While I am best known as a Java evangelist, my day job prior to joining Oracle was Chief Agile Methodologist where I facilitated 3 company-wide Agile rollouts. If you are skeptical of folks trying to sell you certifications, frustrated with the institution of new processes and tracking systems, or wary of process experts taking the place of technical leadership, then this is the session for you. Come learn the insider secrets of how Agile works in a large enterprise from someone who has been in the eye of the hurricane. However, be warned that this knowledge will give you the power to change the development culture in your organization for better or worse -- are you ready to shoulder this responsibility?
Test Automation Day 2015 Keynote Alan Richardson - Practical Lessons Learned ...Alan Richardson
Practical Lessons Learned Automating in Testing.
Let us forget theory for a moment, and concentrate on the practice of automation. Alan will describe lessons learned from both success and failure;
as a tester, an automator, and a manager. But more importantly, you will discover how to apply these lessons and improve your automation.
Learn how to stay focused, how to experiment and still add value, how to manage even if you cannot code, and more...
What do magicians and programmers have in common? They are good at juggling, have very nimble fingertips, often make things vanish, and have lovely assistants! Ok, so maybe not all of those describe your average hacker (unless your pair programmer partner happens to be Penny), but we are going to try to put on the most spectacular magic show that has ever been seen on the stage at a tech conference! [geeks only]
As proper geeks, we are going to make heavy use of embedded wearable and internet connected devices to make up for our lack of dexterity and supernatural powers. Also, all tricks will be revealed with the designs available to reproduce in the spirit of open source and creative commons. Come join us to see for yourself what real [hacker] magic looks like!
DukeScript is a new way of writing JavaScript applications that lets you take advantage of a powerful binding model to connect to Java code running in a local JVM.
Test Automation Day 2015 Keynote Alan Richardson - Practical Lessons Learned ...Alan Richardson
Practical Lessons Learned Automating in Testing.
Let us forget theory for a moment, and concentrate on the practice of automation. Alan will describe lessons learned from both success and failure;
as a tester, an automator, and a manager. But more importantly, you will discover how to apply these lessons and improve your automation.
Learn how to stay focused, how to experiment and still add value, how to manage even if you cannot code, and more...
What do magicians and programmers have in common? They are good at juggling, have very nimble fingertips, often make things vanish, and have lovely assistants! Ok, so maybe not all of those describe your average hacker (unless your pair programmer partner happens to be Penny), but we are going to try to put on the most spectacular magic show that has ever been seen on the stage at a tech conference! [geeks only]
As proper geeks, we are going to make heavy use of embedded wearable and internet connected devices to make up for our lack of dexterity and supernatural powers. Also, all tricks will be revealed with the designs available to reproduce in the spirit of open source and creative commons. Come join us to see for yourself what real [hacker] magic looks like!
DukeScript is a new way of writing JavaScript applications that lets you take advantage of a powerful binding model to connect to Java code running in a local JVM.
Surviving as a zombie is tough... with the constant risks of sunlight, fire, and pesky mobs, doing your job of infecting the local villagers can be deadly. Fortunately, with the new JavaFX ZombieTime app, powered by the JSR 310 Date and Time API, you can rest easy. With built-in time zone and DST support you no longer have to worry about roaming around under the scorching hot sun. Accurately calculate out how long you have to infect the villagers before you decompose using Durations. And coordinate global attacks on the humans by syncing with your undead brethren on Instants. With the power of Java 8, eradicating the human race with a highly infectious virus has never been easier!
This presentation is designed to teach Java Date and Time APIs to the undead, but the living are welcome to be our "guests". You may also learn some JavaFX in the process -- that is entirely my fault. Any correlation between the characters and events in this presentation and the impending extinction of mankind is purely coincidental.
RetroPi Handheld Raspberry Pi Gaming ConsoleStephen Chin
In this session I will walk you through how to build your own retro handheld console that is powered by Java, runs on a Raspberry Pi, and is printed on a 3D printer. Some of the topics that we will cover along the journey include:
• Hacking Java on the Raspberry Pi
• Rigging input devices with Pi4J
• Insane performance tuning on the JVM
• Why your boss [or SO] needs to buy you a 3D printer!
And of course your retro gaming mettle will be put to the test, so make sure to dust off your old 8 and 16 bit consoles to prepare.
This presentation is about the most fun you can have while still legitimately calling this conference “work.” In fact, I will hopefully inspire you to do your own creative “work” leveraging Java and Raspberry Pi to hack the real world.
When JavaFX Script was released, the mobile component was an important part. It was also one of the reasons many people and analysts believed in JavaFX as a real cross-platform client-side framework. For a number of reasons, JavaFX on mobile disappeared from the official Java roadmap. Fortunately, the OpenJFX team at Oracle made all the required sources available, and the JavaFXPorts initiative worked on providing JavaFX SDK's for the mobile platforms. In this session, we will show the current state of JavaFX on Mobile. We will show how to create a real cross-platform JavaFX Application using an IDE, and how easy it actually is to deploy that application on Android and iOS devices. We will show some of the features and limitations, and talk about the eco-system that is starting to take shape.
Confessions of a Former Agile Methodologist (JFrog Edition)Stephen Chin
I am best known for my work as a technology author and evangelist, but before this I used to be a methodology guru. Find out about what I learned in my 14+ year journey through the Agile methodologies and trends that have reshaped what we know as modern software development practices. This version of the talk has a few Easter Eggs for the JFrog guys who were instrumental in the build and test infrastructure I succeeded with, and invited me to speak at their awesome SwampUP event in Napa.
Java 8 is the most impactful update to the Java ecosystem since Java 5, introducing an entirely new programming model with lambda expressions, and a whole new platform of applications with support for ARM embedded devices. In this presentation, you will see live demonstrations of Java 8 technology running on embedded platforms such as Raspberry Pi and Lego Mindstorms EV3, allowing Java-based applications to support the internet-of-things.
With new low cost devices entering the market, access to the world of embedded computing is become more cost affordable. And, with continued advances in Java, developers can easily begin creating innovative applications that leverage these low cost devices. Come and learn how to build the future of Java.
English version of the Devoxx4Kids workshop deck to teach programming using the NAO humanoid robot. (Credit to Daniel De Luca for content creation and Nicolas Rigaud on translation)
Slides for a Lego Workshop using Java coding via Lejos to create a wind turbine using the Lego EV3 core education set. Workshop was given at the Devoxx4Kids bay area chapter on May 2nd.
Permettere al cliente di apprezzare l'approccio agileSteve Maraspin
Presentazione del 27/09/2012 a Better Software - Firenze, Italia. Raccontata la nostra esperienza e l'approccio utilizzato per garantire la soddisfazione del cliente nel lungo termine
'Where Exploration And Automation Meet: Getting The Most From Automated Funct...TEST Huddle
Agile teams invest heavily in automated functional tests. When done well, this investment is paid back with fast feedback enabling teams to release software quickly and often. By structuring tests in the right way, teams can further leverage this investment by using these tests as a platform for exploratory testing that could find issues a regression test suite won't.
This talk will cover the process and cost benefits of creating automated tests that can be reused to support exploratory testing. Concepts and practices will be described within the context of a mature agile delivery team. It will provide an overview of current practices for automated functional and exploratory testing within agile teams. The main focus of the talk will be to provide an overview and demonstration of techniques that will allow testers to utilise existing automated functional tests to support exploratory testing. The benefits of this approach such as; reducing the time needed for exploratory testing, increasing exploratory testing coverage, improved repeatability when reproducing bugs and improved robustness of your automated functional regression tests will be reviewed.
Sometimes making choices in our career paths is difficult. Wouldn't it be helpful to have guidelines to help us make decisions that open up your options rather than shut them down? Discover how choosing creativity, a growth mindset, finding your Flow, and being a Maker puts you on the path of having infinite possibilities in your career, creating a clear path to a future where you can not only be awesome, but also do meaningful work.
Surviving as a zombie is tough... with the constant risks of sunlight, fire, and pesky mobs, doing your job of infecting the local villagers can be deadly. Fortunately, with the new JavaFX ZombieTime app, powered by the JSR 310 Date and Time API, you can rest easy. With built-in time zone and DST support you no longer have to worry about roaming around under the scorching hot sun. Accurately calculate out how long you have to infect the villagers before you decompose using Durations. And coordinate global attacks on the humans by syncing with your undead brethren on Instants. With the power of Java 8, eradicating the human race with a highly infectious virus has never been easier!
This presentation is designed to teach Java Date and Time APIs to the undead, but the living are welcome to be our "guests". You may also learn some JavaFX in the process -- that is entirely my fault. Any correlation between the characters and events in this presentation and the impending extinction of mankind is purely coincidental.
RetroPi Handheld Raspberry Pi Gaming ConsoleStephen Chin
In this session I will walk you through how to build your own retro handheld console that is powered by Java, runs on a Raspberry Pi, and is printed on a 3D printer. Some of the topics that we will cover along the journey include:
• Hacking Java on the Raspberry Pi
• Rigging input devices with Pi4J
• Insane performance tuning on the JVM
• Why your boss [or SO] needs to buy you a 3D printer!
And of course your retro gaming mettle will be put to the test, so make sure to dust off your old 8 and 16 bit consoles to prepare.
This presentation is about the most fun you can have while still legitimately calling this conference “work.” In fact, I will hopefully inspire you to do your own creative “work” leveraging Java and Raspberry Pi to hack the real world.
When JavaFX Script was released, the mobile component was an important part. It was also one of the reasons many people and analysts believed in JavaFX as a real cross-platform client-side framework. For a number of reasons, JavaFX on mobile disappeared from the official Java roadmap. Fortunately, the OpenJFX team at Oracle made all the required sources available, and the JavaFXPorts initiative worked on providing JavaFX SDK's for the mobile platforms. In this session, we will show the current state of JavaFX on Mobile. We will show how to create a real cross-platform JavaFX Application using an IDE, and how easy it actually is to deploy that application on Android and iOS devices. We will show some of the features and limitations, and talk about the eco-system that is starting to take shape.
Confessions of a Former Agile Methodologist (JFrog Edition)Stephen Chin
I am best known for my work as a technology author and evangelist, but before this I used to be a methodology guru. Find out about what I learned in my 14+ year journey through the Agile methodologies and trends that have reshaped what we know as modern software development practices. This version of the talk has a few Easter Eggs for the JFrog guys who were instrumental in the build and test infrastructure I succeeded with, and invited me to speak at their awesome SwampUP event in Napa.
Java 8 is the most impactful update to the Java ecosystem since Java 5, introducing an entirely new programming model with lambda expressions, and a whole new platform of applications with support for ARM embedded devices. In this presentation, you will see live demonstrations of Java 8 technology running on embedded platforms such as Raspberry Pi and Lego Mindstorms EV3, allowing Java-based applications to support the internet-of-things.
With new low cost devices entering the market, access to the world of embedded computing is become more cost affordable. And, with continued advances in Java, developers can easily begin creating innovative applications that leverage these low cost devices. Come and learn how to build the future of Java.
English version of the Devoxx4Kids workshop deck to teach programming using the NAO humanoid robot. (Credit to Daniel De Luca for content creation and Nicolas Rigaud on translation)
Slides for a Lego Workshop using Java coding via Lejos to create a wind turbine using the Lego EV3 core education set. Workshop was given at the Devoxx4Kids bay area chapter on May 2nd.
Permettere al cliente di apprezzare l'approccio agileSteve Maraspin
Presentazione del 27/09/2012 a Better Software - Firenze, Italia. Raccontata la nostra esperienza e l'approccio utilizzato per garantire la soddisfazione del cliente nel lungo termine
'Where Exploration And Automation Meet: Getting The Most From Automated Funct...TEST Huddle
Agile teams invest heavily in automated functional tests. When done well, this investment is paid back with fast feedback enabling teams to release software quickly and often. By structuring tests in the right way, teams can further leverage this investment by using these tests as a platform for exploratory testing that could find issues a regression test suite won't.
This talk will cover the process and cost benefits of creating automated tests that can be reused to support exploratory testing. Concepts and practices will be described within the context of a mature agile delivery team. It will provide an overview of current practices for automated functional and exploratory testing within agile teams. The main focus of the talk will be to provide an overview and demonstration of techniques that will allow testers to utilise existing automated functional tests to support exploratory testing. The benefits of this approach such as; reducing the time needed for exploratory testing, increasing exploratory testing coverage, improved repeatability when reproducing bugs and improved robustness of your automated functional regression tests will be reviewed.
Sometimes making choices in our career paths is difficult. Wouldn't it be helpful to have guidelines to help us make decisions that open up your options rather than shut them down? Discover how choosing creativity, a growth mindset, finding your Flow, and being a Maker puts you on the path of having infinite possibilities in your career, creating a clear path to a future where you can not only be awesome, but also do meaningful work.
About linchpins and project managers in organizationsDimitri Honlet
Why project managers have by default more opportunities to become linchpins in an organization. Based on my own experience, the book 'Linchpins' by Seth Godin and inspired by the presentation of Ciprian Rusen (Corporate Geek).
Sometimes making choices in our career paths is difficult. Wouldn't it be helpful to have guidelines to help us make decisions that open up your options rather than shut them down? Discover how choosing creativity, a growth mindset, finding your Flow, and being a Maker puts you on the path of having infinite possibilities in your career, creating a clear path to a future where you can not only be awesome, but also do meaningful work.
Cultural Challenges of Digitization - or: "OMG, the nerds are coming!"Andreas Czakaj
When traditional business meets IT both sides may face challenges.
These slides were first presented at the ProductPeople conference in Cologne on 2018-11-09.
Don't be a zombie reading your stories - Learn the exciting parts of analysis...Ryan McKergow
For some teams, having a Business Analyst would be a luxury. For others, they are no longer necessary. Whatever your situation, analysis and critical thinking is still essential in software development. Even if you don’t have a Business Analyst!
During this talk, you will learn how to become a Business Analyst while still being a developer, tester, or product manager. I will introduce some of the secrets that great Business Analysts use to get people collaborating, discussing the problem, and agreeing on a solution. Learn how to run a design studio, 3 amigos session, or a story kickoff. Don’t just be a zombie reading your next ticket. Let’s think about the problem and how we’ll solve it together!
Best Practice For UX Deliverables - Eventhandler, London, 05 March 2014Anna Dahlström
TAKE THIS WORKSHOP ONLINE & GET 20% OFF WITH CODE 'SLIDESHARE'
https://school.uxfika.co/p/best-practice-for-ux-deliverables/?product_id=325265&coupon_code=SLIDESHARE
---
Slides from my 'Best practice for UX deliverables' workshop that I ran for Eventhandler in London on the 05th of March 2014.
http://www.eventhandler.co.uk/events/uxnightclass-uxdeliverables3
---
Please note that for copyright reasons & client privacy the examples in this presentation are slightly different than from the workshop. The examples included are for reference only in terms of what I talked through in the 'Good examples' section.
-----
ABSTRACT
Whilst the work we do is not meant to be hanged on a wall for people to admire, nor is meant to be put in a drawer and forgotten about. Just as we make the products and services we design easy to use, the UX of UX is about communicating your thinking in a way that ensures that what you've defined is easy to understand for the reader. It's about adapting the work you do to the project in question and finding the right balance of making people want to look through your work whilst not spending unnecessary time on making it pretty.
Who is it for?
This workshop is suitable for anyone starting out in UX, or who's worked with it for a while but is looking to improve the way they present their work.
What you'll learn
In this hands on workshop we'll walk through real life examples of why the UX of UX deliverables matter. We'll cover how who the reader is effects the way we should present our work, both on paper and verbally, and how to ensure that the work you do adds value. Coming out of the workshop you'll have practical examples and hands on experience with:
// How to adapt and sell your UX deliverable to the reader (from clients, your team, in house and outsourced developers)
// Guiding principles for creating good UX deliverables (both low and high fidelity)
// Best practice for presentations, personas, user journeys, flows, sitemaps, wireframes and other documents
// Simple, low effort but big impact tools for improving the visual presentation of your UX deliverables
With the rise of DevOps, Cloud Computing, and Container technologies, how you approach development has dramatically changed. Learn how to take advantage of microservices, serverless, and cloud-native technologies with the latest DevOps techniques to create hyperproductive teams.
10 Ways Everyone Can Support the Java CommunityStephen Chin
Foojay is all about the community helping to take Java forward, so as an attendee of the Friends of OpenJDK FOSDEM devroom you are already on your way towards making the Java community better!
But what can we all encourage our friends and colleagues to do in order to make the Java community more vibrant, active, and welcoming.
In this presentation, you will learn all of the insider secrets on how to support the worldwide community of 12 million Java developers.
Java Clients and JavaFX: The Definitive GuideStephen Chin
This talk is for professionals building Java applications for desktop, mobile, and embedded devices in the cloud age. It will help you build enhanced visual experiences and deploy modern, easy-to-maintain client applications across a variety of platforms. These applications can take advantage of the latest user interface components, 3D technology, and cloud services to create immersive visualizations and enable high-value data manipulation. Learn from Stephen Chin, lead author of the definitive Java client reference, how to leverage the latest open-source Java client technologies to build rich, responsive, and modern UIs.
Speaker: Stephen Chin
Bio: Stephen Chin is Senior Director of Developer Relations at JFrog, author of Raspberry Pi with Java, The Definitive Guide to Modern Client Development, and Pro JavaFX Platform. He has keynoted numerous Java conferences around the world including Oracle Code One (formerly JavaOne), where he is an 8-time Rock Star Award recipient. Stephen is an avid motorcyclist who has done evangelism tours in Europe, Japan, and Brazil, interviewing hackers in their natural habitat and posting the videos on http://nighthacking.org/. When he is not traveling, he enjoys teaching kids how to do embedded and robot programming together with his teenage daughter.
With the rise of DevOps, low cost Cloud Computing, and emerging Container technologies, the landscape for how you approach development has dramatically changed. This talk is focused on helping Java developers to adapt to this new landscape and take advantage of microservices, serverless, and cloud-native technologies with the latest DevOps techniques to simplify their build and create hyperproductive teams. Some of the technologies you will learn about in this talk include source control, build declaration, CI/CD, package management, containerization, and security.
Learn from the combined experience of the presenters who are experts in the Java and DevOps domains on the best tools, technologies, and methodologies to build your next cloud-native application or refactor your monolith. We cover the entire DevOps toolchain from source control through CI/CD through containerized deployments with an emphasis on maintaining efficiency and control from the source code and dependencies.
Java Clients and JavaFX - Presented to LJCStephen Chin
This session is for professionals building Java applications for desktop, mobile, and embedded devices in the cloud age. It will help you build enhanced visual experiences and deploy modern, easy-to-maintain client applications across a variety of platforms. These applications can take advantage of the latest user interface components, 3D technology, and cloud services to create immersive visualizations and enable high-value data manipulation.
Learn from Stephen Chin, lead author of the definitive Java client reference, how to leverage the latest open-source Java client technologies to build rich, responsive, and modern UIs.
Presentation given to the Dallas Spring User Group on how to use JavaFX technology together with the Spring Framework. Covers a basic pattern for loading the Spring context in a JavaFX application thread as well as how to leverage Spring Security on the front end.
Generative AI Deep Dive: Advancing from Proof of Concept to ProductionAggregage
Join Maher Hanafi, VP of Engineering at Betterworks, in this new session where he'll share a practical framework to transform Gen AI prototypes into impactful products! He'll delve into the complexities of data collection and management, model selection and optimization, and ensuring security, scalability, and responsible use.
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
Communications Mining Series - Zero to Hero - Session 1DianaGray10
This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered:
• Communication Mining Overview
• Why is it important?
• How can it help today’s business and the benefits
• Phases in Communication Mining
• Demo on Platform overview
• Q/A
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...SOFTTECHHUB
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
GraphSummit Singapore | The Future of Agility: Supercharging Digital Transfor...Neo4j
Leonard Jayamohan, Partner & Generative AI Lead, Deloitte
This keynote will reveal how Deloitte leverages Neo4j’s graph power for groundbreaking digital twin solutions, achieving a staggering 100x performance boost. Discover the essential role knowledge graphs play in successful generative AI implementations. Plus, get an exclusive look at an innovative Neo4j + Generative AI solution Deloitte is developing in-house.
Dr. Sean Tan, Head of Data Science, Changi Airport Group
Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.
Climate Impact of Software Testing at Nordic Testing DaysKari Kakkonen
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!SOFTTECHHUB
As the digital landscape continually evolves, operating systems play a critical role in shaping user experiences and productivity. The launch of Nitrux Linux 3.5.0 marks a significant milestone, offering a robust alternative to traditional systems such as Windows 11. This article delves into the essence of Nitrux Linux 3.5.0, exploring its unique features, advantages, and how it stands as a compelling choice for both casual users and tech enthusiasts.
33. And had to resolve internal conflict
33https://www.flickr.com/photos/skinnylawyer/6884960361/
34. Conquering the Universe with Agile turned out to be a lot of
work!
34https://www.flickr.com/photos/jurvetson/83176915/
35. So, I made my escape from the Empire
35https://www.flickr.com/photos/p_valdivieso/9006007735
36. And went back to being just a normal guy…
36https://www.flickr.com/photos/d35ign/11826583146
37. Some things I learned…
37https://www.flickr.com/photos/23950335@N07/6032572260/
38. The Agile Manifesto
Process and toolsIndividuals and interactions over
Following a planResponding to change over
Source: www.agilemanifesto.org
Comprehensive
documentation
Working software over
Contract negotiationCustomer collaboration over
39. The Agile Industry Manifesto
Continuous improvementExpert advice over
In-person collaborationTooling licenses over
CraftsmanshipMethodologies over
Clean codeMetrics over
https://www.flickr.com/photos/dieknochenblume/8454004839
40. The Agile Industry Manifesto
Continuous improvementExpert advice over
In-person collaborationTooling licenses over
CraftsmanshipMethodologies over
Clean codeMetrics over
https://www.flickr.com/photos/dieknochenblume/8454004839
41. ALL YOUR BASE ARE BELONG TO US.
41Source: http://setandbma.wordpress.com/2012/03/23/agile-history/
43. But they are not a substitute for experience
43https://www.flickr.com/photos/nasamarshall/12815430035
44. How do you know things have gone wrong?
• According to Chapter 5, Section 3, Verse 13 of the Agile Bible…
• Expert XXX has a hyper performing team with 3 hour Sprints, so we need to
do that!
• Same issue comes up in the retrospective… for 3 weeks running!
44
45. Confession Time…
• I have trouble disagreeing with Ron… maybe
it is the gray beard.
• The guy who forced all your Sprint lengths to
line up – yeah, that was me implementing
what Dean recommended.
• I hate retrospectives! – I would much rather
be coding.
45https://www.flickr.com/photos/38463026@N04/3925480958
46. The Agile Industry Manifesto
Continuous improvementExpert advice over
In-person collaborationTooling licenses over
Clean codeMetrics over
https://www.flickr.com/photos/dieknochenblume/8454004839
CraftsmanshipMethodologies over
47. There is a methodology for that…
Geek Hero Comic – Salvatore Iovene – "Agile Development Explained"
http://www.geekherocomic.com/2009/02/21/agile-development-explained/
52. What really makes projects fail?
• Build server… yeah, that is Jonny's machine
• We have unit tests… they are just manually run. And manually verified.
• Software quality? Oh, that is what those guys over there do.
52
53. Confession Time…
• I occasionally check in binaries, but that is
better than not having them at all.
• I trained teams on Scrum… when I should
have been training them on JUnit.
• All my Agile talks have been on… guess
what, methodologies! (or anti-
methodologies)
53https://www.flickr.com/photos/lon/5582656222
54. The Agile Industry Manifesto
Continuous improvementExpert advice over
In-person collaborationTooling licenses over
CraftsmanshipMethodologies over
https://www.flickr.com/photos/dieknochenblume/8454004839
Clean codeMetrics over
55. You Think You Are Independent
55
https://www.flickr.com/photos/sylvainkalache/14976661122
56. But you are NOT!
56
https://www.flickr.com/photos/nzdave/491411546
57. We are WATCHING YOU
57
Source: Deviant Art, created by SavageSauron
http://savagesauron.deviantart.com/art/The-Great-Eye-326927311
58. You are a metric junkie when…
• You log in to the Agile tool during vacation to make sure you have a pretty
burn-down chart
• To keep up with the other hyper performing teams, you inflate your
estimates by a factor of 10… then 100… then 1000!
• Your QA team won't accept the build when the code coverage drops below
98%
58
59. Confession Time…
• Some weeks I spent more time in
Excel then my IDE.
• 100% code coverage? I have
accomplished that with 0
assertions!
• I have single-handedly killed
projects with pie charts.
59https://www.flickr.com/photos/hoyvinmayvin/4865553148/
60. The Agile Industry Manifesto
Continuous improvementExpert advice over
CraftsmanshipMethodologies over
Clean codeMetrics over
https://www.flickr.com/photos/dieknochenblume/8454004839
In-person collaborationTooling licenses over
64. You have overdone the tooling when…
• When the QA guy wants you to fix the coffee machine you ask him to file a
bug first
• The only person who writes stories in your planning meeting is the Scrum
Master as he enters them in the online tool
• You go into shock when you meet your team for the first time and realize
you are the only guy… Pat, Alex, Kris, and even Sam are all females!
64
65. Confession Time…
• I was one of those Scrum masters
who entered in all the stories for my
team.
• Oh, and I also put all the estimates in
for efficiency.
• And I even built my own tooling and
unleashed it on unwitting teams!
65https://www.flickr.com/photos/blackzack00/15206347052/
66. And the most important thing!
• Stick with what you are good at…
66
Hacking
Video
Beer
68. Safe Harbor Statement
The preceding is intended to outline our general product direction. It is intended for
information purposes only, and may not be incorporated into any contract. It is not a
commitment to deliver any material, code, or functionality, and should not be relied upon
in making purchasing decisions. The development, release, and timing of any features or
functionality described for Oracle’s products remains at the sole discretion of Oracle.
68