My talk from Velocity 2015 discussing how DevOps reduces risk and improves security

1. @atseitlin
Fast, Reliable, Secure
May 27, 2015

2. 2@atseitlin
About me
• Partner @ Scale Venture Partners
• Operations & Cloud Engineering @ Netflix
• Founder CTOWorks
• Engineering / Products / Technology @ Startups (5-150 people)
• Engineering @ Siebel Systems / Oracle Corp
• UC Berkeley CS / Wharton MBA (Finance & Marketing)

3. 3@atseitlin
About Scale Venture Partners
• >$1B total under management
• Spring 2013, ScaleVP IV, L.P., $300M
• Early-in-revenue enterprise software companies
• SaaS and Cloud Infrastructure
• Aviso, Agari, Box, BrightRoll, Chef, Crittercism, DataStax, Demandbase,
DocuSign, ExactTarget, HubSpot, PubNub and RingCentral

4. 4@atseitlin
Who cares
about DevOps?

5. 5@atseitlin

6. 6@atseitlin
Everything-as-a-Service
Alphabet soup
• IaaS
• PaaS
• DaaS
• mBaaS
• SBS
• …
All started with SaaS
With great power comes great responsibility
(Consumer web companies figured this out long ago)

7. 7@atseitlin
Competition
Software is a at the core of every business, not just
software companies
Ability to deliver software to market quickly is a competitive
advantage

8. 8@atseitlin
DevOps
Accelerating Pace of Innovation
Rate of Innovation
Quality
Cloud

9. 9@atseitlin
What is
DevOps?

10. 10@atseitlin
DevOps Core Components
1. Self-service / Decentralization
2. Automation
3. Collaboration

11. 11@atseitlin
Software Lifecycle
Develop
Test
Deploy
Operate

12. 12@atseitlin
Continuous Delivery
Replace manual release processes with automation
Forcing function for continuous improvement

13. 13@atseitlin
Netflix API Continuous Delivery pipeline
* Sangeeta Narayanan, Move Fast;Stay Safe:Developing & Deploying the Netflix API
http://www.slideshare.net/SangeetaNarayanan/move-faststay-safedeveloping-deploying-
the-netflix-api

14. 14@atseitlin
The Good
&
The Bad

15. 15@atseitlin
Pros & Cons
Investment into tooling and automation
Change in culture & org
Higher risk
Increased engineering velocity
Faster rate of innovation
Improved security
Increased availability
?

16. 16@atseitlin
What is Risk?

17. 17@atseitlin
Modeling the future

18. 18@atseitlin
More formally

19. 19@atseitlin
Another definition
A weighted probability distribution of negative events
Risk = Likelihood of adverse event
X
Impact of event

20. 20@atseitlin
Sources of risk in software
• Software bugs
• Infrastructure failure
• Dependency failure
• Capacity
• Operator error
• Malicious attack

21. 21@atseitlin
DevOps
Reduces Risk!
Likelihood of adverse event
X
Impact of event

22. 22@atseitlin
Risk reduces because…
Likelihood decreases
• Higher velocity = faster recovery
• Higher velocity = faster patches
• Fewer changes per deployments
• Less time between deployments
(time is the greatest enemy of
causality)
• More context in operations
• Resilient design reduces impact of
dependency and infrastructure
failures
Impact decreases
• Testing frequency increases to
every checkin
• Greater coverage with automation
• Instant process improvement
through automation, auditable and
repeatable
• More automation = less operator
error
• Security & stress testing part of
code delivery

23. 23@atseitlin
Summary
Software is becoming ubiquitous,
delivered as an always-on service,
and is at the heart of enabling business innovation.
Every organizations is looking for ways to accelerate innovation.
DevOps accelerates innovation while reducing risk and improving security.

24. 24@atseitlin
Q & A
Questions?
You can reach me at
 ariel@scalevp.com
 www.linkedin.com/in/atseitlin
 @atseitlin