Le tue app sono pronte per il cloud? Rivolgiti al caf!Marco Dal Pino
Le nostre applicazioni on premise hanno bisogno di diventare piu' rapide? Scalabili? Offrire servizi innovativi? La via da intraprendere e' ovviamente il Cloud, ma migrare non e' certo una cosa semplice o da improvvisare. Il Microsoft Cloud Adoption Framework (CAF) offre molti strumenti per aiutare la tua azienda a migrare infrastrutture e applicazioni nel cloud rispettando tempistiche e opportunita' caso per caso. Vediamo come affrontare questi scenari in una sessione molto interattiva.
As presented to the Milwaukee Alt.Net group on November 21st, 2011.
UPDATE April 19, 2012: added some domain logic organization slides using Fowler's 4 basic patterns.
SiriusCon 2017 - Industrialize your Sirius-based solution: the steps and toolsObeo
In this talk we will explain and illustrate how to successfully deploy industrial-strength modeling workbenches based on Sirius.
In particular, we will show the steps and tools necessary to create industrial-grade modeling tools: from testing to continuous integration, including source versioning.
Intro to Platform9: Private Clouds Made EasyPlatform9
Private cloud adoption is growing, but it’s not without its challenges. Private clouds can be difficult to deploy and manage, often requiring specialized staff and skill sets.
In this webinar, Cody Hill, systems engineer at Platform9 (formerly lead cloud architect at GE) discusses what’s driving private cloud adoption and what Platform9 is doing to make it easy. In this presentation you will learn:
* the benefits of a private cloud
* Get technical overview of how Platform9 works
* customer stories and use cases
* learn about the Platform9 SaaS experience for cloud admins, architects and users
Le tue app sono pronte per il cloud? Rivolgiti al caf!Marco Dal Pino
Le nostre applicazioni on premise hanno bisogno di diventare piu' rapide? Scalabili? Offrire servizi innovativi? La via da intraprendere e' ovviamente il Cloud, ma migrare non e' certo una cosa semplice o da improvvisare. Il Microsoft Cloud Adoption Framework (CAF) offre molti strumenti per aiutare la tua azienda a migrare infrastrutture e applicazioni nel cloud rispettando tempistiche e opportunita' caso per caso. Vediamo come affrontare questi scenari in una sessione molto interattiva.
As presented to the Milwaukee Alt.Net group on November 21st, 2011.
UPDATE April 19, 2012: added some domain logic organization slides using Fowler's 4 basic patterns.
SiriusCon 2017 - Industrialize your Sirius-based solution: the steps and toolsObeo
In this talk we will explain and illustrate how to successfully deploy industrial-strength modeling workbenches based on Sirius.
In particular, we will show the steps and tools necessary to create industrial-grade modeling tools: from testing to continuous integration, including source versioning.
Intro to Platform9: Private Clouds Made EasyPlatform9
Private cloud adoption is growing, but it’s not without its challenges. Private clouds can be difficult to deploy and manage, often requiring specialized staff and skill sets.
In this webinar, Cody Hill, systems engineer at Platform9 (formerly lead cloud architect at GE) discusses what’s driving private cloud adoption and what Platform9 is doing to make it easy. In this presentation you will learn:
* the benefits of a private cloud
* Get technical overview of how Platform9 works
* customer stories and use cases
* learn about the Platform9 SaaS experience for cloud admins, architects and users
High Performance Continuous Delivery - Versioning and Release Management AlignedPerforce
Perforce presented at QCon London 2015.
"This session will review the key requirements for optimising the pipeline from developer's desktop to the customer. Using example case studies, including experience of implementing CD at Perforce, Sven Erik Knop will provide actionable guidance on how to improve your development and release processes, particularly when using Jenkins"
Building Cloud-Native Applications with OpenStack Platform9
Lately, the industry has been filled with talk regarding building cloud-native applications. But what does it mean to build cloud-native applications and how should users approach this changing world? In this webinar, we will provide a better understanding of makes cloud-native application different than more traditional applications. We will also review how you can begin preparing your IT infrastructure for hosting cloud-native applications. Among the technologies we will cover that is part of this cloud-native world include:
- OpenStack
- Docker
- CoreOS
- Kubernetes
- Zookeeper
Interested in how you can get a Private Cloud solution that just works efficiently? With Platform9 and Solidfire, users can get the self-service automation of OpenStack combined with the incredible speed of flash storage. Learn more here!
During this first session I will present a step-by-step scenario which leads me to create a modeling tool for a Mindstorms Robot. This tool will allow users to define the choreography of a robot: moving forward, rotating, grabin or releasing objects.
From the specification of a dedicated metamodel to the creation of custom graphical editors, including properties views and advanced edition tools, you will see concretely the main stages of a Sirius-based modeling tool's inception.
Domain Driven Design with Onion Architecture is a powerful combination of Architecture Patterns that can dramatically improve code quality and can help you learn a great deal about writing "clean" code.
VMware Private Clouds: Charting a path to successPlatform9
In this webinar, Madhura Maskasky, VP Product, Platform9 presents:
- Business drivers for building a private cloud - specifically with existing VMware resources
- Technical comparison between VMware vRealize and Platform9
- How a managed private cloud fits in the customer’s IT environment today
Introduction To Angular.js - SpringPeopleSpringPeople
Angular.JS is quickly becoming the dominant JavaScript framework for professional web development. This quick 3 minute introduction will brief you about Angular.js
Improving Mobile UX with Apache DeviceMap - Werner Keil - Codemotion Rome 2015Codemotion
Codemotion Rome 2015 - We experience a growing number of mobile phones, tablets, phablets, smart TV and similar devices flooding the market almost every day. If you want to create a comfortable user experience you need dynamic content according to hardware and browser of your device. That’s the reason for Device Description Repositories (DDR). Apache DeviceMap started in January 2012, after OpenDDR contributed data and APis. It graduated from Apache Incubator November 2014. Next steps include an improved data format, maintenance of device data by the community via common API based on REST/OAuth and XML or JSON.
Measure and Increase Developer Productivity with Help of Serverless at AWS Co...Vadym Kazulkin
The goal of Serverless is to focus on writing the code that delivers business value and offload everything else to your trusted partners (like Cloud providers or SaaS vendors). You want to iterate quickly and today’s code quickly becomes tomorrow’s technical debt. In this talk we will show why Serverless adoption increases the developer productivity and how to measure it. We will also go through AWS Serverless architectures where you only glue together different Serverless managed services relying solely on configuration, minimizing the amount of the code written.
Tampere Docker meetup - Happy 5th Birthday DockerSakari Hoisko
Part of official docker meetup events by Docker Inc.
https://events.docker.com/events/docker-bday-5/
Meetup event:
https://www.meetup.com/Docker-Tampere/events/248566945/
Application Virtualization, University of New HampshireTony Austwick
Presentation to EDUCAUSE, NERCOMP by David Blezzard from University of New Hampshire.
More here http://www.educause.edu/nercomp-annual-conference/2016/2016/streamlining-application-deployment-and-management-through-virtualization
We will report how using the Application Jukebox application virtualization solution at the University of New Hampshire has saved time and simplified management of public and department-specific computer labs and our VDI environment. Traditionally, we used a combination of imaging and then various scripted deployments to install applications. With application virtualization, we have been able to move over a hundred Windows applications into virtual packages that can be "installed" by users on demand. We will discuss the general problem of managing large numbers of complex applications across a range of computer environments while also trying to be flexible and responsive to users.
Outcomes: Understand how application virtualization can overcome issues with deploying software * Appreciate the capabilities of Application Jukebox to be able to assess its utility to your campus * Obtain a model for evaluating a tool's potential savings
Docker & aPaaS: Enterprise Innovation and Trends for 2015WaveMaker, Inc.
WaveMaker Webinar: Cloud-based App Development and Docker: Trends to watch out for in 2015 - http://www.wavemaker.com/news/webinar-cloud-app-development-and-docker-trends/
CIOs, IT planners and developers at a growing number of organizations are taking advantage of the simplicity and productivity benefits of cloud application development. With Docker technology, cloud-based app development or aPaaS (Application Platform as a Service) is only becoming more disruptive − forcing organizations to rethink how they handle innovation, time-to-market pressures, and IT workloads.
Deployment Automation for Hybrid Cloud and Multi-Platform EnvironmentsIBM UrbanCode Products
Today, competitive advantage is often driven by software. The business that can deploy solutions to their customers more quickly across a range of platforms, with the flexibility to continuously delivery new functionality, is poised to succeed. DevOps enables organizations to manage complex enterprise applications that are hybrid in nature - often with cloud or mobile components being fed by data from traditional back-end systems like databases or mainframes.
This eSeminar explores hybrid cloud use cases, along with solutions that equip businesses to deliver value to their customers with speed, quality, and security.
Amazon Web Services and PaaS - Enterprise Java for the Cloud Era? - Mark Pric...jaxconf
The extraordinary growth of Java during the last decade owed everything to the set of infrastructure services that application servers provided as part of the platform. However, TCO eventually drove the move to the cloud and PaaS (Platform as a Service) is set to deliver a standard run-time for the next generation of applications, replacing the proprietary infrastructure provided by the application server vendors. Now the question is: where do developers of real-world business applications look for a common set of standard infrastructure services? Is there a common framework that can provide essential application services, such as message queueing, push notifications, email integration, in-memory caching and processing? Amazon Web Services (AWS) with their highly-scaleable IaaS (Infrastructure as a Service) model are an obvious answer, but how best to combine Java's rich ecosystem of tools, frameworks and knowledge with the scale and cost-effectiveness of cloud-based web services? This session will help you to understand how you can deliver applications that make effective use of those services by using a Java PaaS, without being forced to support the underlying infrastructure. In this code-rich session, aimed at architects and developers, Mark Prichard of CloudBees will show how you can: Pass Amazon security credentials and configuration parameters to PaaS applications at run-time to provide customized environments; use JDBC and Amazon RDS (Relational Data Service) to provide resilient and performant relational data servicesReplace JMS queues and topics with Amazon SQS (Simple Queue Service) and SNS (Simple Notification Service) to develop cloud-based messaging applications; use Amazon's SES (Simple Email Service) from Java applications. We'll also look at other cloud e-mail services that offer easy integration with the PaaS modelRun distributed caching solutions in the cloud using Amazon ElastiCache's in-memory distributed caching with Java PaaS deployments.
Measure and Increase Developer Productivity with Help of Serverless at JCON 2...Vadym Kazulkin
The goal of Serverless is to focus on writing the code that delivers business value and offload everything else to your trusted partners (like Cloud providers or SaaS vendors). You want to iterate quickly and today’s code quickly becomes tomorrow’s technical debt. In this talk we will show why Serverless adoption increases the developer productivity and how to measure it. We will also go through AWS Serverless architectures where you only glue together different Serverless managed services relying solely on configuration, minimizing the amount of the code written.
High Performance Continuous Delivery - Versioning and Release Management AlignedPerforce
Perforce presented at QCon London 2015.
"This session will review the key requirements for optimising the pipeline from developer's desktop to the customer. Using example case studies, including experience of implementing CD at Perforce, Sven Erik Knop will provide actionable guidance on how to improve your development and release processes, particularly when using Jenkins"
Building Cloud-Native Applications with OpenStack Platform9
Lately, the industry has been filled with talk regarding building cloud-native applications. But what does it mean to build cloud-native applications and how should users approach this changing world? In this webinar, we will provide a better understanding of makes cloud-native application different than more traditional applications. We will also review how you can begin preparing your IT infrastructure for hosting cloud-native applications. Among the technologies we will cover that is part of this cloud-native world include:
- OpenStack
- Docker
- CoreOS
- Kubernetes
- Zookeeper
Interested in how you can get a Private Cloud solution that just works efficiently? With Platform9 and Solidfire, users can get the self-service automation of OpenStack combined with the incredible speed of flash storage. Learn more here!
During this first session I will present a step-by-step scenario which leads me to create a modeling tool for a Mindstorms Robot. This tool will allow users to define the choreography of a robot: moving forward, rotating, grabin or releasing objects.
From the specification of a dedicated metamodel to the creation of custom graphical editors, including properties views and advanced edition tools, you will see concretely the main stages of a Sirius-based modeling tool's inception.
Domain Driven Design with Onion Architecture is a powerful combination of Architecture Patterns that can dramatically improve code quality and can help you learn a great deal about writing "clean" code.
VMware Private Clouds: Charting a path to successPlatform9
In this webinar, Madhura Maskasky, VP Product, Platform9 presents:
- Business drivers for building a private cloud - specifically with existing VMware resources
- Technical comparison between VMware vRealize and Platform9
- How a managed private cloud fits in the customer’s IT environment today
Introduction To Angular.js - SpringPeopleSpringPeople
Angular.JS is quickly becoming the dominant JavaScript framework for professional web development. This quick 3 minute introduction will brief you about Angular.js
Improving Mobile UX with Apache DeviceMap - Werner Keil - Codemotion Rome 2015Codemotion
Codemotion Rome 2015 - We experience a growing number of mobile phones, tablets, phablets, smart TV and similar devices flooding the market almost every day. If you want to create a comfortable user experience you need dynamic content according to hardware and browser of your device. That’s the reason for Device Description Repositories (DDR). Apache DeviceMap started in January 2012, after OpenDDR contributed data and APis. It graduated from Apache Incubator November 2014. Next steps include an improved data format, maintenance of device data by the community via common API based on REST/OAuth and XML or JSON.
Measure and Increase Developer Productivity with Help of Serverless at AWS Co...Vadym Kazulkin
The goal of Serverless is to focus on writing the code that delivers business value and offload everything else to your trusted partners (like Cloud providers or SaaS vendors). You want to iterate quickly and today’s code quickly becomes tomorrow’s technical debt. In this talk we will show why Serverless adoption increases the developer productivity and how to measure it. We will also go through AWS Serverless architectures where you only glue together different Serverless managed services relying solely on configuration, minimizing the amount of the code written.
Tampere Docker meetup - Happy 5th Birthday DockerSakari Hoisko
Part of official docker meetup events by Docker Inc.
https://events.docker.com/events/docker-bday-5/
Meetup event:
https://www.meetup.com/Docker-Tampere/events/248566945/
Application Virtualization, University of New HampshireTony Austwick
Presentation to EDUCAUSE, NERCOMP by David Blezzard from University of New Hampshire.
More here http://www.educause.edu/nercomp-annual-conference/2016/2016/streamlining-application-deployment-and-management-through-virtualization
We will report how using the Application Jukebox application virtualization solution at the University of New Hampshire has saved time and simplified management of public and department-specific computer labs and our VDI environment. Traditionally, we used a combination of imaging and then various scripted deployments to install applications. With application virtualization, we have been able to move over a hundred Windows applications into virtual packages that can be "installed" by users on demand. We will discuss the general problem of managing large numbers of complex applications across a range of computer environments while also trying to be flexible and responsive to users.
Outcomes: Understand how application virtualization can overcome issues with deploying software * Appreciate the capabilities of Application Jukebox to be able to assess its utility to your campus * Obtain a model for evaluating a tool's potential savings
Docker & aPaaS: Enterprise Innovation and Trends for 2015WaveMaker, Inc.
WaveMaker Webinar: Cloud-based App Development and Docker: Trends to watch out for in 2015 - http://www.wavemaker.com/news/webinar-cloud-app-development-and-docker-trends/
CIOs, IT planners and developers at a growing number of organizations are taking advantage of the simplicity and productivity benefits of cloud application development. With Docker technology, cloud-based app development or aPaaS (Application Platform as a Service) is only becoming more disruptive − forcing organizations to rethink how they handle innovation, time-to-market pressures, and IT workloads.
Deployment Automation for Hybrid Cloud and Multi-Platform EnvironmentsIBM UrbanCode Products
Today, competitive advantage is often driven by software. The business that can deploy solutions to their customers more quickly across a range of platforms, with the flexibility to continuously delivery new functionality, is poised to succeed. DevOps enables organizations to manage complex enterprise applications that are hybrid in nature - often with cloud or mobile components being fed by data from traditional back-end systems like databases or mainframes.
This eSeminar explores hybrid cloud use cases, along with solutions that equip businesses to deliver value to their customers with speed, quality, and security.
Amazon Web Services and PaaS - Enterprise Java for the Cloud Era? - Mark Pric...jaxconf
The extraordinary growth of Java during the last decade owed everything to the set of infrastructure services that application servers provided as part of the platform. However, TCO eventually drove the move to the cloud and PaaS (Platform as a Service) is set to deliver a standard run-time for the next generation of applications, replacing the proprietary infrastructure provided by the application server vendors. Now the question is: where do developers of real-world business applications look for a common set of standard infrastructure services? Is there a common framework that can provide essential application services, such as message queueing, push notifications, email integration, in-memory caching and processing? Amazon Web Services (AWS) with their highly-scaleable IaaS (Infrastructure as a Service) model are an obvious answer, but how best to combine Java's rich ecosystem of tools, frameworks and knowledge with the scale and cost-effectiveness of cloud-based web services? This session will help you to understand how you can deliver applications that make effective use of those services by using a Java PaaS, without being forced to support the underlying infrastructure. In this code-rich session, aimed at architects and developers, Mark Prichard of CloudBees will show how you can: Pass Amazon security credentials and configuration parameters to PaaS applications at run-time to provide customized environments; use JDBC and Amazon RDS (Relational Data Service) to provide resilient and performant relational data servicesReplace JMS queues and topics with Amazon SQS (Simple Queue Service) and SNS (Simple Notification Service) to develop cloud-based messaging applications; use Amazon's SES (Simple Email Service) from Java applications. We'll also look at other cloud e-mail services that offer easy integration with the PaaS modelRun distributed caching solutions in the cloud using Amazon ElastiCache's in-memory distributed caching with Java PaaS deployments.
Measure and Increase Developer Productivity with Help of Serverless at JCON 2...Vadym Kazulkin
The goal of Serverless is to focus on writing the code that delivers business value and offload everything else to your trusted partners (like Cloud providers or SaaS vendors). You want to iterate quickly and today’s code quickly becomes tomorrow’s technical debt. In this talk we will show why Serverless adoption increases the developer productivity and how to measure it. We will also go through AWS Serverless architectures where you only glue together different Serverless managed services relying solely on configuration, minimizing the amount of the code written.
Cloud and agile software projects: Overview and BenefitsGuillaume Berche
Slides from the session "Cloud and agile software projects: Overview and Benefits" at Agile Grenoble 2014, co presented by Guillaume Berche and Alain Delafosse.
http://agile-grenoble.org/
Enabling Fast IT using Containers, Microservices and DAVROS models: an overviewCisco DevNet
A session in the DevNet Zone at Cisco Live, Berlin. As IT strives to become Fast IT, application architectures are undergoing fundamental disruption to enable faster development to deployment lifecycles. As part of this trend, the number of applications being created using microservices architectures and container technologies like Docker is exploding. This new "cloud native" framework makes deployments on-prem or public cloud seamless. In this session, we will look at these evolving trends and how several open source technologies have converged to provide enterprises the ability to innovate at unprecedented levels.
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionAggregage
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
PHP Frameworks: I want to break free (IPC Berlin 2024)Ralf Eggert
In this presentation, we examine the challenges and limitations of relying too heavily on PHP frameworks in web development. We discuss the history of PHP and its frameworks to understand how this dependence has evolved. The focus will be on providing concrete tips and strategies to reduce reliance on these frameworks, based on real-world examples and practical considerations. The goal is to equip developers with the skills and knowledge to create more flexible and future-proof web applications. We'll explore the importance of maintaining autonomy in a rapidly changing tech landscape and how to make informed decisions in PHP development.
This talk is aimed at encouraging a more independent approach to using PHP frameworks, moving towards a more flexible and future-proof approach to PHP development.
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdfPaige Cruz
Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack.
While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack.
I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:
UiPath Test Automation using UiPath Test Suite series, part 5DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
Pushing the limits of ePRTC: 100ns holdover for 100 daysAdtran
At WSTS 2024, Alon Stern explored the topic of parametric holdover and explained how recent research findings can be implemented in real-world PNT networks to achieve 100 nanoseconds of accuracy for up to 100 days.
Climate Impact of Software Testing at Nordic Testing DaysKari Kakkonen
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
GridMate - End to end testing is a critical piece to ensure quality and avoid...ThomasParaiso2
End to end testing is a critical piece to ensure quality and avoid regressions. In this session, we share our journey building an E2E testing pipeline for GridMate components (LWC and Aura) using Cypress, JSForce, FakerJS…
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...SOFTTECHHUB
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
Threats to mobile devices are more prevalent and increasing in scope and complexity. Users of mobile devices desire to take full advantage of the features
available on those devices, but many of the features provide convenience and capability but sacrifice security. This best practices guide outlines steps the users can take to better protect personal devices and information.
Dr. Sean Tan, Head of Data Science, Changi Airport Group
Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.
Securing your Kubernetes cluster_ a step-by-step guide to success !KatiaHIMEUR1
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties – USA
Expansion of bot farms – how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks – Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
5. A Brief History of Time
• I’ve been writing CI/CD Pipelines for over a decade.
• Before the Cloud
– Application builds and packaging
• Automating application build/packaging became standard
• Deployments sometimes automated / sometimes not
– OPS handled deployments – often manually
– Releases required bureaucracy and constrained by schedules
• After the cloud
– OPS decentralized – DevOps teams formed
– Everything is (or can be) code now
– Application developers increasingly responsible for application infrastructure too
• Instances / Virtual Machines
• Content Delivery Network (CDN) deployments
• Serverless function development/deployment
• Database design/management too
– CI/CD Pipelines augmented to handle application infrastructure too
6. Deja Vu
• Cloud deployment pipelines look the same after a while
– Like build automation before it
• Coding patterns have developed for application infrastructure
and releases
– Just like application code for any programming language
7. Cloud Pattern Categories
• Build Patterns
– Creating deployable artifacts from source code
• Docker Images
• Java → Wars/Ears
• Python packages
• Application Release Patterns
– Making deployable artifacts available to end users
• Infrastructure Patterns
– Creating/maintaining infrastructure used/needed by applications
8. What is a Pattern?
• Elements of a Software Pattern
– Problem Statement
• Sometimes called “Intent”
– Example(s) of the problem
– Applicability Statement
• When to use this pattern
– Structure
• Algorithm used by the pattern
– Consequences
• Advantages / Disadvantages
• Limitations
10. Application Deployment Pipeline Patterns
• Application Deployment Pipeline Patterns
– Make build pipeline output available to end users
• Docker images, Java Wars/Ears, Python Packages, etc.
– Many require cloud (any vendor)
– Can be implemented using any CI/CD deployment software
• Jenkins, Bamboo, Azure DevOps, AWS Code* products
– Just like GoF patterns that can be implemented in any programming language
• The Pattern List
– Spray and Pray (All at Once)
– Rolling Updates
– Blue/Green
– Canary
11. Spray and Pray (All at Once)
• Problem Statement
• An application release needs to be made
available to users
• An Example
• An internal web application used for company
profitability analysis
12. Rolling Updates
• Problem Statement
• An application release needs to
be made available to users
without downtime to users
• An Example
• multiple (highly available) node
deployment -- any technical
stack
• Mobile application for Fast Food
franchiser
• AWS Elastic Beanstalk
13. Blue / Green
• Problem Statement
• An application release needs to be
made available to users without
downtime to users and minimizing
rollback time
• An Example
• Mobile consumer banking
application suite
• Large bank with US presence
• High Availability a must
• Customer outages must be
eliminated at all costs
• Ability to quickly rollback at
the first sign of trouble
14. Canary
• Problem Statement
• An application release is "tested"
in production by releasing it at
first to a smaller percentage of
users
• An Example
• Mobile consumer banking
application suite