BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//DevOpsChat//Events//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VEVENT
UID:01a1989d-2ca0-71c0-b457-479694d117e7@www.devopschat.co
DTSTAMP:20261106T121333Z
DTSTART:20190709T073000Z
DTEND:20190709T083000Z
SUMMARY:Putting the Sec in DevSecOps
DESCRIPTION:The meetup is organised by Prodops.io and ESL and hosted by Vim
 .\n\nThe paradigm of DevOps has taken the world by storm\, focusing on fas
 ter development pace and quicker releases\, resulting in happier customers
 \, organisation's management and shareholders. Has this focus however lead
  to a compromise on security? With multiple builds and releases on a daily
  basis\, how can security teams carry out full assessments of their risks\
 , identify their vulnerabilities and ensure a robust cyber posture?\n\nEnt
 er DevSecOps\, a paradigm for integration of the Security team into the De
 vOps and SDLC\, introducing AppSec testing early to build security in from
  the start\, enabling organisations to be secure by design. In order for t
 his to be truly successful without impacting on development velocity\, aut
 omation and full integration are imperative.\n\nJoin us to discuss the fut
 ure of AppSec testing automation already being deployed by organisations t
 he world over and how the AST market has evolved to counter the growing an
 d continual threat of cyber attacks.\n\nAgenda:\n[masked] - Mingling and f
 ood\n[masked] - Talk 1\n[masked] - Talk 2 - AppSec in DevOps\n[masked] - B
 reak\n[masked] - Talk 3 - NeuraLegion\, a user story\n19:[masked] - Talk 4
 \n\n#Talk1#\nThe talk main topics:\nVim's challenges in the Healthcare ind
 ustry\nSecurity as a key guide in the Healthcare industry\nDevOps challeng
 es at Vim\n\nAsaf is the CTO of Vim. Asaf leads Vim’s long-term technolo
 gy vision and is responsible for supervising all development and innovatio
 n efforts. Asaf also founded Bink\, an innovative technology-based interne
 t bank.\n\n# Talk2 #\nWe will discuss and tackle the issues of security in
  the world of sprints\, how to automate menial tasks and the important rol
 e of AppSec\, focusing on:\n* What does DevSecOps even mean?\n* Security a
 udit in the hourly release cycle\n* Automation\, automation and automation
  - how is Artificial intelligence delivering this?\n* Automated AppSec Tes
 ting at the speed of DevOps\n* Containers and their impact on the security
  flow\n* Can we learn from traditional security practices?\n\n# About Bar 
 Hofesh - Co-Founder and CTO of NeuraLegion\nA cyber security veteran with 
 more than a decade of experience acting as a Security Officer\, Researcher
 \, Hacker\, Developer and Software architect\, Bar is instrumental in deve
 loping NeuraLegion's proprietary AIAST Technology that powers NexPloit\, a
  New Generation of AppSec Testing Automation revolutionising the industry.
 \n\n# Talk3 #\nGil will discuss the ease of integrating NexPloit into the 
 SDLC and how any organisation can introduce comprehensive AppSec testing i
 nto their workflows with it\, even with no established security team\, emp
 owering every company and their development team.\n# About Gil Messerman -
  SogoServices #\nGil is the CTO and co-founder of SogoServices\, he is a v
 ery skilled developer with years of experience of both architecture and co
 de.\n# Talk 4 #\nWhat is in 85% of my code? - Defending your supply chain 
 against attacks\nMost companies rely on 3rd party open source components i
 n their software development. As we move further into nimble delivery and 
 acceptance of new innovation\, bad actors are stepping-up their game\, som
 ething we can see in recent high profile and devastating cyber attacks\, w
 ith some using automation and precision targeting inside 3rd party softwar
 e dependencies which are commonly used today. If we don’t fight back by 
 doing the same - i.e automating security directly into the DevOps pipeline
  - then we’ll always be at the hackers’ mercy. This session will provi
 de new research on the above\, and how to get started.\n\n##About Yossi Tu
 rgeman - ESL##\nYossi Turgeman is a veteran in the open source governance 
 field.\nWorking with different tools and companies since 2012.\nHelping ma
 king sure their open 3rd party code is secure and in compliance license wi
 se.\nToday Yossi is in ESL \, a company which provides its customers with 
 an ecosystem of software development\, devops and security tools.\n\nhttps
 ://www.devopschat.co/meetings/putting-the-sec-in-devsecops
URL:https://www.devopschat.co/meetings/putting-the-sec-in-devsecops
END:VEVENT
END:VCALENDAR