WJW-7994 DevSecOps - Security at Devops speed with EDF | Devoxx

DevSecOps - Security at Devops speed with EDF

Conference

agTest DevOps, Agilité, Méthodologie & Tests

Paris 243

Thursday from 14:55 til 15:40

Software development is pressed for faster and faster release cycles with acceptable quality, budget and security. As movements like CI, CD and Devops aim to cut down on release cycles, it's security's job to help control the risk. The risk landscape is complex as modern development practices increasingly consume more and more third party code. Traditional methods do not cut it anymore - it's time for DevSecOps.

Oliver Routier from EDF will show how EDF successfully implemented DevSecOps practices in an Enterprise environment in order to accelerate the choice of framework versions and enhance deployment quality.

Brian Fox from Sonatype will give an overview of how other companies have implemented DevSecOps practices in their own delivery pipelines and how this can help increase developer awareness of risks affecting them. He'll walk an example CICD Pipeline and explore how security has been embedded as a part of it, how the movement is shaping up and how standards are starting to follow suite.

Brian Fox Brian Fox

Brian is Chief Technical Officer at Sonatype. He has extensive open source experience as a member of the Apache Software Foundation and former Chair of the Apache Maven project. Brian was a direct contributor to the Maven ecosystem, including the maven-dependency-plugin and maven-enforcer-plugin. He has over 15 years of experience driving the vision behind, as well as developing and leading the development of software for organizations ranging from startups to large enterprises. Brian is a frequent speaker at national and regional events including Java User Groups and other development related conferences.

Olivier Routier Olivier Routier

Référent technique sur le pole d'expertise des serveurs d'application Java. Industrialisation de leur mise en oeuvre, définition des normes de déploiement, guide de sécurité

TBA : To be announced / Salle non affectée