How to Usher in a new Monitoring System
•Download as PPTX, PDF•
1 like•247 views
This document outlines steps for introducing a new monitoring system, including identifying pain points, choosing a tool, establishing a central source of truth, evangelizing use cases, and fighting pushback. It recommends starting with easiest wins, compartmentalizing solutions, and stabilizing before shutting down the old system and celebrating.
Report
Share
Report
Share
Recommended
RFID tag installation
An overview of what is involved in installing RFID tags. Includes: the challenges faced; what can go wrong; costs involved; and forward planning. Presented by Mike Parsons of The Tagging Team at the SLIC/JISC RSCs in Scotland RFID event held in Glasgow on 17 Sept 2008.
KraQA#39 - Jak testowac tool do testow
The document discusses principles of continuous delivery including building quality in from the start, automating as much as possible while keeping everything in version control, testing in a production-like environment, and maintaining a simple and consistent delivery process. It emphasizes the importance of frequent releases to catch issues early, notes that testing does not ensure 100% confidence, and advocates for continuous improvement through a plan-do-study-act approach with each release representing the next stage. Continuous delivery helps reduce errors, lower stress, and gather valuable user feedback.
HOW TO SCALE YOUR ONCALL OPERATION, AND SURVIVE TO TELL, ANTON DRUKH
“Being oncall sucks. But it doesn’t have to!” We all heard this one before. Why is it though, that oncall still remains the biggest scar for many? What can a modern Engineering org do to rein the oncall dragons, and actually help people grow as professionals as they go oncall?
In this talk, I will present the main reasons why oncall is difficult in modern orgs, and describe ways to mitigate these hardships. The idea is that oncall is often the ‘backroom’ of an org, where all the technical and organizational debt take their toll. Be it unwieldy systems or broken processes between teams, oncall checks all the ‘weak boxes’. Therefore, the only way to win at oncall is to sort out your debts, starting with the organizational ones.
I will dive into the detail of the oncall rotation at Snyk as the org scaled from 1 to 220 people, what worked well about it, and what was less than perfect. I will discuss the decisions made to turn oncall into a building block of the org, and show a path to rein oncall in your organization as well.
Quality Assurance in Scrum
This document contains slides from a 2010 presentation on testing in Scrum. It discusses key Scrum principles like iterations, self-organizing cross-functional teams, and continuous improvement. The slides cover testing practices like test-driven development, having no separate test team, continuous testing, and automating tests from the unit to GUI levels. User stories and their elements are explained. The document advocates testing that follows the Scrum process and values working software over documentation.
Sage run error checking
Sage Line 50 - why it is vital to run error checking. Backup files may be useless if they contain errors.
Testing The User Centric Web
This document outlines tips for testing new web applications. It begins with an agenda that includes a history of Web 2.0, a test exercise, and tips and ideas for testing. The presenter then provides 9 tips for testing new web applications, such as testing in a dirty environment, integrating tests with software, segmenting automated tests, testing race conditions, testing in production, logging and monitoring, following popular paths, using hot-swappable rollbacks, and running your business on the application.
Get Your Software Speaking SMS With Esendex
Jack Thorley, Software Developer, Esendex
Jack Thorley, software developer at Esendex, will be demonstrating how easy it is to get your software s peaking SMS using Esendex’s API. Jack will talk you through what Esendex’s API can do, offer tips, best practices and some great ideas on how to use SMS to revolutionise your business communications. Bring your laptop along if you’d like to try it out for yourself.
The Selfish Stack [FutureStack16 NYC]
The document discusses the transition from a monolithic "selfish stack" architecture to a microservices architecture using containers, monitoring, and automation. Key points:
- The initial microservices approach led to scaling issues and manual work.
- Monitoring of individual services and containers using New Relic provided visibility.
- Using Mesos/Marathon for container orchestration addressed configuration, routing, resource usage, and health checks.
- Continuous delivery was enabled through automated canary deployments monitored by New Relic to safely roll out changes.
- The new approach reduced pain points by making the system self-managing and focused on its own integrity and resources.
Recommended
RFID tag installation
An overview of what is involved in installing RFID tags. Includes: the challenges faced; what can go wrong; costs involved; and forward planning. Presented by Mike Parsons of The Tagging Team at the SLIC/JISC RSCs in Scotland RFID event held in Glasgow on 17 Sept 2008.
KraQA#39 - Jak testowac tool do testow
The document discusses principles of continuous delivery including building quality in from the start, automating as much as possible while keeping everything in version control, testing in a production-like environment, and maintaining a simple and consistent delivery process. It emphasizes the importance of frequent releases to catch issues early, notes that testing does not ensure 100% confidence, and advocates for continuous improvement through a plan-do-study-act approach with each release representing the next stage. Continuous delivery helps reduce errors, lower stress, and gather valuable user feedback.
HOW TO SCALE YOUR ONCALL OPERATION, AND SURVIVE TO TELL, ANTON DRUKH
“Being oncall sucks. But it doesn’t have to!” We all heard this one before. Why is it though, that oncall still remains the biggest scar for many? What can a modern Engineering org do to rein the oncall dragons, and actually help people grow as professionals as they go oncall?
In this talk, I will present the main reasons why oncall is difficult in modern orgs, and describe ways to mitigate these hardships. The idea is that oncall is often the ‘backroom’ of an org, where all the technical and organizational debt take their toll. Be it unwieldy systems or broken processes between teams, oncall checks all the ‘weak boxes’. Therefore, the only way to win at oncall is to sort out your debts, starting with the organizational ones.
I will dive into the detail of the oncall rotation at Snyk as the org scaled from 1 to 220 people, what worked well about it, and what was less than perfect. I will discuss the decisions made to turn oncall into a building block of the org, and show a path to rein oncall in your organization as well.
Quality Assurance in Scrum
This document contains slides from a 2010 presentation on testing in Scrum. It discusses key Scrum principles like iterations, self-organizing cross-functional teams, and continuous improvement. The slides cover testing practices like test-driven development, having no separate test team, continuous testing, and automating tests from the unit to GUI levels. User stories and their elements are explained. The document advocates testing that follows the Scrum process and values working software over documentation.
Sage run error checking
Sage Line 50 - why it is vital to run error checking. Backup files may be useless if they contain errors.
Testing The User Centric Web
This document outlines tips for testing new web applications. It begins with an agenda that includes a history of Web 2.0, a test exercise, and tips and ideas for testing. The presenter then provides 9 tips for testing new web applications, such as testing in a dirty environment, integrating tests with software, segmenting automated tests, testing race conditions, testing in production, logging and monitoring, following popular paths, using hot-swappable rollbacks, and running your business on the application.
Get Your Software Speaking SMS With Esendex
Jack Thorley, Software Developer, Esendex
Jack Thorley, software developer at Esendex, will be demonstrating how easy it is to get your software s peaking SMS using Esendex’s API. Jack will talk you through what Esendex’s API can do, offer tips, best practices and some great ideas on how to use SMS to revolutionise your business communications. Bring your laptop along if you’d like to try it out for yourself.
The Selfish Stack [FutureStack16 NYC]
The document discusses the transition from a monolithic "selfish stack" architecture to a microservices architecture using containers, monitoring, and automation. Key points:
- The initial microservices approach led to scaling issues and manual work.
- Monitoring of individual services and containers using New Relic provided visibility.
- Using Mesos/Marathon for container orchestration addressed configuration, routing, resource usage, and health checks.
- Continuous delivery was enabled through automated canary deployments monitored by New Relic to safely roll out changes.
- The new approach reduced pain points by making the system self-managing and focused on its own integrity and resources.
Metrics 4 faster feedback
1) Devops aims to break down barriers between development and operations teams through a culture of collaboration, automation of processes, and using metrics to improve performance.
2) Automating builds, testing, deployments, and infrastructure management is key to ensure quality and allow teams to deploy changes quickly.
3) Collecting various metrics about code, deployments, systems, applications and business helps teams understand performance, identify issues, and continuously improve.
4) Sharing metrics, experiences, and code openly helps spread best practices and prevents teams from being locked into proprietary solutions.
Intro to Puppet Enterprise Webinar 07.27.2017
This document provides an introduction and overview of Puppet Enterprise. It begins with an agenda for the meeting and introductions of the speakers. It then discusses challenges organizations face with digital transformation, DevOps initiatives, and other trends. The core of Puppet Enterprise is to define configurations once and automate them endlessly across all environments. It allows organizations to know what they have, control and enforce consistency, secure and ensure compliance, and modernize infrastructure. Puppet Enterprise provides capabilities for defining and deploying policies, continuously monitoring for drift, and gaining visibility to prove compliance. It delivers significant benefits and results for customers such as increased deployment speed, fewer outages, and reduced security fix time. The document concludes by discussing where to start
Agile Fundamentals and Best Practices (with Trello)
This document provides an overview of agile fundamentals and best practices. It outlines key concepts of Scrum like the product owner, development team, and sprint process. It also describes agile practices such as sprint planning, getting user feedback, testing, and using Trello for project management. The document is intended to recap agile concepts for the author's team.
Moving to tdd bdd
Technical stream: Moving to test- and behaviour-driven development
In this session Kim will be going over the benefits of introducing TDD and BDD: How to introduce them, their differences, how to deal with push back from team members and upper management.
The benefits of driving our development with tests, how it helps the quality and maintainability of our software, how it helps the business and the client. The types of tests that best serve us for the different layers of our application development and how business people can get benefit from TDD and especially BDD.
When Kim’s not working at his day job as a senior software engineer, consultant, Scrum Master, you can find him indulging his passions of software architecture, creating and exploiting software and networks. In order to develop and release software faster, it's Kim’s aim to increase the awareness for the need of higher quality incremental software releases.
Monitoring Far Beyond the Operating System - WeOp 2014
It discusses various aspects such as the implementation of monitoring solutions, the significance of automation in incident management, integration via APIs, prioritization of incidents, and the involvement of senior team members in the implementation and management processes. Additionally, it stresses the importance of revisiting and adjusting processes periodically to ensure effectiveness and adherence. Overall, it underscores the crucial role of both people and processes in maintaining a robust IT environment.
DevOps - Understanding Core Concepts (Old)
my understanding of fundamentals of DevOps and how it relates conceptually to Agile, Scrum, Kanban, etc.
SlideShare does not allow uploading a new version of existing presentation. Hence I have to upload the new verson.
Goto https://www.slideshare.net/nitinbhide/devops-understanding-core-concepts for latest version.
Luiz Fernando Testa Contador - Aplicando DevOps em grandes corporações
DevOps is a culture and practice that aims to unify software development and IT operations. While DevOps provides benefits for startups through increased agility, implementing DevOps in large corporations faces challenges due to rigid structures. To adopt DevOps, enterprises must change their culture and team structures, sharing technical skills across departments and investing in new architectures like microservices and containers. Enterprises should start small with a minimum viable product approach, focusing first on continuous integration and delivery before continuous deployment. Maturity evaluations can identify areas for improvement and guide a roadmap for DevOps transformation.
How to Ace Your First 6 Months as a New PM by Empatico PM
In this presentation you will see a list of research tasks to do in the first 30 days of your job, examples of projects you can work on in your first 6 months and tools to track progress in your new gig and, finally, tactics to set expectations and make sure your boss and stakeholders are satisfied with your work.
What they don't tell you about micro-services
A conference talk I gave at QConNY.
Who could say no to services that were fully testable, easy to scale, easy to re-write, composable, etc. You read a few books about micro-services and now you're hooked. Those blog posts by Martin Fowler made it sound so easy. Adrian Cockcroft’s videos were so convincing. All of the open source tools out there were going to make this a snap. But now you’re six months in and realize that it's not all so easy. We’ll discuss 6 things we wish we had known when we started our journey.
SPOILER ALERT: It is still worth it.
Topics we’ll cover:
Service Discovery and You
Databases
Testing; how hard can it be?
Dependencies shmependencies
Monitoring? Why would my monitoring be different?
Tools: your current ones have to evolve
Experiment Your Way to Product Success: How User Acceptance Testing Can Save ...
Before a new product or feature goes into development, you have to gauge whether it will be a worthwhile investment. You don’t want to spend time and money building a product that no one will use. But what’s the best way to do so - and how can you get honest insights from your end users?
Join J.B. Siegel, VP of Client Services at Seamgen, as he explores how to use wireframes and clickable prototypes to validate your product. He’ll discuss how user testing allows you to really understand your users - and how to use the insights to inform your product strategy
The Final Frontier, Automating Dynamic Security Testing
This is not your normal DevSecOps presentation. We’re going to take on the most difficult aspect of security automation, the dreaded and pitfall prone, dynamic testing. You want to shift left and automate all the things, but DAST specifically has many thorns. How do you ensure what you’re testing matches production? Do devs own the environment? On metal, docker, kubernetes, or docker-compose? Test coverage? Balancing all these elements and more is not easy. Especially if you want to create a single, scalable, standard for your entire org. In this talk, we’ll cover what is needed to start automating your dynamic security testing, how to navigate the trade-offs you’ll have to consider, and finally how best to fit automated DAST testing into your software delivery pipelines. We’ll discuss simple and easy steps to gain efficiency and how to scale to mature pipelines that require little to no human intervention.
CD in Machine Learning Systems
This talk will focus on Techniques, metrics and different tests (code, models, infra and features/data) that help the developers of machine learning systems to achieve CD.
Services, tools & practices for a software house
An overview of simple tools, practises and services any software house or development team should consider - add to its work cycle.
Intro to Puppet Enterprise for a Windows Environment - 08.23
If you're new to Puppet Enterprise, this is the on-demand webinar for you. You'll learn how Puppet helps lay the foundation for your DevOps practices, treat infrastructure as code, and achieve better collaboration between dev, ops, InfoSec, and networking.
You'll see why thousands of companies rely on Puppet to automate the delivery and operation of their software and see it in action with a live demo.
In this recording we will show you the following in a Windows environment:
- Installation of an agent
- Managing resources (packages, files, services, etc.)
- Granular visibility through reporting
- Managing change for more efficient workflows
Test strategicaly
This document discusses the importance of having a testing strategy and outlines key aspects to consider when developing a testing strategy. It notes that a testing strategy should identify the goals of the system, qualify failure tolerance, identify non-functional requirements, and explain how different parts of the system will be tested. The strategy also needs to consider risks, manage costs, and adapt over time based on lessons learned. Regularly reviewing issues and adapting the strategy can help improve quality.
Getting It Done
Some considerations for the software development process.
If you were present when I gave this talk at php|tek, please consider leaving me some feedback: http://joind.in/189
Agile Release Management Best Practices
This document discusses best practices for agile release management for Salesforce admins. It recommends setting up a sandbox structure for different stages of development and testing. Key benefits of agile release management include more frequent releases with shorter response times to changes. Best practices include using version control, having rollback strategies, collaborating with others on reviews, and communicating schedules. It suggests adopting agile frameworks to release iteratively in time-boxed sprints. Overall, the document provides guidance on implementing agile processes and tools to streamline releases of Salesforce configurations and applications.
DOES14: Scott Prugh, CSG - DevOps and Lean in Legacy Environments
Startups are continually evangelizing DevOps to be able to reduce risk, hasten feedback and deploy 1000’s of times a day. But what about the rest of the world that comes from Waterfall, Mainframes, Long Release Cycles and Risk Aversion? Learn how one company went from 480 day lead times and 6 month releases to 3 month releases with high levels of automation and increased quality across disparate legacy environments. We will discuss how Optimizing People & Organizations, Increasing the Rate of Learning, Deploying Innovative Tools and Lean System Thinking can help large scale enterprises increase throughput while decreasing cost and risk.
Managing Data Science Projects
Explore Microsoft's Team Data Science Process, an agile, iterative data science methodology to deliver predictive analytics solutions and intelligent applications efficiently
Learn best practices for managing and creating value from data science projects
The Most Important Thing: How Mozilla Does Security and What You Can Steal
The document discusses Mozilla's approach to software security and provides recommendations for how to implement an effective security process. Some of the key points covered include:
1) Security is not a linear process and should have feedback loops to continuously learn from problems and prevent recurrences.
2) The most important thing is to systematically capture knowledge from security incidents to avoid repeating mistakes.
3) Extensive testing is critical to maintain security and catch issues early, with Mozilla running over 55,000 automated tests daily.
4) Code reviews should be mandatory to catch mistakes and spread security knowledge throughout the organization.
JavaLand 2024: Application Development Green Masterplan
My presentation slides I used at JavaLand 2024
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Simplify your search for a reliable Python development partner! This list presents the top 10 trusted US providers offering comprehensive Python development services, ensuring your project's success from conception to completion.
More Related Content
Similar to How to Usher in a new Monitoring System
Metrics 4 faster feedback
1) Devops aims to break down barriers between development and operations teams through a culture of collaboration, automation of processes, and using metrics to improve performance.
2) Automating builds, testing, deployments, and infrastructure management is key to ensure quality and allow teams to deploy changes quickly.
3) Collecting various metrics about code, deployments, systems, applications and business helps teams understand performance, identify issues, and continuously improve.
4) Sharing metrics, experiences, and code openly helps spread best practices and prevents teams from being locked into proprietary solutions.
Intro to Puppet Enterprise Webinar 07.27.2017
This document provides an introduction and overview of Puppet Enterprise. It begins with an agenda for the meeting and introductions of the speakers. It then discusses challenges organizations face with digital transformation, DevOps initiatives, and other trends. The core of Puppet Enterprise is to define configurations once and automate them endlessly across all environments. It allows organizations to know what they have, control and enforce consistency, secure and ensure compliance, and modernize infrastructure. Puppet Enterprise provides capabilities for defining and deploying policies, continuously monitoring for drift, and gaining visibility to prove compliance. It delivers significant benefits and results for customers such as increased deployment speed, fewer outages, and reduced security fix time. The document concludes by discussing where to start
Agile Fundamentals and Best Practices (with Trello)
This document provides an overview of agile fundamentals and best practices. It outlines key concepts of Scrum like the product owner, development team, and sprint process. It also describes agile practices such as sprint planning, getting user feedback, testing, and using Trello for project management. The document is intended to recap agile concepts for the author's team.
Moving to tdd bdd
Technical stream: Moving to test- and behaviour-driven development
In this session Kim will be going over the benefits of introducing TDD and BDD: How to introduce them, their differences, how to deal with push back from team members and upper management.
The benefits of driving our development with tests, how it helps the quality and maintainability of our software, how it helps the business and the client. The types of tests that best serve us for the different layers of our application development and how business people can get benefit from TDD and especially BDD.
When Kim’s not working at his day job as a senior software engineer, consultant, Scrum Master, you can find him indulging his passions of software architecture, creating and exploiting software and networks. In order to develop and release software faster, it's Kim’s aim to increase the awareness for the need of higher quality incremental software releases.
Monitoring Far Beyond the Operating System - WeOp 2014
It discusses various aspects such as the implementation of monitoring solutions, the significance of automation in incident management, integration via APIs, prioritization of incidents, and the involvement of senior team members in the implementation and management processes. Additionally, it stresses the importance of revisiting and adjusting processes periodically to ensure effectiveness and adherence. Overall, it underscores the crucial role of both people and processes in maintaining a robust IT environment.
DevOps - Understanding Core Concepts (Old)
my understanding of fundamentals of DevOps and how it relates conceptually to Agile, Scrum, Kanban, etc.
SlideShare does not allow uploading a new version of existing presentation. Hence I have to upload the new verson.
Goto https://www.slideshare.net/nitinbhide/devops-understanding-core-concepts for latest version.
Luiz Fernando Testa Contador - Aplicando DevOps em grandes corporações
DevOps is a culture and practice that aims to unify software development and IT operations. While DevOps provides benefits for startups through increased agility, implementing DevOps in large corporations faces challenges due to rigid structures. To adopt DevOps, enterprises must change their culture and team structures, sharing technical skills across departments and investing in new architectures like microservices and containers. Enterprises should start small with a minimum viable product approach, focusing first on continuous integration and delivery before continuous deployment. Maturity evaluations can identify areas for improvement and guide a roadmap for DevOps transformation.
How to Ace Your First 6 Months as a New PM by Empatico PM
In this presentation you will see a list of research tasks to do in the first 30 days of your job, examples of projects you can work on in your first 6 months and tools to track progress in your new gig and, finally, tactics to set expectations and make sure your boss and stakeholders are satisfied with your work.
What they don't tell you about micro-services
A conference talk I gave at QConNY.
Who could say no to services that were fully testable, easy to scale, easy to re-write, composable, etc. You read a few books about micro-services and now you're hooked. Those blog posts by Martin Fowler made it sound so easy. Adrian Cockcroft’s videos were so convincing. All of the open source tools out there were going to make this a snap. But now you’re six months in and realize that it's not all so easy. We’ll discuss 6 things we wish we had known when we started our journey.
SPOILER ALERT: It is still worth it.
Topics we’ll cover:
Service Discovery and You
Databases
Testing; how hard can it be?
Dependencies shmependencies
Monitoring? Why would my monitoring be different?
Tools: your current ones have to evolve
Experiment Your Way to Product Success: How User Acceptance Testing Can Save ...
Before a new product or feature goes into development, you have to gauge whether it will be a worthwhile investment. You don’t want to spend time and money building a product that no one will use. But what’s the best way to do so - and how can you get honest insights from your end users?
Join J.B. Siegel, VP of Client Services at Seamgen, as he explores how to use wireframes and clickable prototypes to validate your product. He’ll discuss how user testing allows you to really understand your users - and how to use the insights to inform your product strategy
The Final Frontier, Automating Dynamic Security Testing
This is not your normal DevSecOps presentation. We’re going to take on the most difficult aspect of security automation, the dreaded and pitfall prone, dynamic testing. You want to shift left and automate all the things, but DAST specifically has many thorns. How do you ensure what you’re testing matches production? Do devs own the environment? On metal, docker, kubernetes, or docker-compose? Test coverage? Balancing all these elements and more is not easy. Especially if you want to create a single, scalable, standard for your entire org. In this talk, we’ll cover what is needed to start automating your dynamic security testing, how to navigate the trade-offs you’ll have to consider, and finally how best to fit automated DAST testing into your software delivery pipelines. We’ll discuss simple and easy steps to gain efficiency and how to scale to mature pipelines that require little to no human intervention.
CD in Machine Learning Systems
This talk will focus on Techniques, metrics and different tests (code, models, infra and features/data) that help the developers of machine learning systems to achieve CD.
Services, tools & practices for a software house
An overview of simple tools, practises and services any software house or development team should consider - add to its work cycle.
Intro to Puppet Enterprise for a Windows Environment - 08.23
If you're new to Puppet Enterprise, this is the on-demand webinar for you. You'll learn how Puppet helps lay the foundation for your DevOps practices, treat infrastructure as code, and achieve better collaboration between dev, ops, InfoSec, and networking.
You'll see why thousands of companies rely on Puppet to automate the delivery and operation of their software and see it in action with a live demo.
In this recording we will show you the following in a Windows environment:
- Installation of an agent
- Managing resources (packages, files, services, etc.)
- Granular visibility through reporting
- Managing change for more efficient workflows
Test strategicaly
This document discusses the importance of having a testing strategy and outlines key aspects to consider when developing a testing strategy. It notes that a testing strategy should identify the goals of the system, qualify failure tolerance, identify non-functional requirements, and explain how different parts of the system will be tested. The strategy also needs to consider risks, manage costs, and adapt over time based on lessons learned. Regularly reviewing issues and adapting the strategy can help improve quality.
Getting It Done
Some considerations for the software development process.
If you were present when I gave this talk at php|tek, please consider leaving me some feedback: http://joind.in/189
Agile Release Management Best Practices
This document discusses best practices for agile release management for Salesforce admins. It recommends setting up a sandbox structure for different stages of development and testing. Key benefits of agile release management include more frequent releases with shorter response times to changes. Best practices include using version control, having rollback strategies, collaborating with others on reviews, and communicating schedules. It suggests adopting agile frameworks to release iteratively in time-boxed sprints. Overall, the document provides guidance on implementing agile processes and tools to streamline releases of Salesforce configurations and applications.
DOES14: Scott Prugh, CSG - DevOps and Lean in Legacy Environments
Startups are continually evangelizing DevOps to be able to reduce risk, hasten feedback and deploy 1000’s of times a day. But what about the rest of the world that comes from Waterfall, Mainframes, Long Release Cycles and Risk Aversion? Learn how one company went from 480 day lead times and 6 month releases to 3 month releases with high levels of automation and increased quality across disparate legacy environments. We will discuss how Optimizing People & Organizations, Increasing the Rate of Learning, Deploying Innovative Tools and Lean System Thinking can help large scale enterprises increase throughput while decreasing cost and risk.
Managing Data Science Projects
Explore Microsoft's Team Data Science Process, an agile, iterative data science methodology to deliver predictive analytics solutions and intelligent applications efficiently
Learn best practices for managing and creating value from data science projects
The Most Important Thing: How Mozilla Does Security and What You Can Steal
The document discusses Mozilla's approach to software security and provides recommendations for how to implement an effective security process. Some of the key points covered include:
1) Security is not a linear process and should have feedback loops to continuously learn from problems and prevent recurrences.
2) The most important thing is to systematically capture knowledge from security incidents to avoid repeating mistakes.
3) Extensive testing is critical to maintain security and catch issues early, with Mozilla running over 55,000 automated tests daily.
4) Code reviews should be mandatory to catch mistakes and spread security knowledge throughout the organization.
Similar to How to Usher in a new Monitoring System (20)
Agile Fundamentals and Best Practices (with Trello)
Agile Fundamentals and Best Practices (with Trello)
Monitoring Far Beyond the Operating System - WeOp 2014
Monitoring Far Beyond the Operating System - WeOp 2014
Luiz Fernando Testa Contador - Aplicando DevOps em grandes corporações
Luiz Fernando Testa Contador - Aplicando DevOps em grandes corporações
How to Ace Your First 6 Months as a New PM by Empatico PM
How to Ace Your First 6 Months as a New PM by Empatico PM
Experiment Your Way to Product Success: How User Acceptance Testing Can Save ...
Experiment Your Way to Product Success: How User Acceptance Testing Can Save ...
The Final Frontier, Automating Dynamic Security Testing
The Final Frontier, Automating Dynamic Security Testing
Intro to Puppet Enterprise for a Windows Environment - 08.23
Intro to Puppet Enterprise for a Windows Environment - 08.23
DOES14: Scott Prugh, CSG - DevOps and Lean in Legacy Environments
DOES14: Scott Prugh, CSG - DevOps and Lean in Legacy Environments
The Most Important Thing: How Mozilla Does Security and What You Can Steal
The Most Important Thing: How Mozilla Does Security and What You Can Steal
Recently uploaded
JavaLand 2024: Application Development Green Masterplan
My presentation slides I used at JavaLand 2024
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Simplify your search for a reliable Python development partner! This list presents the top 10 trusted US providers offering comprehensive Python development services, ensuring your project's success from conception to completion.
Fueling AI with Great Data with Airbyte Webinar
This talk will focus on how to collect data from a variety of sources, leveraging this data for RAG and other GenAI use cases, and finally charting your course to productionalization.
Session 1 - Intro to Robotic Process Automation.pdf
👉 Check out our full 'Africa Series - Automation Student Developers (EN)' page to register for the full program:
https://bit.ly/Automation_Student_Kickstart
In this session, we shall introduce you to the world of automation, the UiPath Platform, and guide you on how to install and setup UiPath Studio on your Windows PC.
📕 Detailed agenda:
What is RPA? Benefits of RPA?
RPA Applications
The UiPath End-to-End Automation Platform
UiPath Studio CE Installation and Setup
💻 Extra training through UiPath Academy:
Introduction to Automation
UiPath Business Automation Platform
Explore automation development with UiPath Studio
👉 Register here for our upcoming Session 2 on June 20: Introduction to UiPath Studio Fundamentals: https://community.uipath.com/events/details/uipath-lagos-presents-session-2-introduction-to-uipath-studio-fundamentals/
Taking AI to the Next Level in Manufacturing.pdf
Read Taking AI to the Next Level in Manufacturing to gain insights on AI adoption in the manufacturing industry, such as:
1. How quickly AI is being implemented in manufacturing.
2. Which barriers stand in the way of AI adoption.
3. How data quality and governance form the backbone of AI.
4. Organizational processes and structures that may inhibit effective AI adoption.
6. Ideas and approaches to help build your organization's AI strategy.
High performance Serverless Java on AWS- GoTo Amsterdam 2024
Java is for many years one of the most popular programming languages, but it used to have hard times in the Serverless community. Java is known for its high cold start times and high memory footprint, comparing to other programming languages like Node.js and Python. In this talk I'll look at the general best practices and techniques we can use to decrease memory consumption, cold start times for Java Serverless development on AWS including GraalVM (Native Image) and AWS own offering SnapStart based on Firecracker microVM snapshot and restore and CRaC (Coordinated Restore at Checkpoint) runtime hooks. I'll also provide a lot of benchmarking on Lambda functions trying out various deployment package sizes, Lambda memory settings, Java compilation options and HTTP (a)synchronous clients and measure their impact on cold and warm start times.
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
The typical problem in product engineering is not bad strategy, so much as “no strategy”. This leads to confusion, lack of motivation, and incoherent action. The next time you look for a strategy and find an empty space, instead of waiting for it to be filled, I will show you how to fill it in yourself. If you’re wrong, it forces a correction. If you’re right, it helps create focus. I’ll share how I’ve approached this in the past, both what works and lessons for what didn’t work so well.
Northern Engraving | Nameplate Manufacturing Process - 2024
Manufacturing custom quality metal nameplates and badges involves several standard operations. Processes include sheet prep, lithography, screening, coating, punch press and inspection. All decoration is completed in the flat sheet with adhesive and tooling operations following. The possibilities for creating unique durable nameplates are endless. How will you create your brand identity? We can help!
Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians
Dmitrii Kamaev, PhD
Senior Product Owner - QIAGEN
Leveraging the Graph for Clinical Trials and Standards
Katja Glaß
OpenStudyBuilder Community Manager - Katja Glaß Consulting
Marius Conjeaud
Principal Consultant - Neo4j
"Scaling RAG Applications to serve millions of users", Kevin Goedecke
How we managed to grow and scale a RAG application from zero to thousands of users in 7 months. Lessons from technical challenges around managing high load for LLMs, RAGs and Vector databases.
GNSS spoofing via SDR (Criptored Talks 2024)
In the realm of cybersecurity, offensive security practices act as a critical shield. By simulating real-world attacks in a controlled environment, these techniques expose vulnerabilities before malicious actors can exploit them. This proactive approach allows manufacturers to identify and fix weaknesses, significantly enhancing system security.
This presentation delves into the development of a system designed to mimic Galileo's Open Service signal using software-defined radio (SDR) technology. We'll begin with a foundational overview of both Global Navigation Satellite Systems (GNSS) and the intricacies of digital signal processing.
The presentation culminates in a live demonstration. We'll showcase the manipulation of Galileo's Open Service pilot signal, simulating an attack on various software and hardware systems. This practical demonstration serves to highlight the potential consequences of unaddressed vulnerabilities, emphasizing the importance of offensive security practices in safeguarding critical infrastructure.
Main news related to the CCS TSI 2023 (2023/1695)
An English 🇬🇧 translation of a presentation to the speech I gave about the main changes brought by CCS TSI 2023 at the biggest Czech conference on Communications and signalling systems on Railways, which was held in Clarion Hotel Olomouc from 7th to 9th November 2023 (konferenceszt.cz). Attended by around 500 participants and 200 on-line followers.
The original Czech 🇨🇿 version of the presentation can be found here: https://www.slideshare.net/slideshow/hlavni-novinky-souvisejici-s-ccs-tsi-2023-2023-1695/269688092 .
The videorecording (in Czech) from the presentation is available here: https://youtu.be/WzjJWm4IyPk?si=SImb06tuXGb30BEH .
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
This LF Energy webinar took place June 20, 2024. It featured:
-Alex Thornton, LF Energy
-Hallie Cramer, Google
-Daniel Roesler, UtilityAPI
-Henry Richardson, WattTime
In response to the urgency and scale required to effectively address climate change, open source solutions offer significant potential for driving innovation and progress. Currently, there is a growing demand for standardization and interoperability in energy data and modeling. Open source standards and specifications within the energy sector can also alleviate challenges associated with data fragmentation, transparency, and accessibility. At the same time, it is crucial to consider privacy and security concerns throughout the development of open source platforms.
This webinar will delve into the motivations behind establishing LF Energy’s Carbon Data Specification Consortium. It will provide an overview of the draft specifications and the ongoing progress made by the respective working groups.
Three primary specifications will be discussed:
-Discovery and client registration, emphasizing transparent processes and secure and private access
-Customer data, centering around customer tariffs, bills, energy usage, and full consumption disclosure
-Power systems data, focusing on grid data, inclusive of transmission and distribution networks, generation, intergrid power flows, and market settlement data
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift
Overview
Dive into the world of anomaly detection on edge devices with our comprehensive hands-on tutorial. This SlideShare presentation will guide you through the entire process, from data collection and model training to edge deployment and real-time monitoring. Perfect for those looking to implement robust anomaly detection systems on resource-constrained IoT/edge devices.
Key Topics Covered
1. Introduction to Anomaly Detection
- Understand the fundamentals of anomaly detection and its importance in identifying unusual behavior or failures in systems.
2. Understanding Edge (IoT)
- Learn about edge computing and IoT, and how they enable real-time data processing and decision-making at the source.
3. What is ArgoCD?
- Discover ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes, and its role in deploying applications on edge devices.
4. Deployment Using ArgoCD for Edge Devices
- Step-by-step guide on deploying anomaly detection models on edge devices using ArgoCD.
5. Introduction to Apache Kafka and S3
- Explore Apache Kafka for real-time data streaming and Amazon S3 for scalable storage solutions.
6. Viewing Kafka Messages in the Data Lake
- Learn how to view and analyze Kafka messages stored in a data lake for better insights.
7. What is Prometheus?
- Get to know Prometheus, an open-source monitoring and alerting toolkit, and its application in monitoring edge devices.
8. Monitoring Application Metrics with Prometheus
- Detailed instructions on setting up Prometheus to monitor the performance and health of your anomaly detection system.
9. What is Camel K?
- Introduction to Camel K, a lightweight integration framework built on Apache Camel, designed for Kubernetes.
10. Configuring Camel K Integrations for Data Pipelines
- Learn how to configure Camel K for seamless data pipeline integrations in your anomaly detection workflow.
11. What is a Jupyter Notebook?
- Overview of Jupyter Notebooks, an open-source web application for creating and sharing documents with live code, equations, visualizations, and narrative text.
12. Jupyter Notebooks with Code Examples
- Hands-on examples and code snippets in Jupyter Notebooks to help you implement and test anomaly detection models.
Skybuffer SAM4U tool for SAP license adoption
Manage and optimize your license adoption and consumption with SAM4U, an SAP free customer software asset management tool.
SAM4U, an SAP complimentary software asset management tool for customers, delivers a detailed and well-structured overview of license inventory and usage with a user-friendly interface. We offer a hosted, cost-effective, and performance-optimized SAM4U setup in the Skybuffer Cloud environment. You retain ownership of the system and data, while we manage the ABAP 7.58 infrastructure, ensuring fixed Total Cost of Ownership (TCO) and exceptional services through the SAP Fiori interface.
How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf
A Mix Chart displays historical data of numbers in a graphical or tabular form. The Kalyan Rajdhani Mix Chart specifically shows the results of a sequence of numbers over different periods.
Astute Business Solutions | Oracle Cloud Partner |
Your goto partner for Oracle Cloud, PeopleSoft, E-Business Suite, and Ellucian Banner. We are a firm specialized in managed services and consulting.
Recently uploaded (20)
JavaLand 2024: Application Development Green Masterplan
JavaLand 2024: Application Development Green Masterplan
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Your One-Stop Shop for Python Success: Top 10 US Python Development Providers
Session 1 - Intro to Robotic Process Automation.pdf
Session 1 - Intro to Robotic Process Automation.pdf
High performance Serverless Java on AWS- GoTo Amsterdam 2024
High performance Serverless Java on AWS- GoTo Amsterdam 2024
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
[OReilly Superstream] Occupy the Space: A grassroots guide to engineering (an...
Northern Engraving | Nameplate Manufacturing Process - 2024
Northern Engraving | Nameplate Manufacturing Process - 2024
Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians
Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians
Leveraging the Graph for Clinical Trials and Standards
Leveraging the Graph for Clinical Trials and Standards
"Scaling RAG Applications to serve millions of users", Kevin Goedecke
"Scaling RAG Applications to serve millions of users", Kevin Goedecke
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
LF Energy Webinar: Carbon Data Specifications: Mechanisms to Improve Data Acc...
Monitoring and Managing Anomaly Detection on OpenShift.pdf
Monitoring and Managing Anomaly Detection on OpenShift.pdf
How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf
How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf
Astute Business Solutions | Oracle Cloud Partner |
Astute Business Solutions | Oracle Cloud Partner |
How to Usher in a new Monitoring System
- 1. How to Usher in a New Monitoring System
- 2. Nikita Ostrovsky ▶ Devops Data Architect at Pulsepoint ▶ twitter.com/nikgrok ▶ github.com/nikgrok ▶ nostrovsky@pulsepoint.com
- 3. ▶ Real-time ad exchange. ▶ 40+ Billion Impressions per day ▶ 150+ Billion bids made per day ▶ Log Aggr & Prometheus ▶ We’re Hiring! ▶ Devopsy DBA and Developers
- 4. Why a new Monitoring System? ▶ Alerting ▶ >80% Signal to Noise Ratio ▶ Troubleshooting ▶ >300% faster remediation times ▶ Capacity Planning ▶ Bottleneck Tracking ▶ Sprint Planning ▶ Core of your tech stack
- 5. Steps ▶ Find your pain points and Criteria ▶ Identify your Holy Beacon of Truth ▶ Try to go Use-Case by Use-Case ▶ Evangalize. ▶ Be prepared to fight some hard battles. ▶ Shutdown the old one and go out drinking.
- 6. Setting Criteria and Choosing a Tool ▶ If you want to build your own. Don’t! Stop! Run Away! ▶ Figure out your pain points ▶ Scale ▶ Query Language ▶ Ability to Visualize ▶ Usability ▶ Alertability ▶ Robust, Scalable, Blah, Blah, Blah ▶ Don’t expect any buy-in during this step
- 7. Identify (or build) your Holy Beacon of Truth ▶ Foundation of your Monitoring Platform ▶ Allows you to Flesh out Ownership ▶ Owner is your most important piece of metadata ▶ Dynamic ▶ Complete ▶ Metadata Support(tags, labels, etc) ▶ Possibly 2ndary metadata store ▶ Mesos/Kubernetes is not enough ▶ We love Consul for this
- 8. Try to go Use-Case by Use-Case ▶ Modular/Repeatable Solutions ▶ Seek out the easiest wins with the highest impact ▶ Be Customer Focused ▶ Every unique delivered Use-Case gives you another person talking about it. ▶ Give other teams the tools to do it themselves.
- 9. Evangelize. ▶ Do demos/lunch and learns ▶ Be in every post-mortem ▶ Try to build highly visible dashboards ▶ And make them highly visible. ▶ Use instantly recognizable units. ▶ Vcore Seconds vs $ ▶ Absolutely no new features or changes to the old system unless necessary
- 10. Fight the hard battles ▶ As you progress, you will start to see some push back ▶ Ownership ▶ Developers receiving alerts ▶ Division of responsibilities ▶ Stay confident. ▶ Your job is to deliver an API to the monitoring system, not get people to migrate. ▶ Most battles fizzle out when you have >75% Signal to Noise Ratio
- 11. Some Final Notes ▶ Be Prepared to Shave a lot of Yaks ▶ Stability is key once you start to deliver Use- Cases ▶ Differentiate ephemeral metrics from key ones early on ▶ Get a sense of Scale early on ▶ Try to compartmentalize solutions, but provide a way to share metrics ▶ Talk to other teams
- 12. Kill the old one and go out drinking
- 13. Thank you! ▶ Nikita Ostrovsky ▶ Devops Data Architect at Pulsepoint ▶ Chaotic-Good Cleric ▶ twitter.com/nikgrok ▶ github.com/nikgrok ▶ nostrovsky@pulsepoint.com