- 1:41Walking Around the Plane
- 3:18Checking the Weather
- 5:48Clouds Ahead
- 7:00Unexpected Turbulence
- 8:01Testing the Switches
- 9:29Electrical Failures
- 13:25Folding the map
- 15:20Entering the pattern
- 17:54Circling the Field
- 19:57Short Final
- 21:49Flaps Down
- 23:50Taxiing to the Hangar
- 26:07Shutting down the Engine
- 27:34Debriefing the Flight
- 29:19Thinking about next time...
related talks
18mKeynote: DevSecOps in the US Air Force
39mDevOps to DevSecOps journey: what is possible to cover with free and open source tools
30mDevOps: Supporting aircraft from hanger to take-off
30mSecuring DevOps using OWASP DevSecOps Tools
42mIndustrial DevOps, Applying DevOps to Cyber-Physical Safety-Critical Systems
01h 18mDevSecOps - Automating Security in DevOps
30mDevSecOps: More Than Just Pipelines
36mImproving Security while Reducing Toil with DevSecOps