Does 2018 presentation rinehart - how to train your dragons

•

0 gostou•125 visualizações

Aaron Rinehart

How to Train Your Dragons to Code “Transformation Success by Teaching your Security Team to Code”

Engenharia

Aaron Rinehart
Chief Security Architect
UnitedHealth Group
Contact Info
Rinehart.Aaron@gmail.com
@aaronrinehart
2

• Fortune 5 Company
• 380+ Companies & Growing
• 28,000+ Developers
• 8,000+ Applications
• Highly Regulated
• Diverse Technology Portfolio
• Security Testing: Mostly
Human Driven
• Cloud Journey: Mixed
The Challenge: We are Large & Complex
• Largest Private HealthCare
Company in World
• 1000+ Security
Professionals
• Multinational Business
• Some DevOps
• Waterfall, Agile, & Others

Digital
Transformation at
a Healthcare
Giant

How do we
continue change
the direction of
the Titanic?

1st SRE @ United
Health Group
Patrick Bergstrom

1st Open Source
Project for
UnitedHealth
Group

• ChatOps Integration
• Configuration-as-Code
• Example Code & Open
Framework
ChaoSlingr Product Features
• Serverless App in AWS
• 100% Native AWS
• Configurable Operational
Mode & Frequency
• Opt-In | Opt-Out Model

Teaching Security
Engineers
Software
Engineering

Mais conteúdo relacionado

Mais procurados

In this webcast, John Calagaz, CTO of CentraLite and Abhi Rele discuss how an API-centric approach helps developers realize the promise of the connected IoT world. - challenges that prevent devices from interoperating - using REST APIs to program multiple devices and access sensor and actuator data - how developers can use the data from devices to demonstrate real value Listen to the podcast version here: http://bit.ly/1GCWDAs

Using APIs to Program Disparate IoT Devices

Apigee | Google Cloud

SplunkLive! Customer Presentation - ExxonMobil

Splunk

From Zero to SAFe

Eficode

Apigee centralite io t webinar july 2015 share (2)

Apigee | Google Cloud

It’s often thought that having a disability limits one’s potential. Oftentimes, individuals with disabilities are fearful that their disability can negatively impact their personal relationships and professional career. The good news is that disabilities doesn’t define us, and can instead be a true superpower. Join Dona Sarkar & Dux Raymond Sy in this interactive session and learn how Samit Saini, Heathrow Airport security officer with Dyslexia learnt and used PowerApps to digitize some of the paper-based processes at Heathrow Airport, saving more than 11,000 sheets of paper, 850 hours of time, and $460K potential custom app costs.

#HumansofIT with Tech Superpowers: How Heathrow's Security Officer Launched 1...

Dux Raymond Sy

Managing SCADA Operations and Security with Splunk Enterprise

Splunk

Für die Realisierung ihrer neuen Plattform hat sich LeanIX für Facebooks’ GraphQL als API entschieden. In ihrem Vortrag erklären Niklas und Patrick die Vorteile ggü. klassischen REST APIs. Zudem zeigen sie, wie die Anbindung im Backend (Java) mit verschiedenen Storages funktioniert (u.a. Elasticsearch) und wie das Frontend (Angular 2) Queries und Mutations an die neue API sendet. === LeanIX offers an innovative software-as-a-service solution for Enterprise Architecture Management (EAM), based either in a public cloud or the client’s data center. Companies like Adidas, Axel Springer, Helvetia, RWE, Trusted Shops and Zalando use LeanIX Enterprise Architecture Management tool. Free Trial: http://bit.ly/LeanIXFreeTrial

GraphQL in LeanIX Enterprise Architecture Management @ Bonnagile Meetup

LeanIX GmbH

London Adapt or Die: Lunch keynote

Apigee | Google Cloud

Strata+hadoop data kitchen-seven-steps-to-high-velocity-data-analytics-with d...

DataKitchen

Watch the live demo of Apigee's API platform to learn how to: - easily configure and manage new APIs and enforce security with minimal impact to backend services - create, manage and monetize API products - extend API Services to increase flexibility and tailor to business requirements with JavaScript, Java, Python, and Node.js - provide developers easy, yet secure access to explore, test, and deploy APIs - use end-to-end visibility across the digital value chain to monitor, measure, and manage success

Apigee Demo: API Platform Overview

Apigee | Google Cloud

Deep Dive: Strategic Importance of BaaS

Apigee | Google Cloud

Apigee Edge Overview and Roadmap

Apigee | Google Cloud

APIdays Paris 2019 - Talend API Services - From Design to Production by Charl...

apidays

The Case For Secure Data Science

Daniel McEnnis

Find out about the functionalities of the new LeanIX iPhone App recently launched at the Gartner EA Summit in London. With the new app you have access to your company's whole IT architecture on the go. === LeanIX offers an innovative software-as-a-service solution for Enterprise Architecture Management (EAM), based either in a public cloud or the client’s data center. Companies like Adidas, Axel Springer, Helvetia, RWE, Trusted Shops and Zalando use LeanIX Enterprise Architecture Management tool. Free Trial: http://bit.ly/LeanIXFreeTrial

Your IT Architecture in your pocket with LeanIX iPhone App. Mobile Enterprise...

LeanIX GmbH

LeanIX New API Tokens

LeanIX GmbH

AWS Enterprise Summit London | AWS as an Agile Enabler at The Co-operative

Amazon Web Services

Mais procurados (17)

Using APIs to Program Disparate IoT Devices

SplunkLive! Customer Presentation - ExxonMobil

From Zero to SAFe

Apigee centralite io t webinar july 2015 share (2)

#HumansofIT with Tech Superpowers: How Heathrow's Security Officer Launched 1...

Managing SCADA Operations and Security with Splunk Enterprise

GraphQL in LeanIX Enterprise Architecture Management @ Bonnagile Meetup

London Adapt or Die: Lunch keynote

Strata+hadoop data kitchen-seven-steps-to-high-velocity-data-analytics-with d...

Apigee Demo: API Platform Overview

Deep Dive: Strategic Importance of BaaS

Apigee Edge Overview and Roadmap

APIdays Paris 2019 - Talend API Services - From Design to Production by Charl...

The Case For Secure Data Science

Your IT Architecture in your pocket with LeanIX iPhone App. Mobile Enterprise...

LeanIX New API Tokens

AWS Enterprise Summit London | AWS as an Agile Enabler at The Co-operative

Semelhante a Does 2018 presentation rinehart - how to train your dragons

AllDayDevOps : DevSecOps & Chaos Engineering: Knowing the Unknown

Aaron Rinehart

Machine Learning (ML) and Artificial Intelligence (AI) have been proclaimed as perhaps the next great leap in human quality of life, as well as a potential reason for our extinction. Somewhere in between lies how ML & AI can potentially improve our Cyber Security efforts. But are ML & AI a true panacea or merely the next shiny trinket for the cyber industry to fixate on? In this webinar we will explore: How ML & AI are currently being utilized in cyber security efforts. What is working and what has not worked What is on the both the short term and near-term horizon for ML &AI Practical steps you can take now to begin leveraging these technologies to tangibly improve your cyber security posture Join our panel of industry experts as we explore this brave new frontier in cyber security with a candid look cutting through the hype.

How Machine Learning & AI Will Improve Cyber Security

DevOps.com

Looking for your next Cleared Career Opportunity in DC Metro? Join us on April 22nd at the reStartEvents Cleared DC Metro Virtual Career Fair and explore hundreds of career opportunities available throughout Northern Virginia, DC, Maryland and more.... reStartEvents Cleared DC Metro Virtual Career Fair Thursday, April 22nd, 2021 2pm - 5pm est Register: https://app.brazenconnect.com/a/restart-events/e/1qdn7 An Active Security Clearance IS Required For This Event Companies Interviewing: Leidos Aerotek AEVEX Aerospace Agile Defense Ambit Technology Solutions Boeing Intelligence & Analytics BuddoBot Compass, Inc Cubic CyberKinetics Ernst & Young FoxHole Technology Lockheed Martin Maxar Technologies MetaTech Consulting Ncyber Oracle Perspecta Sierra Nevada Corporation Systems Planning & Analysis The Buffalo Group, a Jacobs Company and many more.... Chat with hiring managers & recruiters from some of the nations leading defense contractors - all from the comfort and safety of your home or office Whether you are transitioning from the military or federal government, actively seeking employment, furloughed, your contract is coming to an end or window shopping and want to see what else is out there for you, This Is The Event For You! Positions available include: Software Engineers, Help Desk, Web Developers, Budget Analysts, Program / Project Managers, Cyber CounterIntelligence Specialists, Storage Engineers, Business Analytics, Systems Engineers, SharePoint Developer, Reverse Engineers, Intelligence Analysts, Network Engineers, CNO Analysts, Penetration Testers, JAVA Programmers, Cloud Engineer, Information Systems Security, Administrative Assistants, Network Admins, Linguists, Full Stack Developers, LINUX Systems Admins and much more.... This event is for cleared job seeking professionals exploring cleared employment opportunities throughout the DC metro region Please feel free to share this important event with any of your Cleared colleagues or friends who would benefit from participating Looking forward to seeing you online on April 22nd

reStartEvents April 22nd DC metro Cleared Virtual Career Fair Employer Directory

Ken Fuller

2019 Top Lessons Learned Since the Phoenix Project Was Released

Gene Kim

2019 July SoftwareONE Sales presentation

Jaime Cajigas ☁

It is impossible to overstate how much I’ve learned since co-authoring The Phoenix Project, DevOps Handbook, and Accelerate. I’m so excited that after years of work, The Unicorn Project will be published later this year. This book is my attempt to frame what I’ve learned studying technology leaders adopting DevOps principles and patterns in large, complex organizations, often having to fight deeply entrenched orthodoxies. And yet, despite huge obstacles, they create incredibly effective and innovative teams that create beacons of greatness that inspire us all. In this book, we follow a senior lead developer and architect as she is exiled to the Phoenix Project, to the horror of her friends and colleagues, as punishment for contributing to a payroll outage. She tries to survive in what feels like a heartless and uncaring bureaucracy, forced to work within a system where no one can get anything done without endless committees, paperwork, change requests, and approvals. Decades of technical debt make even small changes difficult or impossible, often causing catastrophic outcomes and fear of punishment. I get tremendous delight and gratification that this book is not about the bridge crew of the Starship Enterprise -- instead, it is about redshirt engineers, which as it turns out, whose heroic work matters most to the long-term survival of almost every organization. In my previous books, I’ve focused on principles and practices (e.g., Three Ways, Four Types of Work). However, I’ve always wanted to describe the spectrum of cultural, experiential and value decisions we make that either enable greatness, or create chronic suffering and underperformance. They are currently as follows: • The First Ideal — Locality and Simplicity • The Second Ideal — Focus, Flow and Joy • The Third Ideal — Improvement of Daily Work • The Fourth Ideal — Psychological Safety • The Fifth Ideal — Customer Focus In this talk, I’ll share with you my goals and aspirations for The Unicorn Project, describe in detail the Five Ideals, along with my favorite case studies of both ideal and non-ideal, and why I believe more than ever that DevOps will be one of the most potent economic forces for decades to come.

The Unicorn Project and The Five Ideals (Updated Dec 2019)

Gene Kim

Hey {firstName}, Looking for your next Cleared Career Opportunity in DC metro or Beyond? Join us on November 16th at the reStartEvents DC metro & Beyond All-Clearances Virtual Career Fair and explore hundreds of career opportunities available throughout Northern Virginia, DC metro, Maryland and around the country... Chat with hiring managers & recruiters from some of the nations leading defense contractors - all from the comfort and safety of your home or office. reStartEvents DC metro & Beyond All-Clearances Virtual Career Fair Thursday, November 16th, 2023 2pm - 5pm est Details & Registration: https://tinyurl.com/2ywpx6ah An Active Security Clearance IS Required For This Event Companies Interviewing: • Leidos • Air Force Civilian Service • Northrop Grumman • Accenture Federal Services • Booz Allen Hamilton • Compass, Inc. • Maxar Technologies • Oasis Systems • Two Six Technologies and many more….. Whether you are transitioning from the military or federal government, actively seeking employment, furloughed, your contract is coming to an end or window shopping and want to see what else is out there for you, This Is The Event For You! Positions available include: Software Engineers, Help Desk, Web Developers, Budget Analysts, Program / Project Managers, Cyber Security Specialists, Data Scientists, Business Analytics, Systems Engineers, SharePoint Developer and many more.... This event is targeting cleared job seeking professionals looking for cleared employment opportunities throughout the DC metro area & beyond We are also hosting a Nationwide TS/SCI & Above virtual career fair on December 7th - Details & Registration: https://tinyurl.com/2eenccnz Please feel free to share these important events with any of your Cleared colleagues and friends who would benefit from participating Looking forward to seeing you online on November 16th

reStartEvents 11:16 DC metro & Beyond Employer Directory.pdf

Ken Fuller

Top Digital Transformation Trends (2020)

Cygnet Infotech

Integrator Evolution: Discussing Current Challenges & Future Trends in Indust...

Inductive Automation

Digital Ethics and Privacy in a GDPR World

MongoDB

Integrator Evolution: Discussing Current Challenges & Future Trends in Indust...

Inductive Automation

Lots of DevOps news this week, including why automation is critical for securing code, as well as balancing agility with security needs. Learn how to manage security in GitHub projects with CoPilot from Black Duck Software. Pre-GDPR, Carphone Warehouse gets hit with £400k fine over a 2015 hack. And why you should think like your attackers when developing your cybersecurity portfolio. Read on for this week’s cybersecurity and open source security news in Open Source Insight!

Open Source Insight: Balancing Agility and Open Source Security for DevOps

Black Duck by Synopsys

How to get a HR system in place fast. Five principles that can help your organisation deploy and leverage new HR technologies. By Owen Pagan, Director of Strategy and Growth at CoreHR. This was originally presented at the CIPD HR Software Show in the Olympia London on June 19th 2014. The presentation discusses Gartner's Nexus of Forces, how it is influencing strategic HR and the development of HR technology by CoreHR.

How to get a HR system in place fast.

CoreHR

Workplace Productivity Summit

Concurrency, Inc.

Digital Transformation Myths Debunking 3 Common Confusions

Nandita Nityanandam

Intelligently Migrate to the Cloud and Continuously Keep Spend Low Cloud migrations are complex and challenging projects. Traditional approaches often fail, losing time, money, and resources. Neo4j, the creator and leader of the graph database category, and Process Tempo have come together to make cloud migration faster, easier, and more cost-effective than ever. Join us to learn how the combined power of our technologies helps you plan, execute, monitor, and optimize your migration project – all while avoiding common pitfalls – to help ensure a smooth migration from beginning to end. In this 45-minute session, you’ll learn: What the most common pitfalls of cloud migration are and how to avoid them What the essential requirements and best practices for a successful migration are How graph analytics can improve and accelerate the critical stages of your migration

Neo4j + Process Tempo present Plan Your Cloud Migration with Confidence

Neo4j

This presentation was made on June 16, 2020. A recording of the presentation can be viewed here: https://youtu.be/khjW1t0gtSA AI is unlocking new potential for every enterprise. Organizations are using AI and machine learning technology to inform business decisions, predict potential issues, and provide more efficient, customized customer experiences. The results can enable a competitive edge for the business. H2O.ai is a visionary leader in AI and machine learning and is on a mission to democratize AI for everyone. We believe that every company can become an AI company, not just the AI Superpowers. We are empowering companies with our leading AI and Machine Learning platforms, our expertise, experience and training to embark on their own AI journey to become AI companies themselves. All companies in all industries can participate in this AI Transformation. Tune into this virtual meetup to learn how companies are transforming their business with the power of AI and where to start. About Parul Pandey: Parul is a Data Science Evangelist here at H2O.ai. She combines Data Science , evangelism and community in her work. Her emphasis is to spread the information about H2O and Driverless AI to as many people as possible, She is also an active writer and has contributed towards various national and international publications.

Your AI Transformation

Sri Ambati

Intelligent data summit: Self-Service Big Data and AI/ML: Reality or Myth?

SnapLogic

The Smart Ass™ Fan is the latest ceiling fan from Big Ass Fans®. Smart products are everywhere now, and they’re connected. Imagine a family of smart products and how much content could be/should be shared. These products can include mechanical, electrical and software parts AND content. How will you deal with this explosive content requirement? This webinar takes a tour of the problem and explains what content engineering is …and how it can be used to create a sustainable content life cycle. Smart products need smart content.

Content Engineering and The Internet of “Smart” Things

dclsocialmedia

Top Lessons Learned While Researching and Writing The DevOps Handbook In this webinar, Gene Kim shares his top insights discovered while co-authoring The DevOps Handbook with Jez Humble, Patrick Debois, and John Willis, including: • Informative DevOps transformation case studies around continuous integration and delivery • Jez Humble’s latest definitions of continuous delivery vs. deployment • How Conway’s Law and architecture can both hinder and enable success • Concrete techniques to build a culture of continuous experimentation and learning – including those from Google, Etsy, Nordstrom, and Capital One

Top Lessons Learned While Researching and Writing The DevOps Handbook

Dynatrace

Semelhante a Does 2018 presentation rinehart - how to train your dragons (20)

AllDayDevOps : DevSecOps & Chaos Engineering: Knowing the Unknown

How Machine Learning & AI Will Improve Cyber Security

reStartEvents April 22nd DC metro Cleared Virtual Career Fair Employer Directory

2019 Top Lessons Learned Since the Phoenix Project Was Released

2019 July SoftwareONE Sales presentation

The Unicorn Project and The Five Ideals (Updated Dec 2019)

reStartEvents 11:16 DC metro & Beyond Employer Directory.pdf

Top Digital Transformation Trends (2020)

Integrator Evolution: Discussing Current Challenges & Future Trends in Indust...

Digital Ethics and Privacy in a GDPR World

Integrator Evolution: Discussing Current Challenges & Future Trends in Indust...

Open Source Insight: Balancing Agility and Open Source Security for DevOps

How to get a HR system in place fast.

Workplace Productivity Summit

Digital Transformation Myths Debunking 3 Common Confusions

Neo4j + Process Tempo present Plan Your Cloud Migration with Confidence

Your AI Transformation

Intelligent data summit: Self-Service Big Data and AI/ML: Reality or Myth?

Content Engineering and The Internet of “Smart” Things

Top Lessons Learned While Researching and Writing The DevOps Handbook

Mais de Aaron Rinehart

RSA 2021 Navigating the Unknowable: Resilience through Security Chaos Enginee...

Aaron Rinehart

The complex ordeal of delivering secure and reliable software in Healthcare will continue to become exponentially more difficult unless we begin approaching the craft differently. Enter Chaos Engineering, but now also for security. Instead of a focus on resilience against service disruptions, the focus is to identify the truth behind our current state security and determine what “normal” operations actually look like when it's put to the test. The speed, scale, and complex operations within modern systems make them tremendously difficult for humans to mentally model their behavior. Security Chaos Engineering is an emerging practice that is helping engineers and security professionals realign the actual state of operational security and build confidence that it works the way it was intended to. Join Aaron Rinehart to learn how he implemented Security Chaos Engineering as a practice at the world’s largest healthcare company to proactively discover system weakness before they were taken advantage of by malicious adversaries. In this session Aaron will share his experience of applying Security Chaos Engineering to create highly secure, performant, and resilient distributed systems.

HealthConDX Virtual Summit 2021 - How Security Chaos Engineering is Changing ...

Aaron Rinehart

Navigating the Unknowable: Resilience through Security Chaos Engineering When applied to Cyber Security, Chaos Engineering is advancing our ability to reveal objective information about the effectiveness of operational security measures proactively through empirical experimentation. In this session we will introduce the core concepts behind this new technique and how you can get started in building and applying it.

RSAC 365 2021 Virtual Summit Spotlite Presentation on Security Chaos Engineering

Aaron Rinehart

DevSecOps Days Istanbul 2020 Security Chaos Engineering

Aaron Rinehart

The reactionary state of the industry means that we quickly identify the ‘root cause’ in terms of ‘human-error’ as an object to attribute and shift blame. Hindsight bias often confuses our personal narrative with truth, which is an objective fact that we as investigators can never fully know. The poor state of self-reflection, human factors knowledge, and the nature of resource constraints further incentivize this vicious pattern. This approach results in unnecessary and unhelpful assignment of blame, isolation of the engineers involved, and ultimately a culture of fear throughout the organization. Mistakes will always happen. Rather than failing fast and encouraging experimentation, the traditional process often discourages creativity and kills innovation. As an alternative to simply reacting to failures, the security industry has been overlooking valuable chances to further understand and nurture ‘accidents’ or ‘mistakes’ as opportunities to proactively strengthen system resilience. Expose the failures, build resilient systems, and develop an "Applied security" model to minimize the impact of failures. In this session we will cover discuss the role of ‘human-error’, root cause, and resilience engineering in our industry and how we can use new techniques such as Chaos Engineering to make a difference. Security focused Chaos Engineering proposes that the only way to understand this uncertainty is to confront it objectively by introducing controlled signals. During this session we will cover some key concepts in Safety & Resilience Engineering work based on Sydney Dekker’s 30 years of research into airline accident investigations and how new techniques such as Chaos Engineering are making a difference in improving our ability to learn from incidents proactively before they become destructive

AllDayDevOps 2020 Aaron Rinehart Security Differently

Aaron Rinehart

Applied Security: Crafting Secure and Resilient Distributed Systems using Chaos Engineering CO-TALK BY AARON RINEHART, CTO @ VERICA & JAMIE DICKEN, MANAGER OF SECURITY ENGINEERING @ CARDINAL HEALTH Modern systems pose a number of thorny challenges and securing the transformation from legacy monolithic systems to distributed systems demands a change in mindset and engineering toolkit. The security engineering toolkit is unfortunately out-of-style and outdated with today's approach to building, security and operating distributed systems. The speed, scale, and complex operations within microservice architectures make them tremendously difficult for humans to mentally model their behavior. Security Chaos Engineering helps teams realign the actual state of operational security as well as build confidence that their security actually works the way we think it does. Join Jamie Dicken and Aaron Rinehart to learn about how they implemented Security Chaos Engineering as a practice at their organizations to proactively discover system weakness before they were taken advantage of by malicious adversaries.In this session Jamie and Aaron will introduce a new concept known as Security Chaos Engineering and share their experiences in applying Security Chaos Engineering to create highly secure, performant, and resilient distributed systems.

Conf42-SRE - 2020 - "Applied Security: Crafting Secure and Resilient Distribu...

Aaron Rinehart

The speed and scale of complex system operations within cloud-driven architectures make them extremely difficult for humans to mentally model their behavior. This often results in unpredictable and catastrophic outcomes that become costly when unexpected security incidents occur. There is a need to realign the actual state of operational security measures in order to maintain an acceptable level of confidence that our security actually works when we need it to. As an alternative to simply reacting to failures, the security industry has been overlooking valuable chances to further understand and nurture ‘accidents’ or ‘mistakes’ as opportunities to proactively strengthen system resilience. Chaos Engineering allows us to proactively expose the failures, build resilient systems, and develop an "Applied Security" model to minimize the impact of failures. Chaos Engineering allows for security teams to proactively experiment and derive new information about underlying factors that were previously unknown. This is done by developing live fire exercises that can be measured, managed, and automated. Contrary to Red/Purple Team exercises, chaos engineering does not use threat actor or adversarial tactics, techniques and procedures. As far as we know it Chaos Engineering is the only proactive mechanism for detecting availability and security incidents before they happen. We proactively introduce turbulent conditions, faults, and failures into our systems to determine the conditions by which our security will fail before it actually does. In this session we will introduce a new concept known as Security Chaos Engineering and how it can be applied to create highly secure, performant, and resilient distributed systems.

ADDO - Navigating the DevSecOps App-ocalypse 2020

Aaron Rinehart

In this session Aaron will uncover the importance of using Chaos Engineering in developing a learning culture in a DevSecOps world. Aaron will walk us through how to get started with Chaos Engineering for security and how it can be practically applied to enhance system performance, resilience and security. Security focused Chaos Engineering allows engineering teams to derive new information about the state of security within their distributed systems that was previously unknown. This new technique of instrumentation attempts to proactively inject security turbulent conditions or faults into our systems to determine the conditions by which our security will fail so that we can fix it before it causes customer pain. During this session we will cover some key concepts in Safety & Resilience Engineering and how new techniques such as Chaos Engineering are making a difference in improving our ability to learn from incidents proactively before they become destructive.

AllTheTalks Security Chaos Engineering

Aaron Rinehart

Security Differently - DevSecOps Days Austin 2019

Aaron Rinehart

AllDayDevOps Security Chaos Engineering 2019

Aaron Rinehart

This session will cover the foundations DevSecOps and the application of Chaos Engineering for Cyber Security. We will cover how the craft has evolved by sharing some lessons learned driving digital transformation at the largest healthcare company in the world, UnitedHealth Group. During the session we will talk about DevSecOps, Rugged DevOps, Open Source, and how we pioneered the application of Chaos Engineering to Cyber Security. We will cover how DevSecOps and Security Chaos Engineering allows for teams to proactively experiment on recurring failure patterns in order to derive new information about underlying problems that were previously unknown. The use of Chaos Engineering techniques in DevSecOps pipelines, allows incident response and engineering teams to derive new information about the state of security within the system that was previously unknown. As far as we know Chaos Engineering is one of the only proactive mechanisms for detecting systemic availability and security failures before they manifest into outages, incidents, and breaches. In other words, Security focused Chaos Engineering allows teams to proactively, safely discover system weakness before they disrupt business outcomes.

VMWare Tech Talk: "The Road from Rugged DevOps to Security Chaos Engineering"

Aaron Rinehart

OWASP AppSec Global 2019 Security & Chaos Engineering

Aaron Rinehart

Distributed systems at scale have unpredictable and complex outcomes that are costly when security incidents occur. The speed, scale, and complex operations within microservice architectures make them tremendously difficult for humans to mentally model their behavior. If the latter is even remotely true how is it possible to adequately secure services that are not even fully comprehended by the engineering teams that built them. How do we realign the actual state of operational security measures to maintain an acceptable level of confidence that our security actually works. Security Chaos Engineering allows teams to proactively, safely discover system weakness before they disrupt business outcomes.

RSA Conference APJ 2019 DevSecOps Days Security Chaos Engineering

Aaron Rinehart

Modern systems pose a number of thorny challenges and securing the transformation from legacy monolithic systems to distributed systems demands a change in mindset and engineering toolkit. The security engineering toolkit is unfortunately out-of-style and outdated with today's approach to building, security and operating distributed systems. Distributed systems at scale have unpredictable and complex outcomes that are costly when security incidents occur. The speed, scale, and complex operations within microservice architectures make them tremendously difficult for humans to mentally model their behavior. If the latter is even remotely true how is it possible to adequately secure services that are not even fully comprehended by the engineering teams that built them. How do we realign the actual state of operational security measures to maintain an acceptable level of confidence that our security actually works.

Pivotal APJ Security Chaos Engineering

Aaron Rinehart

In this session we will cover the ‘table stakes’ or the minimum foundational components in what it means to deliver high quality secure software in today’s software driven world. From gaining visibility into the software supply chain to building empathy with engineering teams through DevSecOps practices we will dive through what it takes to play the bare minimum hand and how that contributes to improving value-velocity and faster adoption of more advanced techniques such as Chaos Engineering.

Nexus User Conference DevOps "Table Stakes": The minimum required to play the...

Aaron Rinehart

Large scale distributed systems have unpredictable and complex outcomes that are costly when security incidents occur. Security incident response today is mostly a reactive and chaotic exercise. Chaos engineering allows security incident response teams to proactively experiment on recurring incident patterns to derive new information about underlying factors that were previously unknown. What if you could flip that scenario on its head? Chaos engineering advances the security incident response framework by reversing the postmortem and preparation phase. This is done by developing live fire exercises that can be measured and managed. Contrary to red team game days, chaos engineering doesn’t use threat actor tactics, techniques, and procedures. Instead it develops teams through unique configuration, cyberthreat, and user error scenarios that challenge responders to react to events outside their playbooks and comfort zones. Join Aaron Rinehart to explore the hidden costs of security incidents, learn a new technique for uncovering system weaknesses in systems security, and more. You’ll also get a glimpse of ChaoSlingr, an open source security chaos engineering tool built and deployed within a Fortune 5 company. Aaron explains how the tool helped his team discover that many of their security controls didn’t function as intended and how, as a result, they were able to proactively improve them before they caused any real problems.

Velocity 2019 - Security Precognition 2019 Slides - San Jose 2019

Aaron Rinehart

Security incident response is a reactive and chaotic exercise. What if it were possible to flip the scenario on its head? Security focused chaos engineering takes the approach of advancing the security incident response apparatus by reversing the postmortem and preparation phases. Contrary to Purple Team or Red Team game days, Security Chaos Engineering does not use threat actor tactics, techniques and procedures. It develops teams through unique configuration, cyber threat and user error scenarios that challenge responders to react to events outside their playbooks and comfort zones. Security Chaos Engineering allows incident response and product teams to derive new information about the state of security within their distributed systems that was previously unknown. Within this new paradigm of instrumentation where we proactively conduct “Pre-Incident” vs. “Post-Incident” reviews we are now able to more accurately measure how effective our security incident response teams, tools, skills, and procedures are during the manic of the Incident Response function. In this session Aaron Rinehart, the mind behind the first Open Source Security Chaos Engineering tool ChaoSlingr, will introduce how Security Chaos Engineering can be applied to create highly secure, performant, and resilient distributed systems.

Craft 2019 - Security Chaos Engineering - Security Precognition

Aaron Rinehart

DevSecOps & Security Chaos Engineering - "Knowing the Unknown" - "Resilience is the story of the outage that didn’t happen". - John Allspaw Our systems are becoming more and more distributed, ephemeral, and immutable in how they function in today’s ever-evolving landscape of contemporary engineering practices. Not only are we becoming more complex but the rate of velocity in which our systems are now interacting, and evolving is making the work more challenging for us humans. In this shifted paradigm, it is becoming problematic to comprehend the operational state, health and safety of our systems. In this session Aaron will uncover what Chaos Engineering is, why we need it, and how it can be used as a tool for building more performant, safe and secure systems. We will uncover the importance of using Chaos Engineering in developing a learning culture through system experimentation. Lastly, we will walk through how to get started using Chaos Engineering as well as dive into how it can be applied to cyber security and other important engineering domains.

GDS-Austin - DevSecOps & Security Chaos Engineering

Aaron Rinehart

ChaoSlingr is a Security Chaos Engineering Tool focused primarily on the experimentation on AWS Infrastructure to bring system security weaknesses to the forefront. The industry has traditionally put emphasis on the importance of preventative security control measures and defense-in-depth where-as our mission is to drive new knowledge and perspective into the attack surface by delivering proactively through detective experimentation. With so much focus on the preventative mechanisms we never attempt beyond one-time or annual pen testing requirements to actually validate whether or not those controls actually are performing as designed. Our mission is to address security weaknesses proactively, going beyond the reactive processes that currently dominate traditional security models.

ChaoSlingr: Introducing Security based Chaos Testing

Aaron Rinehart

TestBed-Cyber-Security-Workshops

Aaron Rinehart

Mais de Aaron Rinehart (20)

RSA 2021 Navigating the Unknowable: Resilience through Security Chaos Enginee...

HealthConDX Virtual Summit 2021 - How Security Chaos Engineering is Changing ...

RSAC 365 2021 Virtual Summit Spotlite Presentation on Security Chaos Engineering

DevSecOps Days Istanbul 2020 Security Chaos Engineering

AllDayDevOps 2020 Aaron Rinehart Security Differently

Conf42-SRE - 2020 - "Applied Security: Crafting Secure and Resilient Distribu...

ADDO - Navigating the DevSecOps App-ocalypse 2020

AllTheTalks Security Chaos Engineering

Security Differently - DevSecOps Days Austin 2019

AllDayDevOps Security Chaos Engineering 2019

VMWare Tech Talk: "The Road from Rugged DevOps to Security Chaos Engineering"

OWASP AppSec Global 2019 Security & Chaos Engineering

RSA Conference APJ 2019 DevSecOps Days Security Chaos Engineering

Pivotal APJ Security Chaos Engineering

Nexus User Conference DevOps "Table Stakes": The minimum required to play the...

Velocity 2019 - Security Precognition 2019 Slides - San Jose 2019

Craft 2019 - Security Chaos Engineering - Security Precognition

GDS-Austin - DevSecOps & Security Chaos Engineering

ChaoSlingr: Introducing Security based Chaos Testing

TestBed-Cyber-Security-Workshops

Último

Bhosari ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For Sex At Your Doorstep Booking Contact Details WhatsApp Chat: +91-6297143586 pune Escort Service includes providing maximum physical satisfaction to their clients as well as engaging conversation that keeps your time enjoyable and entertaining. Plus they look fabulously elegant; making an impressionable. Independent Escorts pune understands the value of confidentiality and discretion - they will go the extra mile to meet your needs. Simply contact them via text messaging or through their online profiles; they'd be more than delighted to accommodate any request or arrange a romantic date or fun-filled night together. We provide - 02-may-2024(v.n)

Bhosari ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For ...

tanu pandey

22-prompt engineering noted slide shown.pdf

203318pmpc

Call girls in delhi ✔️✔️🔝 9953056974 🔝✔️✔️Welcome To Vip Escort Services In Delhi [ ]Noida Gurgaon 24/7 Open Sex Escort Services With Happy Ending ServiCe Done By Most Attractive Charming Soft Spoken Bold Beautiful Full Cooperative Independent Escort Girls ServiCe In All-Star Hotel And Home Service In All Over Delhi, Noida, Gurgaon, Faridabad, Ghaziabad, Greater Noida, • IN CALL AND OUT CALL SERVICE IN DELHI NCR • 3* 5* 7* HOTELS SERVICE IN DELHI NCR • 24 HOURS AVAILABLE IN DELHI NCR • INDIAN, RUSSIAN, PUNJABI, KASHMIRI ESCORTS • REAL MODELS, COLLEGE GIRLS, HOUSE WIFE, ALSO AVAILABLE • SHORT TIME AND FULL TIME SERVICE AVAILABLE • HYGIENIC FULL AC NEAT AND CLEAN ROOMS AVAIL. IN HOTEL 24 HOURS • DAILY NEW ESCORTS STAFF AVAILABLE • MINIMUM TO MAXIMUM RANGE AVAILABLE. Call Girls in Delhi & Independent Escort Service – CALL GIRLS SERVICE DELHI NCR Vip call girls in Delhi Call Girls in Delhi, Call Girl Service 24×7 open Call Girls in Delhi Best Delhi Escorts in Delhi Low Rate Call Girls In Saket Delhi X~CALL GIRLS IN Ramesh Nagar Metro best Delhi call girls and Delhi escort service. CALL GIRLS SERVICE IN ALL DELHI … (Delhi) Call Girls in (Chanakyapuri) Hot And Sexy Independent Model Escort Service In Delhi Unlimited Enjoy Genuine 100% Profiles And Trusted Door Step Call Girls Feel Free To Call Us Female Service Hot Busty & Sexy Party Girls Available For Complete Enjoyment. We Guarantee Full Satisfaction & In Case Of Any Unhappy Experience, We Would Refund Your Fees, Without Any Questions Asked. Feel Free To Call Us Female Service Provider Hours Opens Thanks. Delhi Escorts Services 100% secure Services.Incall_OutCall Available and outcall Services provide. We are available 24*7 for Full Night and short Time Escort Services all over Delhi NCR. Delhi All Hotel Services available 3* 4* 5* Call Call Delhi Escorts Services And Delhi Call Girl Agency 100% secure Services in my agency. Incall and outcall Services provide. We are available 24*7 for Full Night and short Time Escort Services my agency in all over New Delhi Delhi All Hotel Services available my agency SERVICES [✓✓✓] Housewife College Girl VIP Escort Independent Girl Aunty Without a Condom sucking )? Sexy Aunty.DSL (Dick Sucking Lips)? DT (Dining at the Toes English Spanking) Doggie (Sex style from no behind)?? OutCall- All Over Delhi Noida Gurgaon 24/7 FOR APPOINTMENT Call/Whatsop / 9953056974

Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service

9953056974 Low Rate Call Girls In Saket, Delhi NCR

Introduction to Serverless with AWS Lambda

Omar Fathy

FEA Based Level 3 Assessment of Deformed Tanks with Fluid Induced Loads

Arindam Chakraborty, Ph.D., P.E. (CA, TX)

Cara Menggugurkan Sperma Yang Masuk Rahim Biyar Tidak Hamil

Cara Menggugurkan Kandungan 087776558899

VIP Call Girls Palanpur 7001035870 Whatsapp Number, 24/07 Booking Escorts Service Available Whatsapp SABANA ☎️ : [+91-7001035870] Escorts Service are always ready to make their clients happy. Their exotic looks and sexy personalities are sure to turn heads. You can enjoy with them, including massages and erotic encounters. Our area Escorts are young and sexy, so you can expect to have an exotic time with them. They are trained to satiate your naughty nerves and they can handle anything that you want. They are also intelligent, so they know how to make you feel comfortable and relaxed Independent Escorts Service They know all the sex positions and can satisfy you in any way that you desire. They can even give you erotic massages to help you relax before your session. This is essential, because a man who is stressed won’t be receptive to the pleasures of sex. They also know how to play with your sexy organs, so you’ll have plenty of foreplay and cuddling. P252024SS SERVICE ✅ ❣️ ⭐➡️HOT & SEXY MODELS // COLLEGE GIRLS HOUSE WIFE RUSSIAN , AIR HOSTES ,VIP MODELS . AVAILABLE FOR COMPLETE ENJOYMENT WITH HIGH PROFILE INDIAN MODEL AVAILABLE HOTEL & HOME ★ SAFE AND SECURE HIGH CLASS SERVICE AFFORDABLE RATE ★ SATISFACTION,UNLIMITED ENJOYMENT. ★ All Meetings are confidential and no information is provided to any one at any cost. ★ EXCLUSIVE PROFILes Are Safe and Consensual with Most Limits Respected ★ Service Available In: - HOME & HOTEL Star Hotel Service .In Call & Out call SeRvIcEs : ★ A-Level (star escort) ★ Strip-tease ★ BBBJ (Bareback Blowjob)Receive advanced sexual techniques in different mode make their life more pleasurable. ★ Spending time in hotel rooms ★ BJ (Blowjob Without a Condom) ★ Completion (Oral to completion) ★ Covered (Covered blowjob Without condom ★ANAL SERVICES.

VIP Call Girls Palanpur 7001035870 Whatsapp Number, 24/07 Booking

dharasingh5698

GAS POWER CYCLES Cycles: Otto, Diesel, Dual, Brayton - Calculation of mean effective pressure - Air standard efficiency - Comparison of cycles INTERNAL COMBUSTION ENGINES Classification - Components and their function - valve timing diagram and port timing diagram - actual and theoretical p-v diagram of two stroke and four stroke engines – carburettor - diesel pump and injector system - battery and magneto ignition system - principles of combustion and detonation in CI engines - lubrication and cooling systems - performance parameters and calculations.

Thermal Engineering Unit - I & II . ppt

DineshKumar4165

Built environment is known for its capacity, capability, role, relevance and importance to change the quality of life of the occupants and communities. Presentation focuses on options which need to be leveraged to make buildings sustainable, cost-effective, energy efficient, resource efficient, qualitative over its entire life-cycle through designing, construction, operation. It calls for making buildings green and sustainable.

COST-EFFETIVE and Energy Efficient BUILDINGS ptx

JIT KUMAR GUPTA

Increased aeration of the soil; Stabilized soil structure; Higher and more diversified crop production; Better workability of the land; Earlier planting dates; Reduction of peak discharges by an increased temporary storage of water in the soil decomposition of organic matter; soil subsidence; reduced irrigation efficiency; increased risk of drought. excessive leaching of valuable nutrients from the soil; downstream environmental damage by salty or otherwise polluted drainage water; the presence of ditches, canals, and structures impending accessibility and interfering with other infrastructural elements of the land.

chapter 5.pptx: drainage and irrigation engineering

mulugeta48

This presentation takes a deep dive into the methodologies of HAZID and HAZOP, two cornerstone risk assessment techniques in the oil and gas industry. Over 12 slides, we compare the structured approaches of both HAZID and HAZOP, detail their individual steps, and discuss their benefits and drawbacks. The aim is to provide professionals with concise insight to make informed decisions about which method suits their project's needs. By the end, viewers will have understood each method's strategic value in the pursuit of workplace safety and efficiency.

Hazard Identification (HAZID) vs. Hazard and Operability (HAZOP): A Comparati...

soginsider

2016EF22_0 solar project report rooftop projects

smsksolar

Work-Permit-Receiver-in-Saudi-Aramco.pptx

JuliansyahHarahap1

Rule 1 − Check for the blocks connected in series and simplify. Rule 2 − Check for the blocks connected in parallel and simplify. Rule 3 − Check for the blocks connected in feedback loop and simplify. Rule 4 − If there is difficulty with take-off point while simplifying, shift it towards right. Rule 5 − If there is difficulty with summing point while simplifying, shift it towards left. Rule 6 − Repeat the above steps till you get the simplified form, i.e., single block.

Block diagram reduction techniques in control systems.ppt

NANDHAKUMARA10

Model Call Girl Services in Delhi reach out to us at 🔝 9953056974 🔝✔️✔️ Our agency presents a selection of young, charming call girls available for bookings at Oyo Hotels. Experience high-class escort services at pocket-friendly rates, with our female escorts exuding both beauty and a delightful personality, ready to meet your desires. Whether it's Housewives, College girls, Russian girls, Muslim girls, or any other preference, we offer a diverse range of options to cater to your tastes. We provide both in-call and out-call services for your convenience. Our in-call location in Delhi ensures cleanliness, hygiene, and 100% safety, while our out-call services offer doorstep delivery for added ease. We value your time and money, hence we kindly request pic collectors, time-passers, and bargain hunters to refrain from contacting us. Our services feature various packages at competitive rates: One shot: ₹2000/in-call, ₹5000/out-call Two shots with one girl: ₹3500/in-call, ₹6000/out-call Body to body massage with sex: ₹3000/in-call Full night for one person: ₹7000/in-call, ₹10000/out-call Full night for more than 1 person: Contact us at 🔝 9953056974 🔝. for details Operating 24/7, we serve various locations in Delhi, including Green Park, Lajpat Nagar, Saket, and Hauz Khas near metro stations. For premium call girl services in Delhi 🔝 9953056974 🔝. Thank you for considering us!

Call Now ≽ 9953056974 ≼🔝 Call Girls In New Ashok Nagar ≼🔝 Delhi door step de...

9953056974 Low Rate Call Girls In Saket, Delhi NCR

ONLINE FOOD ORDER SYSTEM is a website designed primarily for use in the food delivery industry. This system will allow hotels and restaurants to increase scope of business by reducing the labor cost involved. The system also allows to quickly and easily manage an online menu which customers can browse and use to place orders with just few clicks. Restaurant employees then use these orders through an easy to navigate graphical interface for efficient processing.

ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf

Kamal Acharya

Unleashing the Power of the SORA AI lastest leap

RishantSharmaFr

Call Girl Aurangabad Indira Call Now: 8617697112 Aurangabad Escorts Booking Contact Details WhatsApp Chat: +91-8617697112 Aurangabad Escort Service includes providing maximum physical satisfaction to their clients as well as engaging conversation that keeps your time enjoyable and entertaining. Plus they look fabulously elegant; making an impressionable. Independent Escorts Aurangabad understands the value of confidentiality and discretion - they will go the extra mile to meet your needs. Simply contact them via text messaging or through their online profiles; they'd be more than delighted to accommodate any request or arrange a romantic date or fun-filled night together. We provide –

(INDIRA) Call Girl Aurangabad Call Now 8617697112 Aurangabad Escorts 24x7

Call Girls in Nagpur High Profile Call Girls

In the dynamic landscape of energy storage, choosing the right battery pack is a critical decision that significantly impacts performance, efficiency, and overall product design. This webinar aims to unravel the complexities surrounding standard and custom battery packs (primarily lithium), providing you with a comprehensive understanding to make informed decisions. We'll embark on a journey to explore the fundamental distinctions between standard off-the-shelf battery packs and their bespoke counterparts tailored to specific applications. We will delve into the nuance of what is defined as a standard battery pack along with its benefits, limitations, and how it caters to broad market needs. Simultaneously, we will dissect the world of custom battery packs, diving into the advantages they offer in terms of precise energy requirements, form factors, and unique design considerations. Whether you are a product designer, engineer, or industry professional, this webinar is designed to equip you with the knowledge necessary to navigate the intricate terrain of battery pack selection. Join us for this webinar as we navigate through the intricacies of standard and custom battery packs, empowering you to make strategic decisions that align with your project goal. For more information on our battery pack solutions, visit https://www.epectec.com/batteries/.

Standard vs Custom Battery Packs - Decoding the Power Play

Epec Engineered Technologies

Call Girl Meerut Indira Call Now: 8617697112 Meerut Escorts Booking Contact Details WhatsApp Chat: +91-8617697112 Meerut Escort Service includes providing maximum physical satisfaction to their clients as well as engaging conversation that keeps your time enjoyable and entertaining. Plus they look fabulously elegant; making an impressionable. Independent Escorts Meerut understands the value of confidentiality and discretion - they will go the extra mile to meet your needs. Simply contact them via text messaging or through their online profiles; they'd be more than delighted to accommodate any request or arrange a romantic date or fun-filled night together. We provide –

(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7

Call Girls in Nagpur High Profile Call Girls

Does 2018 presentation rinehart - how to train your dragons

1. How to Train Your Dragons to Code “Transformation Success by Teaching your Security Team to Code” @aaronrinehart

2. Aaron Rinehart Chief Security Architect UnitedHealth Group Contact Info Rinehart.Aaron@gmail.com @aaronrinehart 2

3. • Fortune 5 Company • 380+ Companies & Growing • 28,000+ Developers • 8,000+ Applications • Highly Regulated • Diverse Technology Portfolio • Security Testing: Mostly Human Driven • Cloud Journey: Mixed The Challenge: We are Large & Complex • Largest Private HealthCare Company in World • 1000+ Security Professionals • Multinational Business • Some DevOps • Waterfall, Agile, & Others

4. Digital Transformation at a Healthcare Giant

5. Why the Need for “Bold Change”

6. The Need for Bold Moves

7. The Art of the Possible

8. Security can driven transformation

9. Gauntlt

10. InSpec

11. 2.5 years later

12. How do we continue change the direction of the Titanic?

13. The Need for More Bold Moves

14. The Case for Open Source

15. 1st SRE @ United Health Group Patrick Bergstrom

16. Chaos Engineering For Security???

17. 1st Open Source Project for UnitedHealth Group

18. Another Bold Move

19. 19 An Open Source Tool

20. • ChatOps Integration • Configuration-as-Code • Example Code & Open Framework ChaoSlingr Product Features • Serverless App in AWS • 100% Native AWS • Configurable Operational Mode & Frequency • Opt-In | Opt-Out Model

21. Pulling the Titanic Forward 2018

22. What’s Next

23. Skills Shortage

24. Teaching Software Engineers Security???

25. or...

26. Teaching Security Engineers Software Engineering

27. Empathy is a 2-way Street

28. A Simple & Free Python Course

29. Why not?

30. Awesome Returns

31. So many former programmers

32. Firewall API