Introduction to PaaS for Application Developers
•
0 likes•502 views
This document is a presentation by Steven Pousty on introducing application developers to Platform as a Service (PaaS). It discusses what PaaS is, how it differs from Infrastructure as a Service like Amazon EC2, and how PaaS can make developing applications easier by automating processes. The presentation includes steps to deploy sample applications on OpenShift and encourages developers to try it for themselves.
Report
Share
Report
Share
Download to read offline
Recommended
Microservice vs. Monolithic Architecture
This presentation outlines the benefits of implementing a Microservice over a monolithic architecture.
Red Hat JBoss xPaaS Keynote at Devoxx Belgium 2014
JBoss, Infinite Possibilities
http://cfp.devoxx.be/2014/talk/RHZ-8081/JBoss,%20Infinite%20Possibilities
2015-07-11 Apache Taverna - BOSC 2015
Sustaining research software at the Apache Software Foundation
Presented at BOSC 2015, Dublin on 2015-07-11. http://www.open-bio.org/wiki/BOSC_2015
Source: http://slides.com/soilandreyes/20150611-bosc2015-apache
Four levels of HA in Cloud Foundry
Slides from my ignite talk at CF Summit 2014 on the four levels of HA in Cloud Foundry.
Four Levels of High Availability in Cloud Foundry (Cloud Foundry Summit 2014)
Cloud Foundry Summit 2014 Lightning Talk delivered by Cornelia Davis Platform Engineer, Cloud Foundry.
Platform as a Service is not just for the developer. It must provide equal or greater value to the application operator as well. The Cloud Foundry PaaS has four levels of HA built in! We explain each of them and show you how, collectively, they do an extraordinary job keeping application instances up and running in the face of failures. Your operators will spend less time on recovery and more time on innovation as a result.
Frontend Performance: Beginner to Expert to Crazy Person
There’s no such thing as fast enough. You can always make your website faster. This talk will show you how. The very first requirement of a great user experience is actually getting the bytes of that experience to the user before they they get tired and leave.In this talk we’ll start with the basics and get progressively insane. We’ll go over several frontend performance best practices, a few anti-patterns, the reasoning behind the rules, and how they’ve changed over the years. We’ll also look at some great tools to help you.
API and Microservices Meetup - To Code or Low Code?
Diverse perpectives of tools for microservices development
Recommended
Microservice vs. Monolithic Architecture
This presentation outlines the benefits of implementing a Microservice over a monolithic architecture.
Red Hat JBoss xPaaS Keynote at Devoxx Belgium 2014
JBoss, Infinite Possibilities
http://cfp.devoxx.be/2014/talk/RHZ-8081/JBoss,%20Infinite%20Possibilities
2015-07-11 Apache Taverna - BOSC 2015
Sustaining research software at the Apache Software Foundation
Presented at BOSC 2015, Dublin on 2015-07-11. http://www.open-bio.org/wiki/BOSC_2015
Source: http://slides.com/soilandreyes/20150611-bosc2015-apache
Four levels of HA in Cloud Foundry
Slides from my ignite talk at CF Summit 2014 on the four levels of HA in Cloud Foundry.
Four Levels of High Availability in Cloud Foundry (Cloud Foundry Summit 2014)
Cloud Foundry Summit 2014 Lightning Talk delivered by Cornelia Davis Platform Engineer, Cloud Foundry.
Platform as a Service is not just for the developer. It must provide equal or greater value to the application operator as well. The Cloud Foundry PaaS has four levels of HA built in! We explain each of them and show you how, collectively, they do an extraordinary job keeping application instances up and running in the face of failures. Your operators will spend less time on recovery and more time on innovation as a result.
Frontend Performance: Beginner to Expert to Crazy Person
There’s no such thing as fast enough. You can always make your website faster. This talk will show you how. The very first requirement of a great user experience is actually getting the bytes of that experience to the user before they they get tired and leave.In this talk we’ll start with the basics and get progressively insane. We’ll go over several frontend performance best practices, a few anti-patterns, the reasoning behind the rules, and how they’ve changed over the years. We’ll also look at some great tools to help you.
API and Microservices Meetup - To Code or Low Code?
Diverse perpectives of tools for microservices development
Mesos at OpenTable
UPDATE: This slide deck is superseded by http://www.slideshare.net/samsalisbury/mesos-at-opentable-talk-20151111
From talk I did at the London Mesos user group, October 23rd 014.
OWASP Top 10 - 2017The Ten Most Critical Web Application Sec.docx
OWASP Top 10 - 2017
The Ten Most Critical Web Application Security Risks
This work is licensed under a
Creative Commons Attribution-ShareAlike 4.0 International Licensehttps://owasp.org
https://creativecommons.org/licenses/by-sa/4.0/
http://creativecommons.org/licenses/by-sa/4.0/
1
Copyright and License
Copyright © 2003 – 2017 The OWASP Foundation
This document is released under the Creative Commons Attribution Share-Alike 4.0 license.
For any reuse or distribution, you must make it clear to others the license terms of this work.
Table of Contents About OWASP
The Open Web Application Security Project (OWASP) is an
open community dedicated to enabling organizations to
develop, purchase, and maintain applications and APIs that
can be trusted.
At OWASP, you'll find free and open:
• Application security tools and standards.
• Complete books on application security testing, secure
code development, and secure code review.
• Presentations and videos.
• Cheat sheets on many common topics.
• Standard security controls and libraries.
• Local chapters worldwide.
• Cutting edge research.
• Extensive conferences worldwide.
• Mailing lists.
Learn more at: https://www.owasp.org.
All OWASP tools, documents, videos, presentations, and
chapters are free and open to anyone interested in improving
application security.
We advocate approaching application security as a people,
process, and technology problem, because the most
effective approaches to application security require
improvements in these areas.
OWASP is a new kind of organization. Our freedom from
commercial pressures allows us to provide unbiased,
practical, and cost-effective information about application
security.
OWASP is not affiliated with any technology company,
although we support the informed use of commercial security
technology. OWASP produces many types of materials in a
collaborative, transparent, and open way.
The OWASP Foundation is the non-profit entity that ensures
the project's long-term success. Almost everyone associated
with OWASP is a volunteer, including the OWASP board,
chapter leaders, project leaders, and project members.
We support innovative security research with grants and
infrastructure.
Come join us!
TOC Table of Contents
TOC - About OWASP ……………………………… 1
FW - Foreword …………..………………...……… 2
I - Introduction ………..……………….……..… 3
RN - Release Notes …………..………….…..….. 4
Risk - Application Security Risks…………….…… 5
T10 - OWASP Top 10 Application Security
Risks – 2017 …………..……….....….…… 6
A1:2017 - Injection …….………..……………………… 7
A2:2017 - Broken Authentication ……………………... 8
A3:2017 - Sensitive Data Exposure ………………….. 9
A4:2017 - XML External Entities (XXE) ……………... 10
A5:2017 - Broken Access Control ……………...…….. 11
A6:2017 - Security Misconfiguration ………………….. 12
A7:2017 - Cross-Site Scripting (XSS) ….…………….. 13
A8:2017 - Insecure Deserialization ……………………14
A9:2017 - Using Components with Known
Vuln.
Origins of Serverless
Serverless is new trend in software development. It’s confusing many developers around the world. In this talk I’ll explain how to build not only crop images or select data from DynamoDB, but build real application, what kind of troubles are we should expect, how to make decision is your task fit into serverless architecture in Python or may be you should use, general approach. How fast serverless applications and more important how to scale it.
Orchestrating Legacy Services Into Contemporary RESTful WEB APIs With CA App ...
In this, hands-on, collaborative lab we will discuss the vision of CA App Services Orchestrator (CA ASO) and see the advantages of elegant and resilient RESTful APIs compared to legacy SOAP-based web services.
You’ll take pre-built SOAP services and marvel at the beautiful user experience that CA ASO provides to orchestrate them into resource-based APIs.
For more information, please visit http://cainc.to/Nv2VOe
Frontend Performance: De débutant à Expert à Fou Furieux
Frontend Performance Beginner to Expert to Crazy Person
The very first requirement of a great user experience is actually getting the bytes of that experience to the user before they they get tired and leave.
In this talk we'll start with the basics and get progressively insane. We'll go over several frontend performance best practices, a few anti-patterns, the reasoning behind the rules, and how they've changed over the years. We'll also look at some great tools to help you.
La performance front-end de débutant, à expert, à fou furieux !
La toute première condition nécessaire à une bonne expérience utilisateur est de pouvoir obtenir les octets de cette expérience avant que l'utilisateur ne se lasse et parte.
Nous débuterons cette conférence avec les bases pour progressivement devenir démentiel. Nous aborderons plusieurs des meilleurs pratiques de la performance front-end, quelques anti-patterns à éviter, le raisonnement derrière les règles, et comment ces dernières ont changé au fil des ans. Nous regarderons d'un peu plus près quelques très bon outils qui peuvent vous aider.
Tastypie: Easy APIs to Make Your Work Easier
On April 10, 2013, Eric Mattison gave a talk on Tastypie: Easy APIs to Make Your Work Easier.
"Have you ever dealt with any of these problems:
- Unwieldy, Scary-to-Change Applications?
- Long Development Cycles?
- Replicated Code?
- Scope Creep?
- Restless Leg Syndrome?
Tastypie can help you solve these problems and more!”
Empowering Developers to be Healthcare Heroes
Learn from Dr. Kevin Maloy in 1hr how to write Healthcare Apps to connect to EHR systems, instead of spending weeks to become fluent in HL7 SMART on FHIR standard. Kevin is a practicing, board-certified Emergency Medicine physician who also codes. The meetup recording (with Q&A) is at https://youtu.be/alB-45nu0lo
HTML5 WebSocket for the Real-Time Web and the Internet of Things
Abstract: In his talk Peter gives a brief introduction to WebSocket and discusses how real-time Web communications technologies can be applied to an always connected Web and mobile world. Then, he walks you through how to provide interactivity and collaboration by controlling physical objects remotely. The presentation features several live demonstrations of the concepts discussed throughout the session.
Frontend Performance: Beginner to Expert to Crazy Person
The very first requirement of a great user experience is actually getting the bytes of that experience to the user before they they get fed up and leave.
In this talk we'll start with the basics and get progressively insane. We'll go over several frontend performance best practices, a few anti-patterns, the reasoning behind the rules, and how they've changed over the years. We'll also look at some great tools to help you.
All Hail Our 'Bot Masters PHPNW14 Unconference
My talk from the PHPNW14 unconference track, October 4th 2014.
SAP TechED Las Vegas 2016- OEM Partners: Database Agenda
Discover SAP TechEd Las Vegas. Check out the premier SAP tech conference – created expressly for developers, engineers, and technologists. There’s a lot to choose from – we’ve put together an agenda that’s designed to meet your needs as an OEM Partner so you can tailor your experience
APIDays Australia - Openresty for scale
As CTO of a rapid growth FinTech one of my biggest challenges is rebuilding the platform to scale elastically plus still allowing for the rapid development and integration of core platform functionality. Even for fast prototyping and design Openresty allows for the quick integration for mobile and web services that can integrate with almost any database or stateless program logic allowing for faster than normal deployment and event geo based load balancing. Utilising NGINX ill show some of the ways i am overcoming some of the challenges by building a developer focused api platform that will allow the quick and easy deployment of new services while still maintaining the functionality needed by modern REST API design techniques. Also we will be looking at some of the additional functionality available to the Openresty suite including Machine Learning (which can be used for API error handling), QR code handling and API tempting and authentication. http://au.apidays.io/abstracts.html#2747a1f1
The WordPress REST API as a Springboard for Website Greatness
The WordPress REST API opens up endless opportunities for WordPress developers. From integrating with technologies beyond WordPress, to providing more flexibility when developing sites, plugins, and themes, the WordPress REST API packs a powerful punch and makes development faster and easier.
In this webinar, WordPress REST API our experts covered:
-What is the REST API, and why should you care?
-Timeline on REST API in WordPress Core
-Practical, useful and possibly wacky use cases for the WordPress REST API (to get you thinking differently about what is possible)
Server Side Swift
Hooray, open source Swift finally arrived on Linux in December. Let’s see how easy it is to use Swift for your backend and why Swift is a good choice for safe and fast development.
SAP TechED Las Vegas 2016- OEM Partners- SAP HANA Cloud Platform Agenda
Discover SAP TechEd Las Vegas. Check out the premier SAP tech conference – created expressly for developers, engineers, and technologists. There’s a lot to choose from – we’ve put together an agenda that’s designed to meet your needs as an OEM Partner so you can tailor your experience
Building Reliability - The Realities of Observability
Presented at the ATO RTP Meetup
Presented by Jeremy Proffit, Director of DevSecOps & SRE for Customer Care and Communications, Ally
Title: Building Reliability - The Realities of Observability
Abstract: Join me as we discuss true observability, learn what works and what doesn't. We'll not only discuss dashboards, monitoring and alerting, but how these can be built by automation or included in your IAC modules. We'll talk about how to properly alert staff based on priority to keep your staff and yourself sane. And even discuss architecture and how it impacts reliably and why serverless isn't always the best at being reliable.
Modern Database Best Practices
Presented at the ATO RTP Meetup
Presented by Peter Zaitsev, Founder of Percona
Title: Modern Database Best Practices
Abstract: There are now more Database choices available for developers than ever before - there are general purpose databases and specialized databases, single node and distributed databases, Open Source, Proprietary databases and databases available exclusively in the cloud. In this presentation we will cover the best practices of choosing database(s) for your applications, best practices as it comes to application development as well as managing those databases to achieve best possible performance, security, availability at the lowest cost.
More Related Content
Similar to Introduction to PaaS for Application Developers
Mesos at OpenTable
UPDATE: This slide deck is superseded by http://www.slideshare.net/samsalisbury/mesos-at-opentable-talk-20151111
From talk I did at the London Mesos user group, October 23rd 014.
OWASP Top 10 - 2017The Ten Most Critical Web Application Sec.docx
OWASP Top 10 - 2017
The Ten Most Critical Web Application Security Risks
This work is licensed under a
Creative Commons Attribution-ShareAlike 4.0 International Licensehttps://owasp.org
https://creativecommons.org/licenses/by-sa/4.0/
http://creativecommons.org/licenses/by-sa/4.0/
1
Copyright and License
Copyright © 2003 – 2017 The OWASP Foundation
This document is released under the Creative Commons Attribution Share-Alike 4.0 license.
For any reuse or distribution, you must make it clear to others the license terms of this work.
Table of Contents About OWASP
The Open Web Application Security Project (OWASP) is an
open community dedicated to enabling organizations to
develop, purchase, and maintain applications and APIs that
can be trusted.
At OWASP, you'll find free and open:
• Application security tools and standards.
• Complete books on application security testing, secure
code development, and secure code review.
• Presentations and videos.
• Cheat sheets on many common topics.
• Standard security controls and libraries.
• Local chapters worldwide.
• Cutting edge research.
• Extensive conferences worldwide.
• Mailing lists.
Learn more at: https://www.owasp.org.
All OWASP tools, documents, videos, presentations, and
chapters are free and open to anyone interested in improving
application security.
We advocate approaching application security as a people,
process, and technology problem, because the most
effective approaches to application security require
improvements in these areas.
OWASP is a new kind of organization. Our freedom from
commercial pressures allows us to provide unbiased,
practical, and cost-effective information about application
security.
OWASP is not affiliated with any technology company,
although we support the informed use of commercial security
technology. OWASP produces many types of materials in a
collaborative, transparent, and open way.
The OWASP Foundation is the non-profit entity that ensures
the project's long-term success. Almost everyone associated
with OWASP is a volunteer, including the OWASP board,
chapter leaders, project leaders, and project members.
We support innovative security research with grants and
infrastructure.
Come join us!
TOC Table of Contents
TOC - About OWASP ……………………………… 1
FW - Foreword …………..………………...……… 2
I - Introduction ………..……………….……..… 3
RN - Release Notes …………..………….…..….. 4
Risk - Application Security Risks…………….…… 5
T10 - OWASP Top 10 Application Security
Risks – 2017 …………..……….....….…… 6
A1:2017 - Injection …….………..……………………… 7
A2:2017 - Broken Authentication ……………………... 8
A3:2017 - Sensitive Data Exposure ………………….. 9
A4:2017 - XML External Entities (XXE) ……………... 10
A5:2017 - Broken Access Control ……………...…….. 11
A6:2017 - Security Misconfiguration ………………….. 12
A7:2017 - Cross-Site Scripting (XSS) ….…………….. 13
A8:2017 - Insecure Deserialization ……………………14
A9:2017 - Using Components with Known
Vuln.
Origins of Serverless
Serverless is new trend in software development. It’s confusing many developers around the world. In this talk I’ll explain how to build not only crop images or select data from DynamoDB, but build real application, what kind of troubles are we should expect, how to make decision is your task fit into serverless architecture in Python or may be you should use, general approach. How fast serverless applications and more important how to scale it.
Orchestrating Legacy Services Into Contemporary RESTful WEB APIs With CA App ...
In this, hands-on, collaborative lab we will discuss the vision of CA App Services Orchestrator (CA ASO) and see the advantages of elegant and resilient RESTful APIs compared to legacy SOAP-based web services.
You’ll take pre-built SOAP services and marvel at the beautiful user experience that CA ASO provides to orchestrate them into resource-based APIs.
For more information, please visit http://cainc.to/Nv2VOe
Frontend Performance: De débutant à Expert à Fou Furieux
Frontend Performance Beginner to Expert to Crazy Person
The very first requirement of a great user experience is actually getting the bytes of that experience to the user before they they get tired and leave.
In this talk we'll start with the basics and get progressively insane. We'll go over several frontend performance best practices, a few anti-patterns, the reasoning behind the rules, and how they've changed over the years. We'll also look at some great tools to help you.
La performance front-end de débutant, à expert, à fou furieux !
La toute première condition nécessaire à une bonne expérience utilisateur est de pouvoir obtenir les octets de cette expérience avant que l'utilisateur ne se lasse et parte.
Nous débuterons cette conférence avec les bases pour progressivement devenir démentiel. Nous aborderons plusieurs des meilleurs pratiques de la performance front-end, quelques anti-patterns à éviter, le raisonnement derrière les règles, et comment ces dernières ont changé au fil des ans. Nous regarderons d'un peu plus près quelques très bon outils qui peuvent vous aider.
Tastypie: Easy APIs to Make Your Work Easier
On April 10, 2013, Eric Mattison gave a talk on Tastypie: Easy APIs to Make Your Work Easier.
"Have you ever dealt with any of these problems:
- Unwieldy, Scary-to-Change Applications?
- Long Development Cycles?
- Replicated Code?
- Scope Creep?
- Restless Leg Syndrome?
Tastypie can help you solve these problems and more!”
Empowering Developers to be Healthcare Heroes
Learn from Dr. Kevin Maloy in 1hr how to write Healthcare Apps to connect to EHR systems, instead of spending weeks to become fluent in HL7 SMART on FHIR standard. Kevin is a practicing, board-certified Emergency Medicine physician who also codes. The meetup recording (with Q&A) is at https://youtu.be/alB-45nu0lo
HTML5 WebSocket for the Real-Time Web and the Internet of Things
Abstract: In his talk Peter gives a brief introduction to WebSocket and discusses how real-time Web communications technologies can be applied to an always connected Web and mobile world. Then, he walks you through how to provide interactivity and collaboration by controlling physical objects remotely. The presentation features several live demonstrations of the concepts discussed throughout the session.
Frontend Performance: Beginner to Expert to Crazy Person
The very first requirement of a great user experience is actually getting the bytes of that experience to the user before they they get fed up and leave.
In this talk we'll start with the basics and get progressively insane. We'll go over several frontend performance best practices, a few anti-patterns, the reasoning behind the rules, and how they've changed over the years. We'll also look at some great tools to help you.
All Hail Our 'Bot Masters PHPNW14 Unconference
My talk from the PHPNW14 unconference track, October 4th 2014.
SAP TechED Las Vegas 2016- OEM Partners: Database Agenda
Discover SAP TechEd Las Vegas. Check out the premier SAP tech conference – created expressly for developers, engineers, and technologists. There’s a lot to choose from – we’ve put together an agenda that’s designed to meet your needs as an OEM Partner so you can tailor your experience
APIDays Australia - Openresty for scale
As CTO of a rapid growth FinTech one of my biggest challenges is rebuilding the platform to scale elastically plus still allowing for the rapid development and integration of core platform functionality. Even for fast prototyping and design Openresty allows for the quick integration for mobile and web services that can integrate with almost any database or stateless program logic allowing for faster than normal deployment and event geo based load balancing. Utilising NGINX ill show some of the ways i am overcoming some of the challenges by building a developer focused api platform that will allow the quick and easy deployment of new services while still maintaining the functionality needed by modern REST API design techniques. Also we will be looking at some of the additional functionality available to the Openresty suite including Machine Learning (which can be used for API error handling), QR code handling and API tempting and authentication. http://au.apidays.io/abstracts.html#2747a1f1
The WordPress REST API as a Springboard for Website Greatness
The WordPress REST API opens up endless opportunities for WordPress developers. From integrating with technologies beyond WordPress, to providing more flexibility when developing sites, plugins, and themes, the WordPress REST API packs a powerful punch and makes development faster and easier.
In this webinar, WordPress REST API our experts covered:
-What is the REST API, and why should you care?
-Timeline on REST API in WordPress Core
-Practical, useful and possibly wacky use cases for the WordPress REST API (to get you thinking differently about what is possible)
Server Side Swift
Hooray, open source Swift finally arrived on Linux in December. Let’s see how easy it is to use Swift for your backend and why Swift is a good choice for safe and fast development.
SAP TechED Las Vegas 2016- OEM Partners- SAP HANA Cloud Platform Agenda
Discover SAP TechEd Las Vegas. Check out the premier SAP tech conference – created expressly for developers, engineers, and technologists. There’s a lot to choose from – we’ve put together an agenda that’s designed to meet your needs as an OEM Partner so you can tailor your experience
Similar to Introduction to PaaS for Application Developers (20)
OWASP Top 10 - 2017The Ten Most Critical Web Application Sec.docx
OWASP Top 10 - 2017The Ten Most Critical Web Application Sec.docx
Orchestrating Legacy Services Into Contemporary RESTful WEB APIs With CA App ...
Orchestrating Legacy Services Into Contemporary RESTful WEB APIs With CA App ...
Frontend Performance: De débutant à Expert à Fou Furieux
Frontend Performance: De débutant à Expert à Fou Furieux
HTML5 WebSocket for the Real-Time Web and the Internet of Things
HTML5 WebSocket for the Real-Time Web and the Internet of Things
Frontend Performance: Beginner to Expert to Crazy Person
Frontend Performance: Beginner to Expert to Crazy Person
SAP TechED Las Vegas 2016- OEM Partners: Database Agenda
SAP TechED Las Vegas 2016- OEM Partners: Database Agenda
The WordPress REST API as a Springboard for Website Greatness
The WordPress REST API as a Springboard for Website Greatness
SAP TechED Las Vegas 2016- OEM Partners- SAP HANA Cloud Platform Agenda
SAP TechED Las Vegas 2016- OEM Partners- SAP HANA Cloud Platform Agenda
More from All Things Open
Building Reliability - The Realities of Observability
Presented at the ATO RTP Meetup
Presented by Jeremy Proffit, Director of DevSecOps & SRE for Customer Care and Communications, Ally
Title: Building Reliability - The Realities of Observability
Abstract: Join me as we discuss true observability, learn what works and what doesn't. We'll not only discuss dashboards, monitoring and alerting, but how these can be built by automation or included in your IAC modules. We'll talk about how to properly alert staff based on priority to keep your staff and yourself sane. And even discuss architecture and how it impacts reliably and why serverless isn't always the best at being reliable.
Modern Database Best Practices
Presented at the ATO RTP Meetup
Presented by Peter Zaitsev, Founder of Percona
Title: Modern Database Best Practices
Abstract: There are now more Database choices available for developers than ever before - there are general purpose databases and specialized databases, single node and distributed databases, Open Source, Proprietary databases and databases available exclusively in the cloud. In this presentation we will cover the best practices of choosing database(s) for your applications, best practices as it comes to application development as well as managing those databases to achieve best possible performance, security, availability at the lowest cost.
Open Source and Public Policy
All Things Open 2023
Presented at All Things Open 2023
Presented by Deb Bryant - Open Source Initiative, Patrick Masson - Apereo Foundation, Stephen Jacobs - Rochester Institute of Technology, Ruth Suehle - SAS, & Greg Wallace - FreeBSD Foundation
Title: Open Source and Public Policy
Abstract: New regulations in the software industry and adjacent areas such as AI, open science, open data, and open education are on the rise around the world. Cyber Security, societal impact of AI, data and privacy are paramount issues for legislators globally. At the same time, the COVID-19 pandemic drove collaborative development to unprecedented levels and took Open Source software, open research, open content and data from mainstream to main stage, creating tension between public benefit and citizen safety and security as legislators struggle to find a balance between open collaboration and protecting citizens.
Historically, the open source software community and foundations supporting its work have not engaged in policy discussions. Moving forward, thoughtful development of these important public policies whilst not harming our complex ecosystems requires an understanding of how our ecosystem operates. Ensuring stakeholders without historic benefit of representation in those discussions becomes paramount to that end.
Please join our open discussion with open policy stakeholders working constructively on current open policy topics. Our panelists will provide a view into how oss foundations and other open domain allies are now rising to this new challenge as well as seizing the opportunity to influence positive changes to the public’s benefit.
Topics: Public Policy, Open Science, Open Education, current legislation in the US and EU, US interest in OSS sustainability, intro to the Open Policy Alliance
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Weaving Microservices into a Unified GraphQL Schema with graph-quilt - Ashpak...
Presented at All Things Open 2023
Presented by Ashpak Shaikh & Lucy Shen - Intuit
Title: Weaving Microservices into a Unified GraphQL Schema with graph-quilt
Abstract: The magic of GraphQL is that it provides data access through a single endpoint—clean and easy. But as the number of GraphQL microservices your tech stack depends on starts to grow, that single-endpoint purpose becomes a new multi-endpoint problem. Ideally, we would have an orchestrator that could aggregate schemas from multiple microservices into a unified GraphQL schema and route the requests to the appropriate microservice.
Enter graph-quilt, an open source Java library that provides recursive schema stitching and Apollo Federation style schema composition. In this talk, we’ll walk through our GraphQL journey and show you how to use graph-quilt to simplify your data orchestration needs. We will also share our open sourced reference implementation of a highly performant graph-quilt gateway currently being used in production here at Intuit, where we’ve had incredible success in scaling the gateway with 50+ microservices and 150+ clients.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
The State of Passwordless Auth on the Web - Phil Nash
Presented at All Things Open 2023
Presented by Phil Nash - Sonar
Title: The State of Passwordless Auth on the Web
Abstract: Can we get rid of passwords yet? They make for a poor user experience and users are notoriously bad with them. The advent of WebAuthn has brought a passwordless world closer, but where do we really stand?
In this talk we'll explore the current user experience of WebAuthn and the requirements a user has to fulfil to authenticate without a password. We'll also explore the fallbacks and safeguards we can use to make the password experience better and more secure. By the end of the session you'll have a vision of how authentication could look in the future and a blueprint for how to build the best auth experience today.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Total ReDoS: The dangers of regex in JavaScript
Presented at All Things Open 2023
Presented by Phil Nash - Sonar
Title: Total ReDoS: The dangers of regex in JavaScript
Abstract: Regular expressions are complicated and can be hard to learn. On top of that, they can also be a security risk; writing the wrong pattern can open your application up to denial of service attacks. One token out of place and you invite in the dreaded ReDoS.
But how can a regular expression cause this? In this talk we’ll track down the patterns that can cause this trouble, explain why they are an issue and propose ways to fix them now and avoid them in the future. Together we’ll demystify these powerful search patterns and keep your application safe from expressions that behave in a way that is anything but regular.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
What Does Real World Mass Adoption of Decentralized Tech Look Like?
Presented at All Things Open 2023
Presented by Karl Mozurkewich - Storj
Title: What Does Real World Mass Adoption of Decentralized Tech Look Like?
Abstract: We delve into the transformative potential of decentralized technology. Beginning with a brief overview of the rise of centralization with the advent of the internet and the counter-shift marked by blockchain we explore the intrinsic characteristics of decentralized and distributed systems, such as trustless operations, peer-to-peer networks, and enterprise application scalability. Various sectors, including finance, supply chains, media and entertainment, data science and cloud infrastructure are on the brink of disruption. The societal implications are vast, with the potential for greater individual empowerment, a greener planet and more viable resource utilization, but concerns about data security persist.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
How to Write & Deploy a Smart Contract
Presented at All Things Open 2023
Presented by Anastasia Lalamentik - Kaleido
Title: How to Write & Deploy a Smart Contract
Abstract: In this talk, Anastasia Lalamentik, Full Stack Engineer at Kaleido, will walk through how Ethereum smart contracts work and go over related concepts like gas fees, the Ethereum Virtual Machine (EVM), the block explorer, and the Solidity programming language. This is vital to anyone who wants to build a blockchain app and is a great introduction to blockchain technology for newcomers to the space.
By the end of the talk, attendees will better understand how to:
- Write a simple smart contract
- Deploy their smart contract to an Ethereum test network through the latest tools like Hardhat and the MetaMask wallet
- Test interactions with their deployed smart contract and ensure that everything is working properly
Additionally, participants will get to interact with Anastasia's deployed smart contract at the end of the talk. Anastasia’s past talks have attracted and have been attended by a diverse group of participants with a range of experience in the space.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Spinning Your Drones with Cadence Workflows, Apache Kafka and TensorFlow
Presented at All Things Open 2023
Presented by Paul Brebner - Instaclustr (by Spot by NetApp)
Title: Spinning Your Drones with Cadence Workflows, Apache Kafka and TensorFlow
Abstract: In this talk we’ll build a Drone delivery application, and then use it to do some Machine Learning “on the fly”.
In the 1st part of the talk, we'll build a real-time Drone Delivery demonstration application using a combination of two open-source technologies: Uber’s Cadence (for stateful, scheduled, long-running workflows), and Apache Kafka (for fast streaming data).
With up to 2,000 (simulated) drones and deliveries in progress at once this application generates a vast flow of spatio-temporal data.
In the 2nd part of the talk, we'll use this platform to explore Machine Learning (ML) over streaming and drifting Kafka data with TensorFlow to try and predict which shops will be busy in advance.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
DEI Challenges and Success
Presented at the All Things Open 2023 Inclusion and Diversity in Open Source Event
Presented by Efraim Marquez-Arreaza - Red Hat
Title: DEI Challenges and Success
Abstract: In today's world, many companies and organizations have Diversity, Equity and Inclusion (DEI) communities. Red Hat Unidos is a DEI community focused on advocating for the Hispanic/Latine community. In this talk, we would like to share our challenges and success during the past 4-years and plans for the future.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Scaling Web Applications with Background
Presented at All Things Open 2023
Presented by Lydia Cupery - HubSpot
Title: Scaling Web Applications with Background Jobs: Takeaways from Generating a Huge PDF
Abstract: Do you need to perform time-consuming or CPU-intensive processes in your web application but are concerned about performance? That’s where background jobs come in. By offloading resource-intensive tasks to separate worker processes, you can improve the scalability of your web application.
In this talk, I'll share my experience of using background jobs to scale our web application. I'll discuss the challenges my team faced that led us to adopt background jobs. Then, I'll share practical tips on how to design background jobs for CPU-intensive or time-consuming processes, such as generating huge PDFs and batch emailing. I'll wrap up by going over the performance and cost tradeoffs of background jobs.
I'll use Typescript, Express, and Heroku as examples in this talk, but the concepts and best practices that I'll share are applicable to other languages and tools.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Supercharging tutorials with WebAssembly
Presented at All Things Open 2023
Presented by Robert Aboukhalil - CZI
Title: Supercharging tutorials with WebAssembly
Abstract: sandbox.bio is a free platform that features interactive command-line tutorials for bioinformatics. This talk is a deep-dive into how sandbox.bio was built, with a focus on how WebAssembly enabled bringing command-line tools like awk and grep to the web. Although these tools were originally written in C/C++, they all run directly in the browser, thanks to WebAssembly! And since the computations run on each user's computer, this makes the application highly scalable and cost-effective.
Along the way, I'll discuss how WebAssembly works and how to get started using it in your own applications. The talk will also cover more advanced WebAssembly features such as threads and SIMD, and will end with a discussion of WebAssembly's benefits and pitfalls (it's a powerful technology, but it's not always the right tool!).
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Using SQL to Find Needles in Haystacks
Presented at All Things Open 2023
Presented by K.S. Bhaskar - YottaDB LLC
Title: Using SQL to Find Needles in Haystacks
Abstract: Database journal files capture every update to a database. A database of a few hundred GB can generate GBs worth of journal files every minute at busy times. Troubleshooting and forensices, especially of rare and intermittent problems, such as which process made what update and when, is an exercise of finding needles in haystacks. A similar problem exists with syslogs. A solution is to load the journal files and syslogs into a database, and use SQL to query the database. Bhaskar will present and demonstrate this with a 100% FOSS stack.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Configuration Security as a Game of Pursuit Intercept
Presented at All Things Open 2023
Presented by Wes Widner - Automox
Title: Configuration Security as a Game of Pursuit Intercept
Abstract: In this session we will take a look at the emerging field of cloud security posture management and how we can approach the problem space using a class of board games known as pursuit/intercept. Using the game Scotland Yard as a visual illustration we'll explore the cognitive and technical limitations that all CSPM systems face and what you should look for when evaluating the strengths and weakness of CSPM vendors and approaches.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Scaling an Open Source Sponsorship Program
Presented at All Things Open 2023
Presented by Carol Huang & Mike Fix - Stripe
Title: Scaling an Open Source Sponsorship Program
Abstract: We already know this: the open-source ecosystem needs further monetary investment from the companies that benefit most from it. Likewise, companies say they want to participate in these initiatives, but find it hard to dedicate resources to open source funding when there isn’t a clear ROI.
This talk discusses how the Open Source Program Office at Stripe built a scalable, sustainable open source sponsorship model that aligns internal company incentives with those of open source maintainers and the community at large. We go over the unique “platformization” of our OSPO that allowed us to create multiple funding models, such as BYOB (Bring Your Own Budget), and share lessons learned from this experience as well as other OSPOs.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Build Developer Experience Teams for Open Source
Presented at All Things Open 2023
Presented by Arundeep Nagaraj - Amazon Web Services (AWS)
Title: Build Developer Experience Teams for Open Source
Abstract: Open Source has become the default strategy for many IT organizations and Enterprises. However, the constant challenge with Open Source leaders of these organizations has been -
How is my product's developer experience?
Is this the right metric to track?
How can I scale my team to support our products better?
How can I add automation to scale redundant workflows?
If my product involves working with developers, how can I scale to the complexity of the requests and reduce Engineering bandwidth?
The challenges within support of open source products continues to magnify depending on the end user persona whether they are consumers or contributors to your product. Consumers utilize your product, SDK's and API's and are blocked with using it or run into issues, whereas contributors are advanced users of your software that understands the codebase to provide a meaningful contribution back to the product.
The answer to the above is to look at Open Source support as a first-class citizen of your corporate support strategy. To employ the right level of developer focused support as opposed to traditional infrastructure based support is key to scale to the amount of developers using your product. Supporting customers in the open involves more than pure support - building customer / developer experiences (DX) in the open (across platforms and communities) that pivots over the ability of your product's users or developers to be focused on the end-to-end value add. This helps with your active developer growth and retention of users.
Key Takeaways:
- IT leaders of Open Source will learn to employ strategies to build a DX team that engages on multiple platforms
- Work on identifying accurate metrics for product and organization
- Innovate on platforms such as Discord to build a bot and a dashboard
- Ability to leverage customer feedback and iterate over the customer success flywheel
- Distinguish between DX and Developer Advocacy (DA)
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Deploying Models at Scale with Apache Beam
Presented at All Things Open 2023
Presented by Danny McCormick - Google
Title: Deploying Models at Scale with Apache Beam
Abstract: Apache Beam is an open source tool for building distributed scalable data pipelines. This talk will explore how Beam can be used to perform common machine learning tasks, with a heavy focus on running inference at scale. The talk will include a demo component showing how Beam can be used to deploy and update models efficiently on both CPUs and GPUs for inference workloads.
An attendee can expect to leave this talk with a high level understanding of Beam, the challenges of deploying models at scale, and the ability to use Beam to easily parallelize their inference workloads.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Sudo – Giving access while staying in control
Presented at All Things Open 2023
Presented by Peter Czanik - One Identity
Title: Sudo – Giving access while staying in control
Abstract: Sudo is used by millions to control and log administrator access to systems, but using the default configuration only, there are plenty of blind spots. Using the latest features in sudo let you watch some previously blind spots and control access to them. Here are four major new features, which arrived since the 1.9.0 release, allowing you see your blind spots:
- configuring a working directory or chroot within sudo often makes full shell access redundant
- JSON-formatted logs give you more details on events and are easier to act on
- relays in sudo_logsrvd make session recording collection more secure and reliable
- you can log and control sub-commands executed by the command run through sudo
Let us take a closer look at each of these.
Previously, there were quite a few situations where you had to give users full shell access through sudo. Typical examples include when you need to run a command from a given directory, or running commands in a chroot environment. You can now configure the working directory or the chroot directory and give access only to the command the user really needs.
Logging is a central role of sudo, to see who did what on the system. Using JSON-formatted log messages gives you even more information about events. What is even more: structured logs are easier to act on. Setting up alerting for suspicious events is much easier when you have a single parser to configure for any kind of sudo logs. You can collect sudo logs not only by local syslog, but also by using sudo_logsrvd, the same application used to collect session recordings.
Speaking of session recordings: instead of using a single central server, you can now have multiple levels of sudo_logsrvd relays between the client and the final destination. This allows session collection even if the central server is unavailable, providing you with additional security. It also makes your network configuration simpler.
Finally, you can log sub-commands executed from the command started through sudo. You can see commands started from a shell. No more unnoticed shell access from text editors. Best of all: you can also intercept sub-commands.
These are just a few of the most prominent features helping you to watch and control previous blind spots on your systems. See these and other possibilities in action in some live demos during our presentation.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Fortifying the Future: Tackling Security Challenges in AI/ML Applications
Presented at All Things Open 2023
Presented by Christine Abernathy - F5, Inc.
Title: Fortifying the Future: Tackling Security Challenges in AI/ML Applications
Abstract: As Artificial Intelligence (AI) and Machine Learning (ML) applications continue to surge, it is crucial to be aware of and address the security risks associated with these technologies. In this talk, Christine will explore AI/ML failure modes, threats, and mitigation strategies. She will guide you through the fundamentals of ML models then introduce you to key security challenges such as adversarial attacks, data poisoning, model inversion, model stealing, and membership inference attacks, using real-world examples to demonstrate their potential impact.
Christine will also discuss privacy and ethical considerations in ML, touching upon techniques like federated learning and shedding light on the current regulatory landscape surrounding security risks. If you are developing AI/ML applications or incorporating AI/ML components into your technology stack, check out this talk. You will walk away with a deeper understanding of the current AI/ML security landscape and a toolkit to help you address these risks, enabling you to build safer, more secure, and privacy-aware applications.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
Securing Cloud Resources Deployed with Control Planes on Kubernetes using Gov...
Presented at All Things Open 2023
Presented by Carlos Santana - AWS
Title: Securing Cloud Resources Deployed with Control Planes on Kubernetes using Governance and Policy as Code
Abstract: Are you concerned about the security of your cloud resources deployed on Kubernetes? Are you struggling to ensure compliance with regulatory requirements while managing your cloud infrastructure? If yes, then this talk is for you!
We will discuss how to secure cloud resources deployed with Crossplane on Kubernetes using Governance and Policy as Code. We will explore how to leverage Governance and Policy as Code tools like Rego, Kyverno, and OPA to ensure security and compliance.
By the end of this talk, you will have a better understanding of the challenges associated with securing cloud resources deployed with Crossplane or ACK on Kubernetes, the importance of Governance and Policy as Code in ensuring security and compliance, and why it is critical to use open source and open standards in these technologies.
Find more info about All Things Open:
On the web: https://www.allthingsopen.org/
Twitter: https://twitter.com/AllThingsOpen
LinkedIn: https://www.linkedin.com/company/all-things-open/
Instagram: https://www.instagram.com/allthingsopen/
Facebook: https://www.facebook.com/AllThingsOpen
Mastodon: https://mastodon.social/@allthingsopen
Threads: https://www.threads.net/@allthingsopen
2023 conference: https://2023.allthingsopen.org/
More from All Things Open (20)
Building Reliability - The Realities of Observability
Building Reliability - The Realities of Observability
Weaving Microservices into a Unified GraphQL Schema with graph-quilt - Ashpak...
Weaving Microservices into a Unified GraphQL Schema with graph-quilt - Ashpak...
The State of Passwordless Auth on the Web - Phil Nash
The State of Passwordless Auth on the Web - Phil Nash
What Does Real World Mass Adoption of Decentralized Tech Look Like?
What Does Real World Mass Adoption of Decentralized Tech Look Like?
Spinning Your Drones with Cadence Workflows, Apache Kafka and TensorFlow
Spinning Your Drones with Cadence Workflows, Apache Kafka and TensorFlow
Configuration Security as a Game of Pursuit Intercept
Configuration Security as a Game of Pursuit Intercept
Fortifying the Future: Tackling Security Challenges in AI/ML Applications
Fortifying the Future: Tackling Security Challenges in AI/ML Applications
Securing Cloud Resources Deployed with Control Planes on Kubernetes using Gov...
Securing Cloud Resources Deployed with Control Planes on Kubernetes using Gov...
Recently uploaded
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties – USA
Expansion of bot farms – how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks – Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
A tale of scale & speed: How the US Navy is enabling software delivery from l...
Rapid and secure feature delivery is a goal across every application team and every branch of the DoD. The Navy’s DevSecOps platform, Party Barge, has achieved:
- Reduction in onboarding time from 5 weeks to 1 day
- Improved developer experience and productivity through actionable findings and reduction of false positives
- Maintenance of superior security standards and inherent policy enforcement with Authorization to Operate (ATO)
Development teams can ship efficiently and ensure applications are cyber ready for Navy Authorizing Officials (AOs). In this webinar, Sigma Defense and Anchore will give attendees a look behind the scenes and demo secure pipeline automation and security artifacts that speed up application ATO and time to production.
We will cover:
- How to remove silos in DevSecOps
- How to build efficient development pipeline roles and component templates
- How to deliver security artifacts that matter for ATO’s (SBOMs, vulnerability reports, and policy evidence)
- How to streamline operations with automated policy checks on container images
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
“AGI should be open source and in the public domain at the service of humanity and the planet.”
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
In this session I delve into the encryption technology used in Microsoft 365 and Microsoft Purview. Including the concepts of Customer Key and Double Key Encryption.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
Bits & Pixels using AI for Good.........
A whirlwind tour of tech & AI for socio-environmental impact.
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, Product School
Epistemic Interaction - tuning interfaces to provide information for AI support
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Welocme to ViralQR, your best QR code generator.
Welcome to ViralQR, your best QR code generator available on the market!
At ViralQR, we design static and dynamic QR codes. Our mission is to make business operations easier and customer engagement more powerful through the use of QR technology. Be it a small-scale business or a huge enterprise, our easy-to-use platform provides multiple choices that can be tailored according to your company's branding and marketing strategies.
Our Vision
We are here to make the process of creating QR codes easy and smooth, thus enhancing customer interaction and making business more fluid. We very strongly believe in the ability of QR codes to change the world for businesses in their interaction with customers and are set on making that technology accessible and usable far and wide.
Our Achievements
Ever since its inception, we have successfully served many clients by offering QR codes in their marketing, service delivery, and collection of feedback across various industries. Our platform has been recognized for its ease of use and amazing features, which helped a business to make QR codes.
Our Services
At ViralQR, here is a comprehensive suite of services that caters to your very needs:
Static QR Codes: Create free static QR codes. These QR codes are able to store significant information such as URLs, vCards, plain text, emails and SMS, Wi-Fi credentials, and Bitcoin addresses.
Dynamic QR codes: These also have all the advanced features but are subscription-based. They can directly link to PDF files, images, micro-landing pages, social accounts, review forms, business pages, and applications. In addition, they can be branded with CTAs, frames, patterns, colors, and logos to enhance your branding.
Pricing and Packages
Additionally, there is a 14-day free offer to ViralQR, which is an exceptional opportunity for new users to take a feel of this platform. One can easily subscribe from there and experience the full dynamic of using QR codes. The subscription plans are not only meant for business; they are priced very flexibly so that literally every business could afford to benefit from our service.
Why choose us?
ViralQR will provide services for marketing, advertising, catering, retail, and the like. The QR codes can be posted on fliers, packaging, merchandise, and banners, as well as to substitute for cash and cards in a restaurant or coffee shop. With QR codes integrated into your business, improve customer engagement and streamline operations.
Comprehensive Analytics
Subscribers of ViralQR receive detailed analytics and tracking tools in light of having a view of the core values of QR code performance. Our analytics dashboard shows aggregate views and unique views, as well as detailed information about each impression, including time, device, browser, and estimated location by city and country.
So, thank you for choosing ViralQR; we have an offer of nothing but the best in terms of QR code services to meet business diversity!
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head of Product, Amazon Games
SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf
Building better applications for business users with SAP Fiori.
• What is SAP Fiori and why it matters to you
• How a better user experience drives measurable business benefits
• How to get started with SAP Fiori today
• How SAP Fiori elements accelerates application development
• How SAP Build Code includes SAP Fiori tools and other generative artificial intelligence capabilities
• How SAP Fiori paves the way for using AI in SAP apps
UiPath Test Automation using UiPath Test Suite series, part 4
Welcome to UiPath Test Automation using UiPath Test Suite series part 4. In this session, we will cover Test Manager overview along with SAP heatmap.
The UiPath Test Manager overview with SAP heatmap webinar offers a concise yet comprehensive exploration of the role of a Test Manager within SAP environments, coupled with the utilization of heatmaps for effective testing strategies.
Participants will gain insights into the responsibilities, challenges, and best practices associated with test management in SAP projects. Additionally, the webinar delves into the significance of heatmaps as a visual aid for identifying testing priorities, areas of risk, and resource allocation within SAP landscapes. Through this session, attendees can expect to enhance their understanding of test management principles while learning practical approaches to optimize testing processes in SAP environments using heatmap visualization techniques
What will you get from this session?
1. Insights into SAP testing best practices
2. Heatmap utilization for testing
3. Optimization of testing processes
4. Demo
Topics covered:
Execution from the test manager
Orchestrator execution result
Defect reporting
SAP heatmap example with demo
Speaker:
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
DevOps and Testing slides at DASA Connect
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Presented by Suzanne Phillips and Alex Marcotte
Quantum Computing: Current Landscape and the Future Role of APIs
The current state of quantum computing and the role of APIs to take it mainstream.
Recently uploaded (20)
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
State of ICS and IoT Cyber Threat Landscape Report 2024 preview
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf
A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
GenAISummit 2024 May 28 Sri Ambati Keynote: AGI Belongs to The Community in O...
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...
Assure Contact Center Experiences for Your Customers With ThousandEyes
Assure Contact Center Experiences for Your Customers With ThousandEyes
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
Transcript: Selling digital books in 2024: Insights from industry leaders - T...
How world-class product teams are winning in the AI era by CEO and Founder, P...
How world-class product teams are winning in the AI era by CEO and Founder, P...
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
Unsubscribed: Combat Subscription Fatigue With a Membership Mentality by Head...
SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf
SAP Sapphire 2024 - ASUG301 building better apps with SAP Fiori.pdf
UiPath Test Automation using UiPath Test Suite series, part 4
UiPath Test Automation using UiPath Test Suite series, part 4
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Assuring Contact Center Experiences for Your Customers With ThousandEyes
Quantum Computing: Current Landscape and the Future Role of APIs
Quantum Computing: Current Landscape and the Future Role of APIs
Introduction to PaaS for Application Developers
- 1. Introduction to PaaS forIntroduction to PaaS for application developersapplication developers Presented by: Steven PoustySteven Pousty talks.thesteve0.com/paasintrotalks.thesteve0.com/paasintro @TheSteve0 on Twitter, IRC, Instagram,@TheSteve0 on Twitter, IRC, Instagram, Ingress, SmugMug, and GithubIngress, SmugMug, and Github Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 1 of 20 11/14/2014 09:10 AM
- 2. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 2 of 20 11/14/2014 09:10 AM
- 3. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 3 of 20 11/14/2014 09:10 AM
- 4. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 4 of 20 11/14/2014 09:10 AM
- 5. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 5 of 20 11/14/2014 09:10 AM
- 6. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 6 of 20 11/14/2014 09:10 AM
- 7. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 7 of 20 11/14/2014 09:10 AM
- 8. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 8 of 20 11/14/2014 09:10 AM
- 9. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 9 of 20 11/14/2014 09:10 AM
- 10. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 10 of 20 11/14/2014 09:10 AM
- 11. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 11 of 20 11/14/2014 09:10 AM
- 12. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 12 of 20 11/14/2014 09:10 AM
- 13. But I know EC2...But I know EC2... Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 13 of 20 11/14/2014 09:10 AM
- 14. One Source to Bind Them AllOne Source to Bind Them All Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 14 of 20 11/14/2014 09:10 AM
- 15. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 15 of 20 11/14/2014 09:10 AM
- 16. How we make the sausageHow we make the sausage Use Linux Containers1. Years of Experience Supporting SysAdmins and Devs on Linux2. Automate That Which Can be Automated!3. Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 16 of 20 11/14/2014 09:10 AM
- 17. "Clear Boundaries"Clear Boundaries Infite Possibilities"Infite Possibilities" Steve's TherapistSteve's Therapist Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 17 of 20 11/14/2014 09:10 AM
- 18. Enough Talk - CODE!Enough Talk - CODE! Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 18 of 20 11/14/2014 09:10 AM
- 19. Make a Python app1. Push a code change2. Make a Wordpress site3. Make a full app from a Github repo:4. Show what OpenShift did under the hoods for us5. https://github.com/thesteve0 /fluentwebmap Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 19 of 20 11/14/2014 09:10 AM
- 20. Let's wrap it upLet's wrap it up PaaS makes life great for you1. You can live your dreams! This is the best of all possible worlds2. Free! With3. Github repo:4. Free Ebook! https://github.com/thesteve0/jeemongomap Come hang out with us: #openshift or #openshift-dev on freenode irc OR users@lists.openshift.redhat.com Introduction to PaaS for application developers http://presentations-thesteve0.rhcloud.com/paasi... 20 of 20 11/14/2014 09:10 AM