Guidelines for mere mortals. These are a collection of guidelines picked up in the field... hopefully they would help developers and SREs building or modernizing apps ensuring the highest level of availability to their applications.
KubeCon/Cloud Native Keynote December 2017Dianne Marsh
What is the relationship between Tools and Culture? This keynote from KubeCon/Cloud Native Con 2017 explores that topic, using Spinnaker and Netflix culture as a case study.
Learn how AutoScout24 are building their Autobahn in the cloud to become the market leader in Europe's vehicle classified business.
Reinventing themselves by making a radical transition from monoliths to microservices, from .NET on Windows to Scala on Linux, from data center to AWS and from built by devs and run by ops to a devops mindset.
This talk gives a high level overview of our cultural changes, our strategic goals and our architectural principles. That includes our approach, where autonomous, empowered teams continuously deliver services into AWS and are responsible to operate them.
Borrowed some slides from Simon Hohenadl (http://www.slideshare.net/SimonHohenadl) and Matthias Patzak (http://www.slideshare.net/MatthiasPatzak)
Symantec’s Avoiding the Hidden Costs of Cloud 2013 Survey found more than 90 percent of all organizations are at least discussing cloud, up from 75 percent a year ago. Other key survey findings showed enterprises and SMBs are experiencing escalating costs tied to rogue cloud use, complex backup and recovery, and inefficient cloud storage.
KubeCon/Cloud Native Keynote December 2017Dianne Marsh
What is the relationship between Tools and Culture? This keynote from KubeCon/Cloud Native Con 2017 explores that topic, using Spinnaker and Netflix culture as a case study.
Learn how AutoScout24 are building their Autobahn in the cloud to become the market leader in Europe's vehicle classified business.
Reinventing themselves by making a radical transition from monoliths to microservices, from .NET on Windows to Scala on Linux, from data center to AWS and from built by devs and run by ops to a devops mindset.
This talk gives a high level overview of our cultural changes, our strategic goals and our architectural principles. That includes our approach, where autonomous, empowered teams continuously deliver services into AWS and are responsible to operate them.
Borrowed some slides from Simon Hohenadl (http://www.slideshare.net/SimonHohenadl) and Matthias Patzak (http://www.slideshare.net/MatthiasPatzak)
Symantec’s Avoiding the Hidden Costs of Cloud 2013 Survey found more than 90 percent of all organizations are at least discussing cloud, up from 75 percent a year ago. Other key survey findings showed enterprises and SMBs are experiencing escalating costs tied to rogue cloud use, complex backup and recovery, and inefficient cloud storage.
App Dev in the Cloud: Not my circus, not my monkeys...Eric D. Schabell
When faced with all the hype around Cloud, most application developers are not really all that excited. Maybe you get that feeling that it isn't your problem, just leave me to my applications. Let me show you why, as an application developer, you can't ignore your Cloud stack anymore.
We will examine your Cloud stack anxieties and provide you with a solutions to ease you into your first private PaaS on your own local machine that you can install in just minutes. Finally you will be given a myriad of examples to take home with you to take control of this circus and own the monkeys!
http://www.schabell.org/2016/12/codemotion-rome-2017-app-dev-in-cloud-monkeys.html
The good, the bad, and the ugly of migrating hundreds of legacy applications ...Josef Adersberger
Wir haben bei der Allianz innerhalb von 17 Monaten eine Container Plattform in der Public Cloud aufgebaut und in einem ersten Schritt 144 Java Legacy Anwendungen cloud-ready gemacht und dorthin migriert. Im Vortrag zeigen wir, was dabei unsere Erfolgsrezepte und größten Hindernisse waren. Es geht dabei unter anderen darum, wie man eine große Anwendungslandschaft auf ihre Cloud-Readiness hin analysiert und wie man eine industrialisierte Migration von Anwendungen auf eine Cloud Plattform etabliert.
The new stack isn’t a stack: Fragmentation and terraforming the service layerDonnie Berkholz
Open source, cloud, and the API revolution have already
changed the way we build software. What's next? Donnie's spent the past 5 years trying to figure that out through observation and research at RedMonk and now at 451 Research. In this talk, he'll share what he's seen and what he predicts for the future of how we develop applications. You'll hear buzzwords like DevOps and microservices used in ways that actually make sense (for a change), see real-world examples of companies that have succeeded and failed, and learn how approaches like the one taken by HashiCorp's Terraform (by the authors of Vagrant) will be critical to the future of how we build software.
Building Microservices in the cloud - GOTO Nights Berlin 2016Christian Deger
Fed up with stop and go in your data center? Why not shift into overdrive and pull into the fast lane? Learn how AutoScout24 are building their Autobahn in the cloud to become the market leader in Europe's vehicle listings business.
Reinventing themselves by making a radical transition from monoliths to microservices, from .NET on Windows to Scala on Linux, from data center to AWS and from built by devs and run by ops to a devops mindset.
While the current stack keeps running, ever more microservices will go live as you listen to stories from the trenches.
Key takeaways from this talk include: How to...
… become cloud native
… evolve the architecture
… create “you build it you run it” teams
… align with principles
TWISummit 2019 - Embracing a Service MeshThoughtworks
Does your Microservices setup actually benefit you? Or are you bogged down with managing the network operations, observability, release management and more? A Service Mesh can actually help reduce operational complexity and manage your microservices better.
Digital foundations - Paving the road to cloud solutionsEric D. Schabell
When building anything substantial, such as a house or bridge, you start by laying down a solid foundation.
Nothing changes this aspect of building brick by brick when you move from traditional constructions to application development and architecting your supporting infrastructure. Throw in Cloud terminology and you might think that the principles of a solid foundation are a bit flighty, but nothing is further from the truth.
The path to your cloud solutions lays paved with open technologies and here is why.
(Article: http://www.schabell.org/2017/02/digital-foundations-paving-road-to-cloud-solutions.html)
Building Microservices in the cloud - Software Architecture Summit 2016Christian Deger
Learn how AutoScout24 are building their Autobahn in the cloud to become the market leader in Europe's vehicle classified business.
Reinventing themselves by making a radical transition from monoliths to microservices, from .NET on Windows to Scala on Linux, from data center to AWS and from built by devs and run by ops to a devops mindset.
While the current stack keeps running, ever more microservices will go live as you listen to stories from the trenches.
Key takeaways from this talk includes: How to...
… become cloud native
… evolve the architecture
… create “you build it you run it” teams
… involve business people in the transformation
Borrowed some slides from Simon Hohenadl (http://www.slideshare.net/SimonHohenadl) and Matthias Patzak (http://www.slideshare.net/MatthiasPatzak)
Nab 2017 a journey to the future of cloud-native media micro-services - was...Washington Cabral
The impact of digital transformation on media
and entertainment (M&E) sector is reshaping traditional
media services and the way solution vendors think, design
and market their products. Audience consuming habits shifts
from traditional, linear viewing hours, to pervasive, any time,
any device, any location patterns, broadcasters find
themselves on a hard track to keep up their infrastructure
with a consumption model that defies both operational and
business models.
Solution vendors are already adapting themselves to
this new reality. An increasing number of cloud based
solutions offerings are the current stage of a transformation
journey that started on traditional, purpose specific
components, migrating to software based solution running
Commercial Off-the-shelf (COTS) hardware, now are
leveraging the advantages from cloud economy of scale to
cope with diverse business and media consumption models
that arises.
The next stage of this digital transformation is the scope
of this paper. Shape the foreseeable future of media services
under the light of micro-services and serverless
architectures. Through a set of reference models and
conceptual architectures, this paper explains the journey to
achieve a cloud-native media micro-services.
The development of a product from the point of view of a technician, starting from the concept, passing to the minimum viable till a management of a fully operational and deployed app.
ITARC15 Workshop - Architecting a Large Software Project - Lessons LearnedJoão Pedro Martins
Improving on a previous version of this session delivered in Lisbon, this deck describes the real experiences in architecting and developing a large software project that took 3 years to go live. It was presented at a 3,5hr ITARC2015 workshop in Stockholm, Sweden.
Adrian Cockcroft on his top predictions for the cloud computing industry in 2015 and beyond, as well as how cloud-native applications, continuous-delivery and DevOps techniques, will speed the pace of innovation and disruption.
For more about Adrian be sure to check out his page on Battery Ventures:
https://www.battery.com/our-team/member/adrian-cockcroft/
Follow Adrian on Twitter: @adrianco
JVM Support for Multitenant Applications - Steve Poole (IBM)jaxLondonConference
Presented at JAX London 2013
Per-tenant resource management can help ensure that collocated tenants peacefully share computational resources based on individual quotas. This session begins with a comparison of deployment models (shared: hardware, OS, middleware, everything) to motivate the multitenant approach. The main topic is an exploration of experimental data isolation and resource management primitives in IBM’s JDK that combine to help make multitenant applications smaller and more predictable.
Pitchero - Increasing agility through DevOps - Leeds DevOps November 2016Jon Milsom
Jon is co-founder & CTO of Pitchero heading up the technology team, but currently working across the whole business to make sure they have appropriate processes in place as they grow. Jon will explain how Pitchero have used DevOps practices over the last few years to improve both technical and business agility, covering both the people challenges as well as engineering detail.
http://www.leedsdevops.org.uk/post/152568213470/meetup-tuesday-15th-november-2016-at-the-odi
https://twitter.com/jonmilsom
https://twitter.com/PitcheroTech
https://twitter.com/leedsDevops/status/798608855781490688
https://twitter.com/techdiction/status/798607947680993280
How far have you got with learning about Cloud? Got your head around Platform as a Service? Understand what IaaS means? Can spell Docker? Working in a DevOps mode? It’s easy to focus on learning new technology but it’s time to take a step back and look at what the technical implications are when an application is heading to the cloud. In the world of the cloud the benefits are high but the economics (financial and technical) can be radically different. Learn more about these new realities and how they can change application design, deployment and support. The introduction of Cloud technologies and its rapid adoption creates new opportunities and challenges. Whether designer, developer or tester, this talk will help you to start thinking differently about Java and the Cloud.
Presented at JAX DE, 2016
Architecting for failure - Why are distributed systems hard?Markus Eisele
Devnexus 2017
As we architect our systems for greater demands, scale, uptime, and performance, the hardest thing to control becomes the environment in which we deploy and the subtle but crucial interactions between complicated systems. And microservices obviously are the way to go forward with those complicated systems. But what makes it so hard to build them? And why should you embrace failure instead of doing what we can do best: Preventing failure. This talk introduces you to the problem domain of a distributed system which consists of a couple of microservices. It shows how to build, deploy and orchestrate the chaos and introduces you to a couple of patterns to prevent and compensate failure.
App Dev in the Cloud: Not my circus, not my monkeys...Eric D. Schabell
When faced with all the hype around Cloud, most application developers are not really all that excited. Maybe you get that feeling that it isn't your problem, just leave me to my applications. Let me show you why, as an application developer, you can't ignore your Cloud stack anymore.
We will examine your Cloud stack anxieties and provide you with a solutions to ease you into your first private PaaS on your own local machine that you can install in just minutes. Finally you will be given a myriad of examples to take home with you to take control of this circus and own the monkeys!
http://www.schabell.org/2016/12/codemotion-rome-2017-app-dev-in-cloud-monkeys.html
The good, the bad, and the ugly of migrating hundreds of legacy applications ...Josef Adersberger
Wir haben bei der Allianz innerhalb von 17 Monaten eine Container Plattform in der Public Cloud aufgebaut und in einem ersten Schritt 144 Java Legacy Anwendungen cloud-ready gemacht und dorthin migriert. Im Vortrag zeigen wir, was dabei unsere Erfolgsrezepte und größten Hindernisse waren. Es geht dabei unter anderen darum, wie man eine große Anwendungslandschaft auf ihre Cloud-Readiness hin analysiert und wie man eine industrialisierte Migration von Anwendungen auf eine Cloud Plattform etabliert.
The new stack isn’t a stack: Fragmentation and terraforming the service layerDonnie Berkholz
Open source, cloud, and the API revolution have already
changed the way we build software. What's next? Donnie's spent the past 5 years trying to figure that out through observation and research at RedMonk and now at 451 Research. In this talk, he'll share what he's seen and what he predicts for the future of how we develop applications. You'll hear buzzwords like DevOps and microservices used in ways that actually make sense (for a change), see real-world examples of companies that have succeeded and failed, and learn how approaches like the one taken by HashiCorp's Terraform (by the authors of Vagrant) will be critical to the future of how we build software.
Building Microservices in the cloud - GOTO Nights Berlin 2016Christian Deger
Fed up with stop and go in your data center? Why not shift into overdrive and pull into the fast lane? Learn how AutoScout24 are building their Autobahn in the cloud to become the market leader in Europe's vehicle listings business.
Reinventing themselves by making a radical transition from monoliths to microservices, from .NET on Windows to Scala on Linux, from data center to AWS and from built by devs and run by ops to a devops mindset.
While the current stack keeps running, ever more microservices will go live as you listen to stories from the trenches.
Key takeaways from this talk include: How to...
… become cloud native
… evolve the architecture
… create “you build it you run it” teams
… align with principles
TWISummit 2019 - Embracing a Service MeshThoughtworks
Does your Microservices setup actually benefit you? Or are you bogged down with managing the network operations, observability, release management and more? A Service Mesh can actually help reduce operational complexity and manage your microservices better.
Digital foundations - Paving the road to cloud solutionsEric D. Schabell
When building anything substantial, such as a house or bridge, you start by laying down a solid foundation.
Nothing changes this aspect of building brick by brick when you move from traditional constructions to application development and architecting your supporting infrastructure. Throw in Cloud terminology and you might think that the principles of a solid foundation are a bit flighty, but nothing is further from the truth.
The path to your cloud solutions lays paved with open technologies and here is why.
(Article: http://www.schabell.org/2017/02/digital-foundations-paving-road-to-cloud-solutions.html)
Building Microservices in the cloud - Software Architecture Summit 2016Christian Deger
Learn how AutoScout24 are building their Autobahn in the cloud to become the market leader in Europe's vehicle classified business.
Reinventing themselves by making a radical transition from monoliths to microservices, from .NET on Windows to Scala on Linux, from data center to AWS and from built by devs and run by ops to a devops mindset.
While the current stack keeps running, ever more microservices will go live as you listen to stories from the trenches.
Key takeaways from this talk includes: How to...
… become cloud native
… evolve the architecture
… create “you build it you run it” teams
… involve business people in the transformation
Borrowed some slides from Simon Hohenadl (http://www.slideshare.net/SimonHohenadl) and Matthias Patzak (http://www.slideshare.net/MatthiasPatzak)
Nab 2017 a journey to the future of cloud-native media micro-services - was...Washington Cabral
The impact of digital transformation on media
and entertainment (M&E) sector is reshaping traditional
media services and the way solution vendors think, design
and market their products. Audience consuming habits shifts
from traditional, linear viewing hours, to pervasive, any time,
any device, any location patterns, broadcasters find
themselves on a hard track to keep up their infrastructure
with a consumption model that defies both operational and
business models.
Solution vendors are already adapting themselves to
this new reality. An increasing number of cloud based
solutions offerings are the current stage of a transformation
journey that started on traditional, purpose specific
components, migrating to software based solution running
Commercial Off-the-shelf (COTS) hardware, now are
leveraging the advantages from cloud economy of scale to
cope with diverse business and media consumption models
that arises.
The next stage of this digital transformation is the scope
of this paper. Shape the foreseeable future of media services
under the light of micro-services and serverless
architectures. Through a set of reference models and
conceptual architectures, this paper explains the journey to
achieve a cloud-native media micro-services.
The development of a product from the point of view of a technician, starting from the concept, passing to the minimum viable till a management of a fully operational and deployed app.
ITARC15 Workshop - Architecting a Large Software Project - Lessons LearnedJoão Pedro Martins
Improving on a previous version of this session delivered in Lisbon, this deck describes the real experiences in architecting and developing a large software project that took 3 years to go live. It was presented at a 3,5hr ITARC2015 workshop in Stockholm, Sweden.
Adrian Cockcroft on his top predictions for the cloud computing industry in 2015 and beyond, as well as how cloud-native applications, continuous-delivery and DevOps techniques, will speed the pace of innovation and disruption.
For more about Adrian be sure to check out his page on Battery Ventures:
https://www.battery.com/our-team/member/adrian-cockcroft/
Follow Adrian on Twitter: @adrianco
JVM Support for Multitenant Applications - Steve Poole (IBM)jaxLondonConference
Presented at JAX London 2013
Per-tenant resource management can help ensure that collocated tenants peacefully share computational resources based on individual quotas. This session begins with a comparison of deployment models (shared: hardware, OS, middleware, everything) to motivate the multitenant approach. The main topic is an exploration of experimental data isolation and resource management primitives in IBM’s JDK that combine to help make multitenant applications smaller and more predictable.
Pitchero - Increasing agility through DevOps - Leeds DevOps November 2016Jon Milsom
Jon is co-founder & CTO of Pitchero heading up the technology team, but currently working across the whole business to make sure they have appropriate processes in place as they grow. Jon will explain how Pitchero have used DevOps practices over the last few years to improve both technical and business agility, covering both the people challenges as well as engineering detail.
http://www.leedsdevops.org.uk/post/152568213470/meetup-tuesday-15th-november-2016-at-the-odi
https://twitter.com/jonmilsom
https://twitter.com/PitcheroTech
https://twitter.com/leedsDevops/status/798608855781490688
https://twitter.com/techdiction/status/798607947680993280
How far have you got with learning about Cloud? Got your head around Platform as a Service? Understand what IaaS means? Can spell Docker? Working in a DevOps mode? It’s easy to focus on learning new technology but it’s time to take a step back and look at what the technical implications are when an application is heading to the cloud. In the world of the cloud the benefits are high but the economics (financial and technical) can be radically different. Learn more about these new realities and how they can change application design, deployment and support. The introduction of Cloud technologies and its rapid adoption creates new opportunities and challenges. Whether designer, developer or tester, this talk will help you to start thinking differently about Java and the Cloud.
Presented at JAX DE, 2016
Architecting for failure - Why are distributed systems hard?Markus Eisele
Devnexus 2017
As we architect our systems for greater demands, scale, uptime, and performance, the hardest thing to control becomes the environment in which we deploy and the subtle but crucial interactions between complicated systems. And microservices obviously are the way to go forward with those complicated systems. But what makes it so hard to build them? And why should you embrace failure instead of doing what we can do best: Preventing failure. This talk introduces you to the problem domain of a distributed system which consists of a couple of microservices. It shows how to build, deploy and orchestrate the chaos and introduces you to a couple of patterns to prevent and compensate failure.
stackArmor MicroSummit
Securing the AWS Environment by McAfee:
Larry Kovalsky will cover topics relevant to securing the AWS hosting environment for compliance and security focused customers. He will cover the topics described below.
Endpoint Focused : McAfee Public Cloud Security Suite – Workload Discovery, Visibility, and Comprehensive Threat Protection for AWS
Network Focused : McAfee Virtual Network Security Platform – Network intrusion prevention featuring advanced signature-less detection techniques and true East/West IPS/prevention capabilities within AWS.
Data Focus : Pervasive Data Protection Suite – Visibility, Encryption, Data Loss Prevention, Web/Cloud Access Service Broker (CASB) protection. Follow the data between on-prem and AWS.
This presentation explains that the naive cloud business case that is often presented does not work: simply deploy your existing enterprise applications to a cloud environment and save lots of money by automatically adopting resource usage (and payment) to the actual application load. The problem is that enterprise applications are not elastic by default, i.e. they cannot easily scale out and in, because it takes explicit design and implementation to create an elastic application. A set of design principles is presented in this deck that are required to create an elastic application. As always lots of the information of this presentation is on the voice track but yet I think that you can find some helpful pointers in this deck.
Covering topics like:
CI CD DevOps Jenkins TFS TeamCity Compile Test Package Delpoy
See Disclaimer in the last slide and/or in file comments, if available.
Security for AWS : Journey to Least Privilege (update)dhubbard858
I created the baker's dozen of things to think about when migrating or deploying in AWS. Use comments to add your input. Read time approx. 15-20 minutes max.
There is also a long form written version of this on https://blog.lacework.com.
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
• The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
• Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
• Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
• Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
Keynote at DIGIT West Expo, Glasgow on 29 May 2024.
Cheryl Hung, ochery.com
Sr Director, Infrastructure Ecosystem, Arm.
The key trends across hardware, cloud and open-source; exploring how these areas are likely to mature and develop over the short and long-term, and then considering how organisations can position themselves to adapt and thrive.
Search and Society: Reimagining Information Access for Radical FuturesBhaskar Mitra
The field of Information retrieval (IR) is currently undergoing a transformative shift, at least partly due to the emerging applications of generative AI to information access. In this talk, we will deliberate on the sociotechnical implications of generative AI for information access. We will argue that there is both a critical necessity and an exciting opportunity for the IR community to re-center our research agendas on societal needs while dismantling the artificial separation between the work on fairness, accountability, transparency, and ethics in IR and the rest of IR research. Instead of adopting a reactionary strategy of trying to mitigate potential social harms from emerging technologies, the community should aim to proactively set the research agenda for the kinds of systems we should build inspired by diverse explicitly stated sociotechnical imaginaries. The sociotechnical imaginaries that underpin the design and development of information access technologies needs to be explicitly articulated, and we need to develop theories of change in context of these diverse perspectives. Our guiding future imaginaries must be informed by other academic fields, such as democratic theory and critical theory, and should be co-developed with social science scholars, legal scholars, civil rights and social justice activists, and artists, among others.
"Impact of front-end architecture on development cost", Viktor TurskyiFwdays
I have heard many times that architecture is not important for the front-end. Also, many times I have seen how developers implement features on the front-end just following the standard rules for a framework and think that this is enough to successfully launch the project, and then the project fails. How to prevent this and what approach to choose? I have launched dozens of complex projects and during the talk we will analyze which approaches have worked for me and which have not.
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties – USA
Expansion of bot farms – how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks – Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf91mobiles
91mobiles recently conducted a Smart TV Buyer Insights Survey in which we asked over 3,000 respondents about the TV they own, aspects they look at on a new TV, and their TV buying preferences.
PHP Frameworks: I want to break free (IPC Berlin 2024)Ralf Eggert
In this presentation, we examine the challenges and limitations of relying too heavily on PHP frameworks in web development. We discuss the history of PHP and its frameworks to understand how this dependence has evolved. The focus will be on providing concrete tips and strategies to reduce reliance on these frameworks, based on real-world examples and practical considerations. The goal is to equip developers with the skills and knowledge to create more flexible and future-proof web applications. We'll explore the importance of maintaining autonomy in a rapidly changing tech landscape and how to make informed decisions in PHP development.
This talk is aimed at encouraging a more independent approach to using PHP frameworks, moving towards a more flexible and future-proof approach to PHP development.
Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...Ramesh Iyer
In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.
Availability in a cloud native world v1.6 (Feb 2019)
1. IBM Services – Continuous Availability
Availability in a Cloud-Native
World. Guidelines for mere
mortals.v1.6 Tuesday, February 26, 2019
Haytham Elkhoja
Global Tech Leader and Chief Architect
IBM Services Continuous Availability – IBM Services
haytham.elkhoja@ibm.com
@haythamelkhoja
Herbie Pearthree
Chief Technical Officer, Senior Technical Staff Member
IBM Services Continuous Availability – IBM Services
hpear3@us.ibm.com
@herbiepear3
6. Definition
Availability. Everything breaks,
you should plan on it. Business
must be active in multi-availability
zones to mitigate failures3 (fires,
floods and fools).
It also allows zero downtime for planned changes and
minimizes maintenance windows.
7. Definition
Availability in a Cloud Native
World.
Cloud Native and Microservices
- Parallel, agile, polyglot development.
- Choose the right tool for the job.
- Microservices and Loosely-Coupled Components.
- Pet vs Cattle.
Continuous Availability / Always On / Zero Downtime
- First impression, last impression.
- Cost of downtime, there are 8,760 hours in a year, make them count.
- Availability, resilience, performance and scalability go hand in hand.
- Blue Green and canary deployments per region/cloud for non-disruptive change management.
- Redirect users to their closest region/cloud, right cloud/region for the right job.
- No HA and stretched clustering = no failure domains.
- 3 regions/clouds cheaper than 2.
v/s
15. Guideline
Speaking of fallacies here’s a
bunch:
- Network is reliable.
- Latency is zero.
- Bandwidth is infinite.
- The network is secure.
- Topology doesn't change.
- There is one administrator.
- Transport cost is zero.
- The network is homogeneous.
16. Guideline
Bleeding edge is an attitude.
Technology is changing every day.
What you knew yesterday is
already legacy (or deprecated).
17. Guideline
Understand consistency.
Consistency
Weak
• After a write, reads may or may not see it.
• Best effort only.
• Memcache, VoIP, live video streaming.
Eventual
• After a write, reads will eventually see it.
• Write will happen... Eventually.
• Object Storage, SMTP, DNS.
• Asynchronous data replication.
Strong
• After a write, reads will see it.
• Don’t continue unless commit.
• Filesystems, RDBMS.
• Synchronous data replication.
18. Guideline
CAP Theorem decisions
early on.
Knowing that Partition Tolerance cannot be sacrificed.
Pick Consistency or Availability.
Consistency
All distributed nodes have a single up-to-date copy of all data at all times.
Availability
Every request receives a success or failure response.
Partition-tolerance
System continues to run despite arbitrary message loss or failure of part of the system.
C
A P
Pick two
Cassandra, CouchDB, HBase etc…
MongoDB,
Redis
etc…
Oracle,
DB2,
MySQL
etc…
Distributed systems data persistence decisions
C+A
To have consistent and available data,
partitioning tolerance must be sacrificed.
This means that data can only be consistent
in a single place at any moment in time.
C+P
To ensure data consistency and partitioning
tolerance, availability must be sacrificed.
This means that data is accessible only if
all data nodes are available.
A+P
To ensure availability and partition
tolerance, consistency must be sacrificed.
This means some data nodes aren’t necessarily
in sync in case of a networking disruption.
19. Guideline
Love DevOps? Wait till you meet
SRE.
https://landing.google.com/sre/
“SRE is what happens when you ask a
software engineer to design an
operations team. ”
50. Guideline
Rolling updates strategies for
zero downtime deployments.
Accounting for the time the application needs to start up.
Deploy by adding an instance, then remove
an old one
Deploy by removing an instance, then add a
new one
Deploy by updating instances as fast as
possible
52. Guideline
You don’t choose Chaos Monkey.
Chaos Monkey chooses you.
“Chaos Engineering the discipline of
experimenting on a distributed system in
order to build confidence in the system's
capability to withstand turbulent
conditions in production.”
https://principlesofchaos.org
53. Guideline
When pursuing Chaos
Engineering, start small and
observe and learn.
# of instances
E.g. Latency attack
200
400
600
800
100
0
0
Latency
(ms)
0 20 40 60 80 100
start here
I. Plan an experiment II. Contain the Blast
Radius
III. Scale or Squash
How to conduct Chaos Engineering attacks:
• Test (latency, DNS, leap seconds, disk fill, kill
processes, etc…).
• Expected results?
• Observed results.
• Document.
Remember to start small and gradually increase blast radius.
then increase radius
54. Guideline
Data patterns differ. Not all data
are created equal.
Messaging
BPM
CEP
APP
Active standby
or active/query
Hot standby
or configured
active/active for
fast switchover
Multi-master
or peer-to-peer
write anywhere
Data distribution
filter and push
Data warehouse
integration and
federation
Data through
messaging filter
and push
distribution
56. PUBLIC NETWORK CLOUD NETWORK ENTERPRISE NETWORK
TRANSFORMATION &
CONNECTIVITY
GLOBAL LOAD
BALANCER
USER
ENTERPRISE
DATABASE
ENTERPRISE
DATABASE
FIREWALL
TRANSFORMATION &
CONNECTIVITY
TRANSFORMATION &
CONNECTIVITY
DATACENTER 1
DATACENTER 2
LEGEND
Application
Infrastructure
Data Store
Security
Devops
User
Scalable
FIREWALL
APPLICATION
CLOUD SITE 1
MICROSERVICE
APPLICATION 1
NOSQL
DATABASE
MICROSERVICE
APPLICATION 2
6APPLICATION
CLOUD SITE 2
MICROSERVICE
APPLICATION 1
NOSQL
DATABASE
MICROSERVICE
APPLICATION 2
APPLICATION
CLOUD SITE 3
MICROSERVICE
APPLICATION 1
NOSQL
DATABASE
MICROSERVICE
APPLICATION 2
GLOBAL LOAD
BALANCER
GLOBAL LOAD
BALANCER
1
3-Active Microservices Systems of Engagement w/Active-Active Enterprise SoR
1. Global LoadBalancer responds to DNS request and points user to best responding site
2. User Request is sent to best site to consume the business service application
3. Cloud Native Microservice #1 (using circuit breaker) connects to best Enterprise SoR
4. Cloud Native Microservice #2 performs CRUD on NoSQL Database in site
5. NoSQL database replication set performs operation on each of it’s peers
6. Enterprise SoR replication set performs CRUD on it’s peer
2
3
34
4
5
99.99%
99.999%