Agile + DevOps East 2019 - DevOps | TechWell

Agile + DevOps East 2019 - DevOps

Customize your Agile + DevOps East 2019 experience with sessions covering DevOps.

Monday, November 4

Danilo Sato
ThoughtWorks
MA

Continuous Delivery in Practice: A Hands-On DevOps Workshop

Add to calendar
Monday, November 4, 2019 - 8:30am to 4:30pm

For many organizations, delivering software into production has become increasingly more complex with long testing cycles and a division between development and operations teams. DevOps is a cultural movement that is breaking down those barriers. Focusing on automation, collaboration, tools, and knowledge sharing, DevOps is showing that developers and system engineers have much to learn from each other. Through a series of hands-on exercises, Danilo Sato will use a sample web application to demonstrate how to automate its build and deployment pipeline, using infrastructure and pipeline as...

Melissa_Benua
mParticle
MC

Test Design for CI/CD Delivery

Preview
Add to calendar
Monday, November 4, 2019 - 8:30am to 12:00pm

Imagine this … As soon as any developed functionality is submitted into the code repository, it is automatically subjected to the appropriate battery of tests and then released straight into production. Setting up the pipeline capable of doing just that is becoming more and more common and something you need to know about. But most organizations hit the same stumbling block—just what IS the appropriate battery of tests? Automated build architectures don't always lend themselves well to the traditional stages of testing. In this hands-on tutorial, Melissa Benua introduces you to key...

Melissa_Benua
mParticle
MI

Continuous Testing with Containers

Preview New
Add to calendar
Monday, November 4, 2019 - 1:00pm to 4:30pm

Containers. Every manager thinks they want them, but few teams have experience in knowing what to DO with them. Used thoughtfully, containerization of your services can transform the way your organization thinks about testing. Gone can be the days of maintaining X different compute environments with Y different configurations. Imagine instead spinning up just the code you need, on the machine type it needs, and only for as long as you need it. In this technical training, Melissa will walk through what containerization means for a legacy code base attempting to practice continuous...

Tuesday, November 5

Coveros
TB

Introducing Docker and Kubernetes to Your DevOps Toolchain

Add to calendar
Tuesday, November 5, 2019 - 8:30am to 4:30pm

As organizations look to improve the speed with which they deliver software, they increasingly turn to microservices and infrastructure-as-code for software architecture and delivery techniques to help leverage value from their DevOps adoptions. Docker, an industry standard containerization tool, facilitates moving processes into isolated environments that can be frozen into images, with an ecosystem that helps developers across organizations build and share these containers. Kubernetes builds on these capabilities and allows a software team to break down their application into small,...

Tom Stiehm
Coveros, Inc.
TF

Tools for DevSecOps

Add to calendar
Tuesday, November 5, 2019 - 8:30am to 12:00pm

DevOps is about creating alignment across the value stream for an application, service, or product. DevSecOps integrates security into this process, making the entire team responsible for delivering secure code that works and can be deployed and used securely. But how do you actually do that? What tools do you add to your DevOps pipeline to help make your software secure and provide your stakeholders with a high level of confidence that the software meets all security requirements & standards? In this tutorial Tom Stiehm will explore what security tools you can add to your DevOps...

Dana Pylayeva
Agile Play Consulting LLC
TI

Introduction to DevOps with Chocolate and LEGOs

Preview
Add to calendar
Tuesday, November 5, 2019 - 1:00pm to 4:30pm

Organizations today can no longer afford to deliver new features to their respective markets once a year or even once a quarter. In the attempt to catch up with the competition, they jump onto DevOps journey starting with the "How" and losing the sight of "Why" and "What". Join this gamified simulation tutorial to gain a solid understanding of foundational principles of the DevOps culture. Experience the benefits of DevOps transformation even before initiating one in your enterprise! This tutorial is ideally designed for organizations that are evaluating their approach to DevOps...

Jeff Payne
Coveros
TM

What DevOps Means for Testers and Testing

Add to calendar
Tuesday, November 5, 2019 - 1:00pm to 4:30pm

DevOps is more than a buzzword or a passing fad. It's a radically new approach to rapidly deliver high-quality software applications. However, many organizations don’t fully grasp the magnitude of this change or what it means for everyone involved in the software development lifecycle. Jeffery Payne says that DevOps—when done right—drives higher quality and efficiency into software development, software testing, and application management activities. It empowers teams to remove impediments to quality and productivity throughout the entire software lifecycle. However, when DevOps is done...

Wednesday, November 6

Jennifer Bonine
PinkLion AI
AW4

Where Does Data Come From?

Add to calendar
Wednesday, November 6, 2019 - 10:30am to 11:30am

With all the tools available on the market, it can be overwhelming to figure out which ones might meet your needs and which ones will work best for you to create a high-performing team. Join Jennifer Bonine as she explains the relationship between the DevOps cycle and your environment, and how a hub-and-spoke model can link all your different data sets and tools together. She'll identify opportunities for applying test data analytics across the engineering and test landscape, ranging from high-value test cases to dynamically generated regression test suites. She will review ways to...

Lee Eason
IHS Markit
AW5

DevOps for the Agile Practitioner

Add to calendar
Wednesday, November 6, 2019 - 10:30am to 11:30am

As an agile coach, ScrumMaster, or product owner, you interact with technical teams every day, even though you may not have a technical background yourself. You hear and read about DevOps all the time, but the truth is that you’re not really sure what DevOps is or exactly how it can help your company. You also have a feeling the executives in your company may be questioning whether their massive investment in agile is paying off. Lee Eason will help nontechnical agile practitioners understand exactly what DevOps is and why it’s valuable. You will leave understanding the background, key...

AW6

Wabi-Sabi Your DevSecOps

Add to calendar
Wednesday, November 6, 2019 - 10:30am to 11:30am

The ability of DevSecOps to produce secure code requires the merging of two very different cultures: AppSec and DevOps. While AppSec lives in a black-and-white world of secure or not secure that would cause “Hello World” to take six months to release, DevOps knows that the reality of software development is actually shades of gray, especially as demands are increasingly placed on development teams to produce more, faster. Brittany Greenfield will teach you how to apply the Japanese concept of wabi-sabi, which accepts imperfections in the things that we create, to DevSecOps, allowing you to...

Lisa Maurer
State Farm
AW7

Continuous Delivery Dojo: From Doing Agile to Being Agile

Preview
Add to calendar
Wednesday, November 6, 2019 - 10:30am to 11:30am

State Farm adopted an innovative approach to a common problem many organizations face with agile transformation: How do you influence, nurture, and support a whole scale culture of agility? How do you move from doing agile to being agile? The solution was to institute a continuous delivery dojo. State Farm is going on its third year of supporting delivery teams at scale in enhancing agile maturity and establishing a continuous delivery culture. The dojo represents a dedicated place to work with teams to change mindsets, skill sets, and toolsets. It also represents an opportunity to...

Kimberly Davis
ASRC Federal
AW10

Small Batch Sizes Enable Everything—Even in the Government

Preview
Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

Lean practices teach us that small batch sizes optimize flow of value to market. Small batch sizes also help organizations focus on building quality into systems by enabling the power of continuous integration, encouraging faster feedback cycles, increasing our ability to debug, emphasizing a focus on simplicity, decreasing lead and cycle time, and discouraging "snowplowing" testing efforts. These practices are critical for building quality into our products. In the government sector, it also enables the alignment of traditional cost accounting methods, such as earned value...

Alissa Lydon
Sauce Labs
AW12

Selenium Tests at the Speed of Headless

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

Testing is shifting left. Developers want instant feedback on the quality of their code, and testers want to incorporate tests earlier in the pipeline without slowing down development efforts. Testing in full browsers is great when you’re near the end of the pipeline and need to confirm cross-browser compatibility, but for the scale and speed required for these early pipeline tests, there is a need for a more effective solution. Enter headless browsers, an emerging trend that allows you to run your early pipeline tests at scale. Headless offers a lightweight option that gives developers...

Catherine Louis
CLL-Group
AW13

Story Mapping Forward and Backward with DevOps

Preview
Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

User story maps capture the journey a customer takes with your product, including activities and tasks needed to make that journey a successful one. Typically they begin from the point where the customer has a problem and continues until the feature solving that problem is built. However, rarely do we see the story map include DevOps themes such as release and configuration management activities, or even feature activation. Join Catherine Louis as she guides you through the anatomy of a user story map, including DevOps aspects. You will create a story map from problem discovery to...

Blaine Carter
Oracle
AW14

DevOps Tools for Database Developers

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

You're thinking about modernizing your database development process ... someday. You have directories full of SQL files you use to build your application. You know unit tests should be included as part of your build process, and you are going to start adding them ... maybe next week. Does this sound like you? If you think modernizing your dev process will be difficult, time-consuming, and expensive, you may be surprised at how easy and cost-effective it is to get started. Blaine Carter will explore how to manage your database application in a continuous development pipeline. He will talk...

Allison Pollard
Improving
Amit Bansal
Improving
AW15

The Nitty-Gritty Practices of Agile Coaching for DevOps

Preview
Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

How do you coach a team from showing progress every two weeks to delivering multiple times a day? Challenging the status quo, running experiments, and forming learning communities may be part of the answer. Research has shown that using the right kind of metrics can promote a generative culture, creating a space where people want to continuously improve and innovate. These metrics that drive culture also can help us know if our coaching is effective. Allison Pollard and Amit Bansal will blend their stories with an interactive workshop to teach you agile coaching practices you can...

Linda Rising
Independent
AW16

An Agile Fireside Chat with Linda Rising

Add to calendar
Wednesday, November 6, 2019 - 11:45am to 12:45pm

Come get your questions answered by an agile expert! We won't have an actual fireside, but Linda Rising will be on hand to answer your questions and discuss the topics that are most important to you. Linda is an internationally known presenter on topics related to agile development, patterns, retrospectives, the change process, and the connection between the latest neuroscience and software development. And she wants to discuss whatever interests you. Bring your questions and be ready for a lively, interactive discussion.

Peter Varhol
Technology Strategy Research
Gerie_Owen
Technology Strategy Research
AW20

Testing Serverless Applications

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

Serverless cloud applications are rapidly moving into the mainstream. In this model, teams focus on developing and deploying code on a known technology stack and runtime, with fixed interfaces for application, database, and network. It offers the advantage of lower costs, faster development, and elastic growth. But testing serverless applications also brings significant challenges to testers. Because the stack is maintained by the cloud provider, it is updated with new versions and security patches on a regular basis. Testers have to continuously test the stack interfaces to make sure that...

Sean Miller
Capital One
Suresh Chellapilla
Capital One
AW21

You Build It, You Own It!

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

The days of writing software and throwing it over the proverbial wall to operations and production support teams are over. It’s time we, as software development teams, become more accountable and take pride and ownership in what we do. The results will be better transparency, more autonomy, and reduced risk (among other things). Join Sean and Suresh as they walk through how Capital One tackled one particular project by leveraging DevOps and forming their "you build it, you own it" principles. You'll gain a better understanding of how to improve quality within your agile teams and how to...

Tom Stiehm
Coveros, Inc.
AW22

Shifting Security Left: The Innovation of DevSecOps

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

DevSecOps uses application security practices that have existed for a while. The innovation of DevSecOps is incorporating security into the daily workflow of the team rather than leaving it to the end, shifting security left by automating aspects of security testing. DevSecOps leverages DevOps practices to make application security a first-class citizen in the practices of modern software development. But that requires a culture change: DevSecOps starts before the code is even written, using techniques like threat modeling and risk analysis to figure out who will attack you and how. Come...

Michelle Hodges
Red Ventures
AW23

Wage Your Bets: Microservice, Monolith, or Serverless

Add to calendar
Wednesday, November 6, 2019 - 3:00pm to 4:00pm

Microservice, Monolith, and Serverless are some of the three architectural styles that have recently gained popularity. Some engineers swear one over the other, but in reality, there is no black and white: there are advantages and disadvantages, depending on each use case. For example, if the flow of your services are dependent on another and each service doesn’t need to scale independently, is it worth increasing the development power it needs to maintain infrastructure? In this talk, Michelle Hodges will provide the pros and cons of going one way versus another, providing real life...

Thursday, November 7

Eran_Kinsbruner
Perfecto
AT4

Stabilizing Continuous Testing in DevOps

Preview
Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Software testing lags behind the pace of features development and digital innovation. Despite recent advancements, testing remains one of the biggest challenges in DevOps. Research shows that DevOps teams have an average of less than 60 percent test automation coverage—and that’s a problem. To scale DevOps and agile and realign the entire software release cycle, Eran Kinsbruner believes there needs to be a better solution. To increase test automation coverage, teams need to match software testing deliveries with the right testing tools, skill sets, and personas. Eran will explain...

AT5

The 7 Deadly Sins of DevOps

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Do you know teams that are merely doing "cargo cult DevOps"? Near the end of WWII, the Allies had airstrips on many islands in the south Pacific. The natives on these islands noticed that when the Allies put the "coconuts" on their ears and spoke into the "banana," the gods would send down a magical flying creature with food and supplies. When the war ended and the Allies left, the natives put the coconuts on their ears and spoke into the banana, and they wondered why the gods failed to bless them, too. They didn't understand headphones or radio transmissions or that someone must be...

Matty Stratton
PagerDuty
AT6

The Psychology of Chaos Engineering

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Chaos engineering, failure injection, and similar practices have verified benefits to the resilience of systems and infrastructure. But can they provide similar resilience to teams and people? What are the effects and impacts on the humans involved in the systems? This talk will delve into both positive and negative outcomes for all the groups of people involved, including users, engineers, product owners, and business owners. Using case studies from organizations where chaos engineering has been implemented, Matty Stratton will explore the changes in attitude that these practices create,...

Pierre Vincent
Poppulo
AT7

Changing Tires on a Moving Car: A Journey to Zero-Downtime Deployments

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Applications built over the years carry historical design assumptions, such as that a few hours of downtime for maintenance upgrades every six months is acceptable. Today, embracing continuous delivery practices means more frequent releases, which means more downtime. This is the problem Poppulo faced and successfully overcame, going from monthly deployments with a couple of hours of downtime to zero-downtime deployments on demand. Pierre Vincent will show that by mapping out a deployment process, it becomes possible to progressively reduce its impact on users. He will also give practical...

Ryan Ripley
Independent Consultant
AT8

Fishbowl: Liberating Structures

Add to calendar
Thursday, November 7, 2019 - 10:00am to 11:00am

Liberating structures offer a revolutionary solution to collaboration in groups by using a handful of simple rules to unleash and involve everyone, enabling groups of any size to work at the top of their intelligence. Discuss them with peers and experts in this fishbowl discussion, where the audience members sit in a circle of chairs in the middle of the room. Several brave souls will fill all but one of the chairs in the "fishbowl." When you want to join as a speaker, you enter the fishbowl and sit in the empty chair, and one of the other speakers will voluntarily leave so that one chair...

Melissa_Benua
mParticle
AT11

Continuous Deployment for 'Mature' Codebases

Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

When starting up a greenfield project, it’s easy to take advantage of the most modern development practices. But what about the rest of us, who are working on codebases greater than five minutes old? How do you take code that’s four years and hundreds of thousands of SLOC, and turn that into a lean, mean, continuous-deploying machine? In this talk, Melissa Benua will walk through what continuous integration and deployment means for teams working on mature code bases, and what the roadmap looks like to get from a release cycle that may take weeks or months to one that deploys on-demand....

Leslie Lowman
AvidXchange
AT12

Legacy Code and Testing: Let's Energize It!

Preview
Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

Do you want to apply test automation to decade-old spaghetti code but aren't sure where to start? Many teams talk about needing automated tests in order to deliver faster, better quality but don't know just how to get there. Their code was created without a lot of the tools we have today or may have automation that centers on slow, record-and-playback methods. Join Leslie Lowman for an in-depth look at examples of this situation. She'll give some prerequisites, like instituting a solid testing model that focuses on automation, and show how to apply the testing model to older code,...

Tori Wieldt
New Relic
AT13

DevOps without Measurement Is a Fail

Preview
Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

The primary goal of DevOps is to provide velocity and quality through improved collaboration. However, without a tailored measurement framework to direct efforts to the problems that matter to the customer and the business, these goals are meaningless. DevOps teams must outline relevant KPIs to measure the impact of their efforts. While keeping the end goal of a DevOps transformation in mind, it’s important to have a canonical source for the relevant metrics that is visible and understandable to all stakeholders. Focusing on success metrics empowers organizations to determine if...

Lee Barnes
Utopia Solutions
AT14

Effective Test Automation in DevOps

Preview
Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

The ultimate objective of a DevOps approach is to deliver quality products to your customers as efficiently as possible. DevOps shops that achieved this state point to continuous testing as a key contributor to their success. However, QA and testing have become forgotten along the DevOps journey of many organizations. For groups that have incorporated testing, many have a release cadence that resembles something more like waterfall. The culprit is often the inability to incorporate stable automation into their testing practices. Lee Barnes will discuss how organizations can address...

Tim_Guay
AgileWorks
AT15

A Fool with a Tool: The Dangers of Ignoring Culture by Overfocusing on Tools

Preview
Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

Many organizations ignore culture and overfocus on picking and implementing the right tools. However, these tools have underlying cultural assumptions. If the current culture does not support these assumptions, then automation will only have limited success, or even fail altogether. So how do you address this problem? By recognizing that overfocusing on tools is a problem in the first place. Start by understanding the cultural assumptions supporting the optimum use of the tools, as well as how your organization measures up in relation to high-performing organizations. Finally,...

Owen Gotimer
TechWell
AT16

A DevOps Fireside Chat with Andy Glover

Add to calendar
Thursday, November 7, 2019 - 11:30am to 12:30pm

You've got DevOps questions, and we've got Andy Glover to answer them for you. He won't really be sitting by the fire, but he will be on hand to talk about all things DevOps. From his experiences building the Spinnaker continuous delivery platform to writing the open-source BDD framework easyb, Andy wants to talk about the things that worry you or thrill you about DevOps. Bring your questions and be ready for a lively, interactive discussion.

Owen Gotimer
TechWell
B1

Agile+DevOps Feud!

Add to calendar
Thursday, November 7, 2019 - 1:30pm to 2:00pm

Join us for a game of Agile+DevOps Feud, where two teams of thought leaders compete to name the most popular responses to survey questions to win bragging rights and to share their experiences. Questions and voting will be in the TechWell Hub leading up to the conference, where community members will name their greatest concerns, best practices, etc. Our two teams of panelists, will do their best to guess the community’s viewpoint, and the winning team will get to explain how they deal with those concerns. Our panelists are competing...

Jim Collins
CUNA Mutual Group
Amanda  Palovcsik
CUNA Mutual Group
AT18

Using Lean XP to Supercharge Your Agile Delivery

Preview
Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

Most teams that do agile development start with Scrum. And why not? Scrum is a proven method for focusing your team, ensuring that work adds value, and minimizing the risk with release. Then, after awhile, Scrum becomes stagnant. There are no more speed increases, and the team focuses more on ceremonies than delivery. At this point, Extreme Programming (XP), and Lean XP in particular, is the next step in agile maturity. Lean XP means developing software at the last possible moment ("just-in-time development") using one-week sprints, test driven development, pairing at all levels,...

Guy Herbert
Atlassian
AT21

How DevOps and Agile Fit with Compliance Obligations

Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

DevOps and agile are designed to help you be adaptable and move quickly. But meeting your compliance obligations tends to slow you down and make processes rigid. However, by using key components of agile and DevOps and approaching compliance obligations from a different angle, you can meet your obligations while being adaptable. Guy Herbert will show examples of how his company structures their CI/CD processes to include compliance and how they have changed their compliance approach to be able to better meet the needs of the DevOps teams. Guy will also discuss the cultural implications of...

AT22

So You’re Using Docker. Now What?

Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

These days everyone wants to containerize their application, but not everyone understands the best way to go about it. You need a tool to manage your containers, you need tools for image security scanning, you need to completely rethink how your application fits into its deployment environment, and most importantly you need to make sure you’re following good DevSecOps practices. Join Ryan Kenney as he discusses how he has addressed these concerns, among others, for various clients. Ryan will discuss options for container orchestration tools like Kubernetes and its competitors. Then, he...

Dan Barker
RSA Security
AT23

5 Steps to a DevOps Transformation

Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

For any continuously improving organization, certain actions are commonly applicable when going through large amounts of change. Dan Barker walks through the five steps to transformational change that he's found to be crucial for moving to DevOps processes: establish the vision; create shared experiences; educate, educate, educate; find evangelists; and get feedback. Dan will elaborate on each item with methods he's used in real transformations at multiple companies. He'll also describe how these all tie into the DevOps culture, which is really what is being transformed in the company. You...

Allison Pollard
Improving
Barry Forrest
Improving in Dallas
AT24

We Inflicted DevOps on Our Business—Now What?

Add to calendar
Thursday, November 7, 2019 - 3:30pm to 4:30pm

It seems that everyone is aflutter with DevOps, the shiny new panacea for all of our software ailments. What technical goodness can DevOps bestow upon us? What riddles does it unlock for us as technologists? How do business goals align in order to wring the true value from DevOps? Delivering value faster is a desire of many business and IT leaders, and it often looks like a win-lose proposition to achieve it. Metrics and edicts seem to have competing interests, like the car racer being told to both "go faster" and "save fuel." Barry Forrest and Allison Pollard will share their experiences...

Robin Foster
Coveros
AT25

Maximizing Agile Benefits through Understanding Learning Styles

Preview
Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

The Agile Manifesto says we value people and interactions over processes and tools. Yet when we talk about the agile methods, we usually end up talking about processes. Agilists use timeboxing as a forcing function to draw out resolutions and decisions. What if we just needed a better way to describe our needs and issues? What if we could actually be more effective with our communication? Join Robin Foster as he explores the relationships between learning, memory, communication, teaching, and the agile framework. Discover the cognitive science behind the process of learning new...

AT28

Contract Testing with Pact: A Different Approach

Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

With the microservice architecture evolving and becoming a golden standard, the necessity of testing the contracts between services appears to be more and more obvious. One of the most interesting solutions here is the Pact tool, which helps with testing and verifying the API contracts in a CI/CD manner and opens up a lot of interesting possibilities. However, the devil is always in the details: the implementation. We need to configure the Pact mock servers, but similar configurations are often needed across all the different parts of testing, from the verification of the providers to end-...

Dave Karow
Split
AT29

Feature Flagging: Proven Patterns for Control and Observability in Continuous Delivery

Preview
Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

Are you moving faster than fast? Congrats! Chances are you already use feature flags to decouple code deployments from feature rollouts. Whether you use a roll-your-own feature-flagging solution (with a few quirks) or a feature-flags-as-a-service solution, hopefully you post feature flag rollout changes to something like Datadog so that when a flag rollout lines up with an obvious spike, you know whom to have a talk with. It's a solid start, but that’s just the basics. What do data-driven CD ninjas do? They build in observability to every feature release, so when they push a...

Derek Ashmore
Asperitas Consulting
AT30

AWS Lambda: Best Practices and Common Mistakes

Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

AWS Lambda is a serverless architecture that relieves you of hardware and scaling setup concerns. AWS Lambda functions are used by many organizations for serverless application development and automating DevOps tasks. But many teams start using AWS Lambdas and uncover problems such as running into resource limits, debugging nested lambda defects, managing code change across dozens of AWS accounts, and many more. Derek Ashmore will provide tips and tricks to make your AWS Lambda functions usable in different contexts and easier to develop and support. He will show you how to mitigate common...

AT31

Agile and DevOps Transformation in the Telecom Industry

Preview
Add to calendar
Thursday, November 7, 2019 - 4:45pm to 5:45pm

The telecom industry changes rapidly, the competition is fierce, and user experience is the utmost priority. In today's world of digitization and data personalization, effective use of agility and DevOps is the key behind ensuring customer satisfaction. Flawless delivery, optimized time to market, and enhanced customer usability form the backbone of IT to ensure the success of frontline teams in the business. The methodologies adopted in product and feature delivery, the agility adopted in delivering offers and promotions to the customer base, and the steps adopted in ensuring...

Friday, November 8

Chris Wysopal
Veracode
DS2

Shifting Security Left: Where to Start

Add to calendar
Friday, November 8, 2019 - 8:45am to 9:30am

Equipped with this guidance you can begin to make the changes that will transform application security into a responsibility that is shared by development and security and that continues once applications are in production and operation. By shifting security left, you unburden your security team, empower your developers to write better code…

Andrew Glover
Netflix
SMT1

From Startup to Netflix: Leadership Lessons Learned

Add to calendar
Friday, November 8, 2019 - 8:45am to 9:45am

While leadership styles may change when moving from a startup to a Fortune 500 company, leadership practices do not! Join Andrew Glover as he discusses his DevOps leadership journey, starting with his own company and ending at Netflix. Learn what works and what doesn’t from someone with hands-on, practical experience leading Agile and DevOps initiatives and teams. Hear Andrew’s lessons learned and how to overcome leadership obstacles during change. Take home valuable tips for leading Agile and DevOps change within your organization.

DS3

Rome Wasn't Built in a Day...and Neither is Your DevSecOps

Add to calendar
Friday, November 8, 2019 - 9:30am to 10:00am

DevSecOps is about more than just the tools – it is an organizational, operational, and strategic transformation. So, as a “thorough or dramatic change in form or appearance” across the three main pillars of an organization, how can we expect a DevSecOps transformation to take place overnight? Taking lessons from process transformations throughout history, attendees will learn how to evaluate their current DevSecOps maturity and understand the key tools and processes that will help their organization ascend the DevSecOps maturity curve, through achievable milestones and stages.

DS1

Building Trust Between Security and Development to Accomplish Culture Change

Add to calendar
Friday, November 8, 2019 - 10:00am to 10:30am

DevSecOps empowers engineering teams to take ownership of how their product behaves in production, including security aspects. The primary goal of a DevSecOps initiative is to get development teams to shift their mindset and adopt security practices in their daily activities. However, this can only happen with healthy collaboration and mutual trust between development and security teams. Larry Maccherone can show you how. Larry will discuss how to effectively build trust between developers and security personnel to facilitate a successful DevSecOps program. He will present a proven "Trust...

Jeff Gallimore
Excella
SMT2

Decoding Culture: How Culture Can Improve Performance and Increase Joy

Add to calendar
Friday, November 8, 2019 - 10:00am to 11:00am

We’ve all heard culture is vital to creating and sustaining a healthy organization. It was even Merriam-Webster’s Word of the Year in 2014! We also know culture is notoriously hard to describe in a meaningful way. Even harder than describing culture is demonstrating its contribution to organizational performance. We know culture is important. But for all its importance, we’ve had few tools and limited research to describe or quantify culture. Join Jeff Gallimore as he explores the critical aspects of culture and discusses how a strong culture can improve corporate performance while keeping...

Tom Stiehm
Coveros, Inc.
DS5

Panel Discussion: Effective Integration of Tooling into DevOps

Add to calendar
Friday, November 8, 2019 - 11:00am to 11:45am

Integrating security tools into a DevOps pipeline is about more than just dropping them into a test environment. It’s about putting them where the business return is greatest. Where fast feedback can be gathered. Picking the right tools for the job. Join DevSecOps experts as they discuss and debate the merits of SAST, DAST, IAST, and RAST tools for your pipeline. Learn about the pros and cons of each type of security testing and how to choose the right tools for your needs. Hear how various organizations have gotten started with DevSecOps tooling and learn tips and trick for implementing...

Jeff Williams
Contrast Security
DS3

Taking DevSecOps To The Next Level - Cutting Edge Tools for your Pipeline

Add to calendar
Friday, November 8, 2019 - 12:45pm to 1:30pm

DevSecOps is so much more than forcing developers to use legacy scanning tools. In this talk, we will discuss a continuous, effective, and scalable DevSecOps pipeline using free cutting-edge tools. We'll discuss and show IAST (Interactive Application Security Testing) to accurately pinpoint vulnerabilities in both custom code and libraries in real time without scanning. We'll discuss and show RASP (Runtime Application Self-Protection) in production to gain visbility into application attaches and to prevent vulnerabilities from being exploited. And we'll discuss how to integrate the results...

Gene Gotimer
Coveros, Inc.
DS7

A Practical Approach to Building Security In

Add to calendar
Friday, November 8, 2019 - 1:30pm to 2:00pm

The release date is a week away. Development is complete. The code works, and everything looks good. Marketing is ready with the media blitz. Our customers are waiting to get their hands on the new features and are sure to give us good feedback. The only step left is to get the security group to scan the application and give us the approval to release. Cross your fingers- let’s hope we get the green light! Otherwise, I don’t know what we are going to do. DevOps, and more importantly, DevSecOps, promises to do away with rolling the dice at the end and hoping we are allowed to release what...

Tom Stiehm
Coveros, Inc.
DS9

Panel Discussion: Getting Development and Security To Work Together

Add to calendar
Friday, November 8, 2019 - 2:45pm to 3:30pm

DevSecOps is all about getting security teams, practices, processes, and tooling integrated into your DevOps process but often getting a cross-functional team that includes security in place is difficult. Join DevSecOps practitioners in exploring the best ways to get security groups and personnel involved in day-to-day DevOps teams. Learn what role security personnel play in Sprint activities and how to remove compliance from being an end-of-lifecycle hurdle. Hear how leading organizations successfully shift security left and tips and tricks for getting started.