BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2ca2-72f1-9485-a5807c7b31d9@www.devopschat.co
DTSTAMP:20261106T135823Z
DTSTART:20200212T150000Z
DTEND:20200212T160000Z
SUMMARY:Balancing Speed & Security Throughout the Software Supply Chain
DESCRIPTION:"Balancing Speed & Security Throughout the Software Supply Chai
 n"\nwith Maury Cupitt from Sonatype (https://twitter.com/maurycupitt)\n\nI
 n March 2017\, hackers took three days to identify and exploit a new vulne
 rability in Equifax’s web applications. In the post-Equifax world\, movi
 ng new business requirements (e.g.\, a non-vulnerable version of Struts2) 
 into production in under three days might just be your new normal.\n\nJoin
  this session to better understand how DevSecOps teams are applying lesson
 s from W. Edwards Deming (circa 1982)\, Malcolm Goldrath (circa 1984) and 
 Gene Kim (circa 2013) to improve their ability to respond to new business 
 requirements and cyber risks. It starts with emphasizing the performance o
 f the entire system and never passing known defects downstream.\n\nTo that
  end\, DevOps teams are consuming billions of open source components and c
 ontainerized applications to improve productivity at a massive scale. The 
 good news: they are accelerating time to market. The bad news: many of the
  components and containers they are using are fraught with defects includi
 ng critical security vulnerabilities.\n\nThis session aims to enlighten De
 vOps teams\, security and development professionals by sharing results fro
 m the 2017 State of the Software Supply Chain Report – a blend of public
  and proprietary data with expert research and analysis. Attendees in this
  session will learn:\n\n• What our analysis of 17\,000 applications reve
 als about the quality and security of software built with open source comp
 onents\n\n• How organizations like PayPal\, Intuit\, Fannie Mae and the 
 Department of Defense are utilizing the DevOps principles of software supp
 ly chain automation\n\n• Why avoiding open source components and contain
 ers over 3 years old might be a really good idea\n\n• How to balance the
  need for speed with quality and security – early in the development lif
 ecycle\n\nhttps://www.devopschat.co/meetings/balancing-speed-security-thro
 ughout-the-software-supply-chain
URL:https://www.devopschat.co/meetings/balancing-speed-security-throughout-
 the-software-supply-chain
END:VEVENT
END:VCALENDAR