Melbourne meetup march 2018
•
1 like•679 views
The document discusses a MuleSoft meetup event that included a presentation on tracing Mule flows with Zipkin and Opentracing. It describes how distributed systems debugging can be challenging due to latency issues, reuse complexity, and lack of proper debugging tools. The presentation promotes designing systems for traceability across technologies, components, and dynamic dependencies using OpenTracing and Zipkin standards. It demonstrates how spans represent flows and activities with parent-child relationships and how context is propagated between callers and callees.
Report
Share
Report
Share
Download to read offline
Recommended
Avoiding integration testing nightmares with Mule and Pacts
Using Pact to avoid going through integration testing with Mule components. Based on http://docs.pact.io
Example code: https://github.com/michaelhyatt/mule-pact
Software Supply Chain Security та компоненти з відомими вразливостями
This document discusses using components with known vulnerabilities and provides recommendations and tools to address this issue. It begins with an overview of the OWASP top 10 issue of using vulnerable components and provides examples using the NodeJS decompress package and Ruby on Rails rubyzip gem. It then recommends regularly scanning for vulnerabilities, subscribing to security bulletins, and keeping components up-to-date. Finally, it introduces several open source tools for detecting vulnerable components, such as OWASP Dependency-Check and Dependency-Track, as well as standards for application security verification.
Anchore webinar thursday 21st july 2016
Anchore is a container image management and analytics toolset that provides insight and control over container contents throughout the development and production lifecycle. It offers transparency by analyzing container images, predictability by certifying images are free of vulnerabilities, and control by enforcing security policies. Anchore integrates into the container workflow to analyze images, evaluate them against policies, and provide queries about images and their contents. It is open source to enable community involvement and ensure confidence through auditing.
Are you ready to be hacked?
This is the presentation which I used during the awesome "WPSession #11: Security for Site Owners". I shared important information about how site owners should react to website attacks. I talked about risk management, assets evaluation and getting help from the right people that know WordPress and care about security.
Fortify dev ops (002)
The document discusses Fortify and DevOps for MBFS. It provides an overview of the DevOps lifecycle including planning, development, testing, release decision making, and deploying applications. It then summarizes Hewlett Packard Enterprise's end-to-end application security solution using Fortify on Demand, App Defender, and other tools to integrate security across the development lifecycle and provide protection for applications in production. Charts show the top vulnerability categories and application logging categories detected by Application Defender in February 2016. The document concludes by thanking the readers and providing contact information for Mike Coleman and Thomas Ryan from HPE to answer any questions.
From Zero To Hero: Continuous Container Security in 4 Simple Steps- A WhiteSo...
In Collaboration with DevOps.com, WhiteSource's Shiri Ivtsan discussed in this webinar the main security challenges organizations face when using containers.
The Devops Challenge: Open Source Security Throughout the DevOps Pipline- A W...
This document discusses open source security challenges and recommendations for addressing them. It notes that over 96% of developers rely on open source components but open source vulnerabilities are rising. While companies prioritize fixes, over half do not do so efficiently based on real business impact. The document recommends integrating scanning for vulnerabilities into the entire software development lifecycle from code to deployment. Automating scanning, prioritization of issues, and remediation helps ensure open source security.
Automating Open Source Security: A SANS Review of WhiteSource
In this webinar, SANS's Serge Borso and WhiteSource's Rami Elron provide a product review of our solution. In this webinar, you will learn how WhiteSource's solution can be easily integrated into the software development lifecycle to, detect open source vulnerabilities in real time, prioritize and remediate vulnerabilities and automate policy enforcement throughout the SDLC.
Recommended
Avoiding integration testing nightmares with Mule and Pacts
Using Pact to avoid going through integration testing with Mule components. Based on http://docs.pact.io
Example code: https://github.com/michaelhyatt/mule-pact
Software Supply Chain Security та компоненти з відомими вразливостями
This document discusses using components with known vulnerabilities and provides recommendations and tools to address this issue. It begins with an overview of the OWASP top 10 issue of using vulnerable components and provides examples using the NodeJS decompress package and Ruby on Rails rubyzip gem. It then recommends regularly scanning for vulnerabilities, subscribing to security bulletins, and keeping components up-to-date. Finally, it introduces several open source tools for detecting vulnerable components, such as OWASP Dependency-Check and Dependency-Track, as well as standards for application security verification.
Anchore webinar thursday 21st july 2016
Anchore is a container image management and analytics toolset that provides insight and control over container contents throughout the development and production lifecycle. It offers transparency by analyzing container images, predictability by certifying images are free of vulnerabilities, and control by enforcing security policies. Anchore integrates into the container workflow to analyze images, evaluate them against policies, and provide queries about images and their contents. It is open source to enable community involvement and ensure confidence through auditing.
Are you ready to be hacked?
This is the presentation which I used during the awesome "WPSession #11: Security for Site Owners". I shared important information about how site owners should react to website attacks. I talked about risk management, assets evaluation and getting help from the right people that know WordPress and care about security.
Fortify dev ops (002)
The document discusses Fortify and DevOps for MBFS. It provides an overview of the DevOps lifecycle including planning, development, testing, release decision making, and deploying applications. It then summarizes Hewlett Packard Enterprise's end-to-end application security solution using Fortify on Demand, App Defender, and other tools to integrate security across the development lifecycle and provide protection for applications in production. Charts show the top vulnerability categories and application logging categories detected by Application Defender in February 2016. The document concludes by thanking the readers and providing contact information for Mike Coleman and Thomas Ryan from HPE to answer any questions.
From Zero To Hero: Continuous Container Security in 4 Simple Steps- A WhiteSo...
In Collaboration with DevOps.com, WhiteSource's Shiri Ivtsan discussed in this webinar the main security challenges organizations face when using containers.
The Devops Challenge: Open Source Security Throughout the DevOps Pipline- A W...
This document discusses open source security challenges and recommendations for addressing them. It notes that over 96% of developers rely on open source components but open source vulnerabilities are rising. While companies prioritize fixes, over half do not do so efficiently based on real business impact. The document recommends integrating scanning for vulnerabilities into the entire software development lifecycle from code to deployment. Automating scanning, prioritization of issues, and remediation helps ensure open source security.
Automating Open Source Security: A SANS Review of WhiteSource
In this webinar, SANS's Serge Borso and WhiteSource's Rami Elron provide a product review of our solution. In this webinar, you will learn how WhiteSource's solution can be easily integrated into the software development lifecycle to, detect open source vulnerabilities in real time, prioritize and remediate vulnerabilities and automate policy enforcement throughout the SDLC.
Mod Security
ModSecurity is an open source web application firewall started in 2002 by Ivan Ristic. It can be embedded into web applications and servers to provide protection without introducing additional network components. As an embeddable WAF, ModSecurity offers low overhead, scalability, and avoids single points of failure. It monitors traffic in real-time, supports logging for auditing, and can help patch vulnerabilities without requiring application changes. ModSecurity works with Apache and other web servers, and a standalone version is in development.
mod_security introduction at study2study #3
This document summarizes the ModSecurity open source web application firewall. It discusses how ModSecurity operates as an engine embedded within the Apache web server to shield applications from attacks. It provides an overview of the core components and configuration files. Key points include that ModSecurity has 4 projects, and configuration is done through files such as base_rules, which contains the core rule set, and modsecurity_localrules.conf for custom rules.
Excuse me, your Crypto is showing!
The document discusses securing HTTP servers using TLS. It recommends using the Qualys SSL Labs scanner to test servers and understand vulnerabilities. It provides code examples to configure TLS settings like requiring TLS 1.0 or higher and using secure cipher suites. Configuring TLS properly helps secure user data and prevent attacks.
CI/CD pipeline security from start to finish with WhiteSource & CircleCI
This document provides an agenda for a webinar on securing CI/CD pipelines from start to finish with CircleCI and WhiteSource. The agenda includes brief introductions to CircleCI and WhiteSource, an overview of CircleCI Orbs and how they can simplify integrations, a discussion of the state of open source usage and security, and a demo of WhiteSource scanning functionality directly within a CircleCI pipeline using an Orb.
swampUP - 2018 - The Divine and Felonious Nature of Cyber Security
The document discusses the divine and felonious nature of cyber security and introduces the concept of DevSecOps. It notes that traditional perimeter-based security is no longer sufficient given changes in applications and infrastructure. DevSecOps integrates security practices like training, requirements, threat modeling directly into the development pipeline from the beginning. This helps automate security testing and monitoring throughout the software development lifecycle and supply chain. When done right, DevSecOps helps create a "new Goldilocks zone" where security is no longer a bottleneck to rapid software development and deployment.
Mod security
Shruthi Kamath gave an introduction to Mod Security, an open-source web application firewall. She discussed what a WAF is and how it protects web servers from attacks. Mod Security was originally an Apache module but can now be used on other platforms like IIS and Nginx. It uses rule-based filtering to monitor and log HTTP traffic. Kamath provided examples of Mod Security rules and demonstrated how to install, configure, and set up rules for Mod Security on an Apache server.
DevSecCon Boston 2018: Securing the Automated Pipeline: A Tale of Navigating ...
This document discusses how security practices need to change to keep up with DevOps practices like microservices and continuous deployment. It outlines how deployment used to work with quarterly releases versus now being able to deploy multiple times per day. Security tools also need to be faster to keep up. The document recommends automating security testing so it can be integrated into continuous integration pipelines. It suggests implementing security testing in stages from the individual developer level up to production. The goal is to provide security while also keeping developers and auditors happy by maintaining a collaborative approach and documenting the process.
Understanding The Known: OWASP A9 Using Components With Known Vulnerabilities
c0c0n 2015 Presentation. This talk discussed about the impact of using components with known vulnerabilities along with various tips and tools for software developer or administrator to facilitate identification of vulnerable components.
So Your Company Hired A Pentester
The speaker discusses security topics related to web applications including:
- Common vulnerabilities like SQL injection and cross-site scripting.
- The importance of input validation, output encoding, and minimizing database privileges.
- Ensuring all components like operating systems, servers, and libraries are securely configured and patched.
- The uses of protocols like SSH/SFTP, SSL, and PKI for securely transferring files and login authentication.
[OWASP Poland Day] Saving private token
The document discusses securely storing authentication tokens on Android devices. It recommends always encrypting sensitive data like tokens or credentials. Below Android 6 there are issues with the keystore, but on Android 6 and above the keystore is improved and backed by the lock screen for secure storage. It provides examples of using libraries like AesCbcWithIntegrity to encrypt and decrypt data using a password derived from a user PIN, and storing the encrypted data and salt in SharedPreferences. This provides a secure way to store tokens that doesn't require the user to login each time even if the phone is stolen or rooted.
Tale of Forgotten Disclosure and Lesson learned
Visual version of http://blog.anantshri.info/forgotten_disclosure_dom_xss_prettyphoto The presentation talks about how a disclsoure was forgotten and what we can do to prevent such issues and how to keep a track on Vulnerable components
Open Source Security at Scale- The DevOps Challenge
It’s no secret that open source components form the backbone of today’s software, comprising between 60-80% of modern applications. But with this, comes the alarming rise in open source vulnerabilities – more than 3,500 open source vulnerabilities were reported in 2017 – that’s 60% higher than the previous year, and the trend continued in 2018.
The question arises: how can DevOps teams ensure a visible and continuous delivery pipeline for software releases without letting security slow them down?
Join WhiteSource’s Product Manager, Shiri Ivtsan, as she discusses:
- The current state of open source vulnerabilities management;
- The latest innovations in the open source security world; and
- The best DevOps tools to protect organizations against open source vulnerabilities and ensure agility, visibility and control regarding their open source.
Secure your Web Application With The New Python Audit Hooks
The audit hooks were added to Python 3.8 with the PEP 578. This security mechanism gives you more visibility and control over what your application does at runtime. After a short introduction of the new feature, we will explore ideas on how web developers, library maintainers and security engineers can leverage it to detect and block security vulnerabilities, illustrated with concrete examples.
Characteristics of Defective Infrastructure as Code Scripts in Continuous Dep...
Defects in infrastructure as code (IaC) scripts can have serious
consequences for organizations who adopt DevOps. By identifying which characteristics of IaC scripts correlate with defects, we can identify anti-patterns, and help software practitioners make informed decisions on better development and maintenance of IaC scripts, and increase quality of IaC scripts. The goal of this paper is to help practitioners increase the quality of IaC scripts by identifying characteristics of IaC scripts and IaC development process that correlate with defects, and violate security and privacy objectives. We focus on characteristics of IaC scripts and IaC development that (i) correlate with IaC defects, and (ii) violate security and privacy-related objectives namely, confidentiality, availability, and integrity. For our initial studies, we mined open source version control systems from three organizations: Mozilla, Openstack, and Wikimedia, to identify the defect-related characteristics and conduct our case studies. From our empirical analysis, we identify (i) 14 IaC code and four churn characteristics that correlate with defects; and (ii) 12 process characteristics such as, frequency of changes, and ownership of IaC scripts that correlate with defects.
[OWASP Poland Day] A study of Electron security
Electron is an open-source framework for building desktop applications using HTML, CSS and JavaScript. It has a large attack surface including outdated dependencies, insecure default configurations, and deviations from browser security models. The document outlines security issues in Electron's core framework, such as nodeIntegration bypasses allowing remote code execution, and weaknesses in "glorified" APIs. It provides a checklist for developing secure Electron apps and introduces Electronegativity, a tool to help with security testing.
Evaluating container security with ATT&CK Framework
Containers have been crucial in helping organizations orchestrate their infrastructure requirements. The scalability and reproducibility aspects of containerized environments have enabled applications and web components to be deployed seamlessly in the cloud. While containers have multiple benefits, they also come with distinct security issues, resulting in attackers gaining access to the container, the host, and eventually the data. The first step towards implementing Container Runtime Security is to understand the current threat scenarios and adversary trends affecting the cloud containers. To aptly evaluate the container threat landscape in any environment, an attack matrix should be formulated to ensure that relevant techniques and tactic are identified for every attack stage.
The ATT&CK framework from MITRE has been a go-to framework to formulate a threat matrix, identify an adversary’s tactics and methods/techniques used to attain their end game of privilege escalation or data exfiltration. This presentation is targeted towards:
Today’s container runtime security landscape
Apply ATT&CK methodology on the container runtime environment
Provide a practical approach towards attack surface, scenarios, and attack trends
Validations and Security Best Practices
[Php Camp]Owasp Php Top5+Csrf
The document discusses common web application vulnerabilities like SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). It introduces the OWASP Top 5 list, which highlights SQL injection, XSS, remote code execution, improper configuration, and file system attacks as the most critical risks. The document demonstrates examples of SQL injection, XSS, and CSRF attacks. It recommends input validation, output encoding, and use of anti-CSRF tokens as mitigation techniques.
Divine and felonios cyber security devopsdays austin 2018
1) The document discusses the divine and felonious nature of cyber security and introduces DevSecOps.
2) It provides examples of vulnerabilities like CVE-2017-5638 and how many organizations downloaded vulnerable software versions.
3) DevSecOps is presented as integrating security practices and automation into the entire software development lifecycle to help address cyber security issues.
Web Application firewall-Mod security
ModSecurity is an open source web application firewall that provides protection against common attacks like SQL injection, cross-site scripting, and remote file inclusion. It can be configured with Apache, IIS, and Nginx servers using rules written in its SecRules language. Rules inspect variables like request headers and parameters to match patterns using regular expressions and perform actions like logging or blocking requests. The presentation provided examples of ModSecurity rules and configuration steps and discussed how it can detect and prevent attacks.
[OWASP Poland Day] Security knowledge framework
This document outlines an agenda for a presentation on the OWASP Security Knowledge Framework (SKF). The presentation introduces SKF and its goals of integrating security into the software development life cycle. It discusses how SKF provides guidance to developers on secure coding practices. The presentation demonstrates SKF and shows how it can be used with continuous integration tools. It encourages developers to get involved in making SKF widely adopted to help strengthen security across development teams.
Bootstrapping Microservices
There's a lot to get right in setting up all those production microservices.
Luckily the effort to set all this up correctly can be minimized by using open-source software to set up cloud services correctly.
Here we will demonstrate the techniques the open-source Convox uses to set up microservices correctly from day one.
We'll demonstrate some simple Docker Compose configuration files that describe common microservice patterns. Then we'll demonstrate how this configuration is translated into a fully-automated production-ready microservice architecture on AWS.
Monitoring in Big Data Platform - Albert Lewandowski, GetInData
Did you like it? Check out our blog to stay up to date: https://getindata.com/blog
The webinar was organized by GetinData on 2020. During the webinar we explaned the concept of monitoring and observability with focus on data analytics platforms.
Watch more here: https://www.youtube.com/watch?v=qSOlEN5XBQc
Whitepaper - Monitoring ang Observability for Data Platform: https://getindata.com/blog/white-paper-big-data-monitoring-observability-data-platform/
Speaker: Albert Lewandowski
Linkedin: https://www.linkedin.com/in/albert-lewandowski/
___
Getindata is a company founded in 2014 by ex-Spotify data engineers. From day one our focus has been on Big Data projects. We bring together a group of best and most experienced experts in Poland, working with cloud and open-source Big Data technologies to help companies build scalable data architectures and implement advanced analytics over large data sets.
Our experts have vast production experience in implementing Big Data projects for Polish as well as foreign companies including i.a. Spotify, Play, Truecaller, Kcell, Acast, Allegro, ING, Agora, Synerise, StepStone, iZettle and many others from the pharmaceutical, media, finance and FMCG industries.
https://getindata.com
More Related Content
What's hot
Mod Security
ModSecurity is an open source web application firewall started in 2002 by Ivan Ristic. It can be embedded into web applications and servers to provide protection without introducing additional network components. As an embeddable WAF, ModSecurity offers low overhead, scalability, and avoids single points of failure. It monitors traffic in real-time, supports logging for auditing, and can help patch vulnerabilities without requiring application changes. ModSecurity works with Apache and other web servers, and a standalone version is in development.
mod_security introduction at study2study #3
This document summarizes the ModSecurity open source web application firewall. It discusses how ModSecurity operates as an engine embedded within the Apache web server to shield applications from attacks. It provides an overview of the core components and configuration files. Key points include that ModSecurity has 4 projects, and configuration is done through files such as base_rules, which contains the core rule set, and modsecurity_localrules.conf for custom rules.
Excuse me, your Crypto is showing!
The document discusses securing HTTP servers using TLS. It recommends using the Qualys SSL Labs scanner to test servers and understand vulnerabilities. It provides code examples to configure TLS settings like requiring TLS 1.0 or higher and using secure cipher suites. Configuring TLS properly helps secure user data and prevent attacks.
CI/CD pipeline security from start to finish with WhiteSource & CircleCI
This document provides an agenda for a webinar on securing CI/CD pipelines from start to finish with CircleCI and WhiteSource. The agenda includes brief introductions to CircleCI and WhiteSource, an overview of CircleCI Orbs and how they can simplify integrations, a discussion of the state of open source usage and security, and a demo of WhiteSource scanning functionality directly within a CircleCI pipeline using an Orb.
swampUP - 2018 - The Divine and Felonious Nature of Cyber Security
The document discusses the divine and felonious nature of cyber security and introduces the concept of DevSecOps. It notes that traditional perimeter-based security is no longer sufficient given changes in applications and infrastructure. DevSecOps integrates security practices like training, requirements, threat modeling directly into the development pipeline from the beginning. This helps automate security testing and monitoring throughout the software development lifecycle and supply chain. When done right, DevSecOps helps create a "new Goldilocks zone" where security is no longer a bottleneck to rapid software development and deployment.
Mod security
Shruthi Kamath gave an introduction to Mod Security, an open-source web application firewall. She discussed what a WAF is and how it protects web servers from attacks. Mod Security was originally an Apache module but can now be used on other platforms like IIS and Nginx. It uses rule-based filtering to monitor and log HTTP traffic. Kamath provided examples of Mod Security rules and demonstrated how to install, configure, and set up rules for Mod Security on an Apache server.
DevSecCon Boston 2018: Securing the Automated Pipeline: A Tale of Navigating ...
This document discusses how security practices need to change to keep up with DevOps practices like microservices and continuous deployment. It outlines how deployment used to work with quarterly releases versus now being able to deploy multiple times per day. Security tools also need to be faster to keep up. The document recommends automating security testing so it can be integrated into continuous integration pipelines. It suggests implementing security testing in stages from the individual developer level up to production. The goal is to provide security while also keeping developers and auditors happy by maintaining a collaborative approach and documenting the process.
Understanding The Known: OWASP A9 Using Components With Known Vulnerabilities
c0c0n 2015 Presentation. This talk discussed about the impact of using components with known vulnerabilities along with various tips and tools for software developer or administrator to facilitate identification of vulnerable components.
So Your Company Hired A Pentester
The speaker discusses security topics related to web applications including:
- Common vulnerabilities like SQL injection and cross-site scripting.
- The importance of input validation, output encoding, and minimizing database privileges.
- Ensuring all components like operating systems, servers, and libraries are securely configured and patched.
- The uses of protocols like SSH/SFTP, SSL, and PKI for securely transferring files and login authentication.
[OWASP Poland Day] Saving private token
The document discusses securely storing authentication tokens on Android devices. It recommends always encrypting sensitive data like tokens or credentials. Below Android 6 there are issues with the keystore, but on Android 6 and above the keystore is improved and backed by the lock screen for secure storage. It provides examples of using libraries like AesCbcWithIntegrity to encrypt and decrypt data using a password derived from a user PIN, and storing the encrypted data and salt in SharedPreferences. This provides a secure way to store tokens that doesn't require the user to login each time even if the phone is stolen or rooted.
Tale of Forgotten Disclosure and Lesson learned
Visual version of http://blog.anantshri.info/forgotten_disclosure_dom_xss_prettyphoto The presentation talks about how a disclsoure was forgotten and what we can do to prevent such issues and how to keep a track on Vulnerable components
Open Source Security at Scale- The DevOps Challenge
It’s no secret that open source components form the backbone of today’s software, comprising between 60-80% of modern applications. But with this, comes the alarming rise in open source vulnerabilities – more than 3,500 open source vulnerabilities were reported in 2017 – that’s 60% higher than the previous year, and the trend continued in 2018.
The question arises: how can DevOps teams ensure a visible and continuous delivery pipeline for software releases without letting security slow them down?
Join WhiteSource’s Product Manager, Shiri Ivtsan, as she discusses:
- The current state of open source vulnerabilities management;
- The latest innovations in the open source security world; and
- The best DevOps tools to protect organizations against open source vulnerabilities and ensure agility, visibility and control regarding their open source.
Secure your Web Application With The New Python Audit Hooks
The audit hooks were added to Python 3.8 with the PEP 578. This security mechanism gives you more visibility and control over what your application does at runtime. After a short introduction of the new feature, we will explore ideas on how web developers, library maintainers and security engineers can leverage it to detect and block security vulnerabilities, illustrated with concrete examples.
Characteristics of Defective Infrastructure as Code Scripts in Continuous Dep...
Defects in infrastructure as code (IaC) scripts can have serious
consequences for organizations who adopt DevOps. By identifying which characteristics of IaC scripts correlate with defects, we can identify anti-patterns, and help software practitioners make informed decisions on better development and maintenance of IaC scripts, and increase quality of IaC scripts. The goal of this paper is to help practitioners increase the quality of IaC scripts by identifying characteristics of IaC scripts and IaC development process that correlate with defects, and violate security and privacy objectives. We focus on characteristics of IaC scripts and IaC development that (i) correlate with IaC defects, and (ii) violate security and privacy-related objectives namely, confidentiality, availability, and integrity. For our initial studies, we mined open source version control systems from three organizations: Mozilla, Openstack, and Wikimedia, to identify the defect-related characteristics and conduct our case studies. From our empirical analysis, we identify (i) 14 IaC code and four churn characteristics that correlate with defects; and (ii) 12 process characteristics such as, frequency of changes, and ownership of IaC scripts that correlate with defects.
[OWASP Poland Day] A study of Electron security
Electron is an open-source framework for building desktop applications using HTML, CSS and JavaScript. It has a large attack surface including outdated dependencies, insecure default configurations, and deviations from browser security models. The document outlines security issues in Electron's core framework, such as nodeIntegration bypasses allowing remote code execution, and weaknesses in "glorified" APIs. It provides a checklist for developing secure Electron apps and introduces Electronegativity, a tool to help with security testing.
Evaluating container security with ATT&CK Framework
Containers have been crucial in helping organizations orchestrate their infrastructure requirements. The scalability and reproducibility aspects of containerized environments have enabled applications and web components to be deployed seamlessly in the cloud. While containers have multiple benefits, they also come with distinct security issues, resulting in attackers gaining access to the container, the host, and eventually the data. The first step towards implementing Container Runtime Security is to understand the current threat scenarios and adversary trends affecting the cloud containers. To aptly evaluate the container threat landscape in any environment, an attack matrix should be formulated to ensure that relevant techniques and tactic are identified for every attack stage.
The ATT&CK framework from MITRE has been a go-to framework to formulate a threat matrix, identify an adversary’s tactics and methods/techniques used to attain their end game of privilege escalation or data exfiltration. This presentation is targeted towards:
Today’s container runtime security landscape
Apply ATT&CK methodology on the container runtime environment
Provide a practical approach towards attack surface, scenarios, and attack trends
Validations and Security Best Practices
[Php Camp]Owasp Php Top5+Csrf
The document discusses common web application vulnerabilities like SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). It introduces the OWASP Top 5 list, which highlights SQL injection, XSS, remote code execution, improper configuration, and file system attacks as the most critical risks. The document demonstrates examples of SQL injection, XSS, and CSRF attacks. It recommends input validation, output encoding, and use of anti-CSRF tokens as mitigation techniques.
Divine and felonios cyber security devopsdays austin 2018
1) The document discusses the divine and felonious nature of cyber security and introduces DevSecOps.
2) It provides examples of vulnerabilities like CVE-2017-5638 and how many organizations downloaded vulnerable software versions.
3) DevSecOps is presented as integrating security practices and automation into the entire software development lifecycle to help address cyber security issues.
Web Application firewall-Mod security
ModSecurity is an open source web application firewall that provides protection against common attacks like SQL injection, cross-site scripting, and remote file inclusion. It can be configured with Apache, IIS, and Nginx servers using rules written in its SecRules language. Rules inspect variables like request headers and parameters to match patterns using regular expressions and perform actions like logging or blocking requests. The presentation provided examples of ModSecurity rules and configuration steps and discussed how it can detect and prevent attacks.
[OWASP Poland Day] Security knowledge framework
This document outlines an agenda for a presentation on the OWASP Security Knowledge Framework (SKF). The presentation introduces SKF and its goals of integrating security into the software development life cycle. It discusses how SKF provides guidance to developers on secure coding practices. The presentation demonstrates SKF and shows how it can be used with continuous integration tools. It encourages developers to get involved in making SKF widely adopted to help strengthen security across development teams.
What's hot (20)
CI/CD pipeline security from start to finish with WhiteSource & CircleCI
CI/CD pipeline security from start to finish with WhiteSource & CircleCI
swampUP - 2018 - The Divine and Felonious Nature of Cyber Security
swampUP - 2018 - The Divine and Felonious Nature of Cyber Security
DevSecCon Boston 2018: Securing the Automated Pipeline: A Tale of Navigating ...
DevSecCon Boston 2018: Securing the Automated Pipeline: A Tale of Navigating ...
Understanding The Known: OWASP A9 Using Components With Known Vulnerabilities
Understanding The Known: OWASP A9 Using Components With Known Vulnerabilities
Open Source Security at Scale- The DevOps Challenge
Open Source Security at Scale- The DevOps Challenge
Secure your Web Application With The New Python Audit Hooks
Secure your Web Application With The New Python Audit Hooks
Characteristics of Defective Infrastructure as Code Scripts in Continuous Dep...
Characteristics of Defective Infrastructure as Code Scripts in Continuous Dep...
Evaluating container security with ATT&CK Framework
Evaluating container security with ATT&CK Framework
Divine and felonios cyber security devopsdays austin 2018
Divine and felonios cyber security devopsdays austin 2018
Similar to Melbourne meetup march 2018
Bootstrapping Microservices
There's a lot to get right in setting up all those production microservices.
Luckily the effort to set all this up correctly can be minimized by using open-source software to set up cloud services correctly.
Here we will demonstrate the techniques the open-source Convox uses to set up microservices correctly from day one.
We'll demonstrate some simple Docker Compose configuration files that describe common microservice patterns. Then we'll demonstrate how this configuration is translated into a fully-automated production-ready microservice architecture on AWS.
Monitoring in Big Data Platform - Albert Lewandowski, GetInData
Did you like it? Check out our blog to stay up to date: https://getindata.com/blog
The webinar was organized by GetinData on 2020. During the webinar we explaned the concept of monitoring and observability with focus on data analytics platforms.
Watch more here: https://www.youtube.com/watch?v=qSOlEN5XBQc
Whitepaper - Monitoring ang Observability for Data Platform: https://getindata.com/blog/white-paper-big-data-monitoring-observability-data-platform/
Speaker: Albert Lewandowski
Linkedin: https://www.linkedin.com/in/albert-lewandowski/
___
Getindata is a company founded in 2014 by ex-Spotify data engineers. From day one our focus has been on Big Data projects. We bring together a group of best and most experienced experts in Poland, working with cloud and open-source Big Data technologies to help companies build scalable data architectures and implement advanced analytics over large data sets.
Our experts have vast production experience in implementing Big Data projects for Polish as well as foreign companies including i.a. Spotify, Play, Truecaller, Kcell, Acast, Allegro, ING, Agora, Synerise, StepStone, iZettle and many others from the pharmaceutical, media, finance and FMCG industries.
https://getindata.com
Compliance as Code Everywhere
Presentation from Cloud Expo Asia Hong Kong covering the rationale for "Compliance as Code" and how InSpec may be applied to servers, cloud platforms, and much more to keep track of your compliance everywhere.
Keeping Your Kubernetes Cluster Secure
Many organizations are shifting to containers and Kubernetes, and that move means learning new ways to secure their environments. Kubernetes clusters have to be hardened at different levels. We have to consider the nodes where the Kubernetes control plane is running. We also need to secure the Kubernetes workloads and check the code that creates them. And we need to inspect the containers we are using for vulnerabilities and watch for unusual behavior.
Gene will show you some open-source tools that can find issues and vulnerabilities at each layer. You will see how they can be used to build your Kubernetes cluster safely and keep it secure.
DevOpsDays Singapore - Continuous Auditing with Compliance as Code
This document discusses using Chef Automate to enable continuous compliance through a three step process of detecting issues, correcting problems, and automating compliance. It notes that many organizations currently assess compliance inconsistently or after deploying code to production. Chef Automate allows detecting and correcting issues across infrastructure in a single platform using the same language for both DevOps and InfoSec teams. This enables deploying applications with confidence while maintaining security and compliance.
Docker Logging and analysing with Elastic Stack
Collecting logs from the entire stateless environment is challenging parts of the application lifecycle. Correlating business logs with operating system metrics to provide insights is a crucial part of the entire organization. What aspects should be considered while you design your logging solutions?
Docker Logging and analysing with Elastic Stack - Jakub Hajek
Collecting logs from the entire stateless environment is challenging parts of the application lifecycle. Correlating business logs with operating system metrics to provide insights is a crucial part of the entire organization. We will see the technical presentation on how to manage a large amount of the data in a typical environment with microservices.
DevSec Delight with Compliance as Code - Matt Ray - AgileNZ 2017
For too long, audits and security reviews have been seen as resistant to the frequent release of software. Auditors require access to static systems and environments, which would seem to make continuous delivery impossible. Too frequently audits are a fire drill sampling of the current state and temporary fixes are put in place to appease the compliance audit without being integrated into future releases.
About Matt Ray:
Matt Ray is the Manager and Solutions Architect for Asia Pacific and Japan for Chef. He has worked in large enterprise software companies and founded his own startups in a wide variety of industries including banking, retail and government.
He has been active in open source communities for over two decades and has spoken at, and helped organise, many conferences and Meetups. He currently resides in Sydney, Australia after relocating from Austin, Texas. He podcasts at SoftwareDefinedTalk.com, blogs at LeastResistance.net and is @mattray on Twitter, IRC, GitHub and too many Slacks.
2307 - DevBCN - Otel 101_compressed.pdf
This document discusses OpenTelemetry, an open source project for collecting and managing traces, metrics, and logs in a vendor-agnostic way. It provides an overview of distributed tracing and explains why distributed traces are useful for root cause analysis. It also describes how to enable distributed tracing by instrumenting services, using a collector, and configuring pipelines in the OpenTelemetry Collector to receive, process, and export telemetry data.
Functioning incessantly of Data Science Platform with Kubeflow - Albert Lewan...
Did you like it? Check out our blog to stay up to date: https://getindata.com/blog
The talk is focused on administration, development and monitoring platform with Apache Spark, Apache Flink and Kubeflow in which the monitoring stack is based on Prometheus stack.
Author: Albert Lewandowski
Linkedin: https://www.linkedin.com/in/albert-lewandowski/
___
Getindata is a company founded in 2014 by ex-Spotify data engineers. From day one our focus has been on Big Data projects. We bring together a group of best and most experienced experts in Poland, working with cloud and open-source Big Data technologies to help companies build scalable data architectures and implement advanced analytics over large data sets.
Our experts have vast production experience in implementing Big Data projects for Polish as well as foreign companies including i.a. Spotify, Play, Truecaller, Kcell, Acast, Allegro, ING, Agora, Synerise, StepStone, iZettle and many others from the pharmaceutical, media, finance and FMCG industries.
https://getindata.com
Apache Kafka - Scalable Message-Processing and more !
ndependent of the source of data, the integration of event streams into an Enterprise Architecture gets more and more important in the world of sensors, social media streams and Internet of Things. Events have to be accepted quickly and reliably, they have to be distributed and analysed, often with many consumers or systems interested in all or part of the events. How can me make sure that all these event are accepted and forwarded in an efficient and reliable way? This is where Apache Kafaka comes into play, a distirbuted, highly-scalable messaging broker, build for exchanging huge amount of messages between a source and a target.
This session will start with an introduction into Apache and presents the role of Apache Kafka in a modern data / information architecture and the advantages it brings to the table. Additionally the Kafka ecosystem will be covered as well as the integration of Kafka in the Oracle Stack, with products such as Golden Gate, Service Bus and Oracle Stream Analytics all being able to act as a Kafka consumer or producer.
NET Aspire - NET Conf IL 2024 - Tamir Dresher.pdf
.NET Aspire is an opinionated, cloud ready stack for building observable, production ready,
distributed applications. .NET
Azure from scratch part 4
DevOps (Continuous Integrations, Continuous Delivery & Continuous deployment using Jenkins and Visual studio team services, setting up VTST build Agents, Integrating VSTS with SonarQube, NDepend,) , Complete automation of pushing code into VSTS from Visual Studio, Building Code by a Jenkin Server hosted on Azure and pushing that successful build on to Azure Web App via Release Pipeline or directly from Jenkins,VSTS Default agents, Setting up local agent from scratch, Setting up agents for code build, VSTS, Visual Studio Online Agents, Agent Pools, Hosted Agents, Hosted VS2017. Hosted Linux Agents, Setting up agent on VS Dev Test Labs, Setting up Template Parameters for Continuos Pipeline, Build Agent Creation Dynamically, Random Machine Name, Random Passwords, Dynamic Agent creation in VS Dev Test labs, Sonarcube, Code quality, Code Analysis, MSBuild, Integrate VSTS Build with NDepend, Package manager, Monolithic Architecture, Nuget, Package management, Npm js.com, Semantic versioning, Creating a nuget package, nuspec file, GitVersion Plugin, FeedURL, Chocolatey for package management, Chocolatey, chocolatey workflow,
Internship msc cs
The document describes a travel agency management system that offers the following key features:
- Integrated travel agents located directly in companies to make reservations and issue tickets.
- An electronic booking system that is IATA approved along with state-of-the-art technology.
- Dedicated and bilingual staff that provide personalized service and account management for corporate travel needs.
- One-stop shopping for all travel arrangements along with corporate agreements with airlines.
Can i service this from my raspberry pi
Infrastructure-related skills are essential for developers in cross-functional teams who build microservices for the cloud. Becoming proficient in infrastructure development is not just about understanding the hardware and software components on top of which applications run in the cloud. It's also about being able to use the tools that provide virtual access to this infrastructure and enable us to provision, configure, monitor it, and deploy applications to it. In this talk Gesa shares how building a Kubernetes cluster of Raspberry Pis and serving applications from it can help in acquiring fundamental infrastructure skills.
Observability for Integration Using WSO2 Enterprise Integrator
This slide deck will explain the comprehensive set of observability features in WSO2 Enterprise Integrator that can be used in your enterprise.
ThoughtWorks Tech Talks NYC: DevOops, 10 Ops Things You Might Have Forgotten ...
Thoughtworks Tech Talks NYC, 11/30
We built an application or a platform! However, we soon realize that it is t-minus two weeks before release and we have no way of supporting it when it goes to production. Operations has not been trained, no one will know if a component goes down, and somehow the pipeline used in testing does not work in production. Oops. In this talk, we'll cover ten tips from the operations battlefront to remember as you develop an application or platform. With a focus on operations as a user and designing for support, these tips range from reminders on systems quirks to practices on engaging operations early in the development process. By taking a bit of an "operations" mindset in the development process, we can ease the release process and move closer to DevOps culture.
The Hacking Games - A Road to Post Exploitation Meetup - 20240222.pptx
Stay safe, grab a drink and join us virtually for our upcoming "The Hacking Game - A Road to Post Exploitation" meetup
to learn how hackers can compromise the software supply chain, advanced data protection methods on WebLogic Server and
how to use AI in order to protect your software.
Agenda:
17:00 - 17:10 - 'Opening words' - by Gidi Farkash (CISO at Pipl Security)
17:10 - 17:40 - 'Tracking Attackers in Open Source Supply Chain - Lessons Learned' - by Jossef Harush Kadouri (Head of Software Supply Chain Security at Checkmarx)
17:40 - 18:20 - 'WebLogic - The Road to Post Exploitation' - by Amit German (Cyber Security Researcher at Pentera)
18:20 - 19:00 - 'AI In The Hands of Application Security' - by Brit Glazer (Head of Information Security at Unit)
Comment améliorer le quotidien des Développeurs PHP ?
Conférence présentée lors du summer meetup de l'AFUP à Limoges le 19 juin 2018. Son objectif est de présenter plusieurs outils permettant de gagner rapidement en efficacité au quotidien.
How to improve ELK log pipeline performance
The document discusses improving the processing speed of logs in an ELK stack. It finds that logs are beginning to back up due to high average request volumes of around 1 million requests per minute. It analyzes various logging pipeline architectures and patterns to address this. It recommends measuring key parts of the pipeline to identify bottlenecks, improving the Logstash grok parser performance, increasing Kafka partitions to distribute load more evenly, and scaling Logstash instances to parallelize ingestion. These changes aim to reduce the risks of high throughput, lost records, and latency in the logging pipeline.
Similar to Melbourne meetup march 2018 (20)
Monitoring in Big Data Platform - Albert Lewandowski, GetInData
Monitoring in Big Data Platform - Albert Lewandowski, GetInData
DevOpsDays Singapore - Continuous Auditing with Compliance as Code
DevOpsDays Singapore - Continuous Auditing with Compliance as Code
Docker Logging and analysing with Elastic Stack - Jakub Hajek
Docker Logging and analysing with Elastic Stack - Jakub Hajek
DevSec Delight with Compliance as Code - Matt Ray - AgileNZ 2017
DevSec Delight with Compliance as Code - Matt Ray - AgileNZ 2017
Functioning incessantly of Data Science Platform with Kubeflow - Albert Lewan...
Functioning incessantly of Data Science Platform with Kubeflow - Albert Lewan...
Apache Kafka - Scalable Message-Processing and more !
Apache Kafka - Scalable Message-Processing and more !
Observability for Integration Using WSO2 Enterprise Integrator
Observability for Integration Using WSO2 Enterprise Integrator
ThoughtWorks Tech Talks NYC: DevOops, 10 Ops Things You Might Have Forgotten ...
ThoughtWorks Tech Talks NYC: DevOops, 10 Ops Things You Might Have Forgotten ...
The Hacking Games - A Road to Post Exploitation Meetup - 20240222.pptx
The Hacking Games - A Road to Post Exploitation Meetup - 20240222.pptx
Comment améliorer le quotidien des Développeurs PHP ?
Comment améliorer le quotidien des Développeurs PHP ?
Recently uploaded
Modelling Up - DDDEurope 2024 - Amsterdam
What to do when you have a perfect model for your software but you are constrained by an imperfect business model?
This talk explores the challenges of bringing modelling rigour to the business and strategy levels, and talking to your non-technical counterparts in the process.
GreenCode-A-VSCode-Plugin--Dario-Jurisic
Presentation about a VSCode plugin from Dario Jurisic at the GSD Community Stage meetup
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Learn about the latest innovations in and around OpenUI5/SAPUI5: UI5 Tooling, UI5 linter, UI5 Web Components, Web Components Integration, UI5 2.x, UI5 GenAI.
Recording:
https://www.youtube.com/live/MSdGLG2zLy8?si=INxBHTqkwHhxV5Ta&t=0
在线购买加拿大英属哥伦比亚大学毕业证本科学位证书原版一模一样
原版一模一样【微信：741003700 】【加拿大英属哥伦比亚大学毕业证本科学位证书】【微信：741003700 】学位证，留信认证（真实可查，永久存档）offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。
本公司拥有海外各大学样板无数，能完美还原海外各大学 Bachelor Diploma degree, Master Degree Diploma
1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Charla impartida en el evento de "KuberTENes Birthday Bash Guadalajara" para celebrar el 10mo. aniversario de Kubernetes #kuberTENes #celebr8k8s #k8s
Hand Rolled Applicative User Validation Code Kata
Could you use a simple piece of Scala validation code (granted, a very simplistic one too!) that you can rewrite, now and again, to refresh your basic understanding of Applicative operators <*>, <*, *>?
The goal is not to write perfect code showcasing validation, but rather, to provide a small, rough-and ready exercise to reinforce your muscle-memory.
Despite its grandiose-sounding title, this deck consists of just three slides showing the Scala 3 code to be rewritten whenever the details of the operators begin to fade away.
The code is my rough and ready translation of a Haskell user-validation program found in a book called Finding Success (and Failure) in Haskell - Fall in love with applicative functors.
Malibou Pitch Deck For Its €3M Seed Round
French start-up Malibou raised a €3 million Seed Round to develop its payroll and human resources
management platform for VSEs and SMEs. The financing round was led by investors Breega, Y Combinator, and FCVC.
原版定制美国纽约州立大学奥尔巴尼分校毕业证学位证书原版一模一样
原版一模一样【微信：741003700 】【美国纽约州立大学奥尔巴尼分校毕业证学位证书】【微信：741003700 】学位证，留信认证（真实可查，永久存档）offer、雅思、外壳等材料/诚信可靠,可直接看成品样本，帮您解决无法毕业带来的各种难题！外壳，原版制作，诚信可靠，可直接看成品样本。行业标杆！精益求精，诚心合作，真诚制作！多年品质 ,按需精细制作，24小时接单,全套进口原装设备。十五年致力于帮助留学生解决难题，包您满意。
本公司拥有海外各大学样板无数，能完美还原海外各大学 Bachelor Diploma degree, Master Degree Diploma
1:1完美还原海外各大学毕业材料上的工艺：水印，阴影底纹，钢印LOGO烫金烫银，LOGO烫金烫银复合重叠。文字图案浮雕、激光镭射、紫外荧光、温感、复印防伪等防伪工艺。材料咨询办理、认证咨询办理请加学历顾问Q/微741003700
留信网认证的作用:
1:该专业认证可证明留学生真实身份
2:同时对留学生所学专业登记给予评定
3:国家专业人才认证中心颁发入库证书
4:这个认证书并且可以归档倒地方
5:凡事获得留信网入网的信息将会逐步更新到个人身份内，将在公安局网内查询个人身份证信息后，同步读取人才网入库信息
6:个人职称评审加20分
7:个人信誉贷款加10分
8:在国家人才网主办的国家网络招聘大会中纳入资料，供国家高端企业选择人才
Top Benefits of Using Salesforce Healthcare CRM for Patient Management.pdf
Salesforce Healthcare CRM, implemented by VALiNTRY360, revolutionizes patient management by enhancing patient engagement, streamlining administrative processes, and improving care coordination. Its advanced analytics, robust security, and seamless integration with telehealth services ensure that healthcare providers can deliver personalized, efficient, and secure patient care. By automating routine tasks and providing actionable insights, Salesforce Healthcare CRM enables healthcare providers to focus on delivering high-quality care, leading to better patient outcomes and higher satisfaction. VALiNTRY360's expertise ensures a tailored solution that meets the unique needs of any healthcare practice, from small clinics to large hospital systems.
For more info visit us https://valintry360.com/solutions/health-life-sciences
How to write a program in any programming language
How to write a program in any programming language
All you need to know about Spring Boot and GraalVM
All you need to know about Spring Boot and GraalVM 🐰
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
Regarding mobile operating systems, two major players dominate our thoughts: Android and iPhone. With Android leading the market, software development companies are focused on delivering apps compatible with this OS. Ensuring an app's functionality across various Android devices, OS versions, and hardware specifications is critical, making Android app testing essential.
Artificia Intellicence and XPath Extension Functions
The purpose of this presentation is to provide an overview of how you can use AI from XSLT, XQuery, Schematron, or XML Refactoring operations, the potential benefits of using AI, and some of the challenges we face.
一比一原版(USF毕业证)旧金山大学毕业证如何办理
USF硕士毕业证成绩单【微信95270640】一比一伪造旧金山大学文凭@假冒USF毕业证成绩单+Q微信95270640办理USF学位证书@仿造USF毕业文凭证书@购买旧金山大学毕业证成绩单USF真实使馆认证/真实留信认证回国人员证明
#一整套旧金山大学文凭证件办理#—包含旧金山大学旧金山大学本科毕业证成绩单学历认证|使馆认证|归国人员证明|教育部认证|留信网认证永远存档教育部学历学位认证查询办理国外文凭国外学历学位认证#我们提供全套办理服务。
一整套留学文凭证件服务：
一：旧金山大学旧金山大学本科毕业证成绩单毕业证 #成绩单等全套材料从防伪到印刷水印底纹到钢印烫金
二：真实使馆认证（留学人员回国证明）使馆存档
三：真实教育部认证教育部存档教育部留服网站永久可查
四：留信认证留学生信息网站永久可查
国外毕业证学位证成绩单办理方法：
1客户提供办理旧金山大学旧金山大学本科毕业证成绩单信息：姓名生日专业学位毕业时间等（如信息不确定可以咨询顾问：我们有专业老师帮你查询）；
2开始安排制作毕业证成绩单电子图；
3毕业证成绩单电子版做好以后发送给您确认；
4毕业证成绩单电子版您确认信息无误之后安排制作成品；
5成品做好拍照或者视频给您确认；
6快递给客户（国内顺丰国外DHLUPS等快读邮寄）。
教育部文凭学历认证认证的用途：
如果您计划在国内发展那么办理国内教育部认证是必不可少的。事业性用人单位如银行国企公务员在您应聘时都会需要您提供这个认证。其他私营 #外企企业无需提供！办理教育部认证所需资料众多且烦琐所有材料您都必须提供原件我们凭借丰富的经验帮您快速整合材料让您少走弯路。
实体公司专业为您服务如有需要请联系我: 微信95270640奈一次次令他失望山娃今年岁上五年级识得很多字从走出小屋开始山娃就知道父亲的家和工地共有一个很动听的名字——天河工地的底层空空荡荡很宽阔很凉爽在地上铺上报纸和水泥袋父亲和工人们中午全睡在地上地面坑坑洼洼山娃曾多次绊倒过也曾有长铁钉穿透凉鞋刺在脚板上但山娃不怕工地上也常有五六个从乡下来的小学生他们的父母亲也是高楼上的建筑工人小伙伴来自不同省份都操着带有浓重口音的普通话可不知为啥山娃不仅很快与他们熟识了
Energy consumption of Database Management - Florina Jonuzi
Presentation from Florina Jonuzi at the GSD Community Stage Meetup on June 06, 2024
J-Spring 2024 - Going serverless with Quarkus, GraalVM native images and AWS ...
Presented at NLJUG's J-Spring 2024.
Liberarsi dai framework con i Web Component.pptx
In Italian
Presentazione sulle feature e l'utilizzo dei Web Component nell sviluppo di pagine e applicazioni web. Racconto delle ragioni storiche dell'avvento dei Web Component. Evidenziazione dei vantaggi e delle sfide poste, indicazione delle best practices, con particolare accento sulla possibilità di usare web component per facilitare la migrazione delle proprie applicazioni verso nuovi stack tecnologici.
UI5con 2024 - Bring Your Own Design System
How do you combine the OpenUI5/SAPUI5 programming model with a design system that makes its controls available as Web Components? Since OpenUI5/SAPUI5 1.120, the framework supports the integration of any Web Components. This makes it possible, for example, to natively embed own Web Components of your design system which are created with Stencil. The integration embeds the Web Components in a way that they can be used naturally in XMLViews, like with standard UI5 controls, and can be bound with data binding. Learn how you can also make use of the Web Components base class in OpenUI5/SAPUI5 to also integrate your Web Components and get inspired by the solution to generate a custom UI5 library providing the Web Components control wrappers for the native ones.
Recently uploaded (20)
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
YAML crash COURSE how to write yaml file for adding configuring details
YAML crash COURSE how to write yaml file for adding configuring details
Top Benefits of Using Salesforce Healthcare CRM for Patient Management.pdf
Top Benefits of Using Salesforce Healthcare CRM for Patient Management.pdf
How to write a program in any programming language
How to write a program in any programming language
All you need to know about Spring Boot and GraalVM
All you need to know about Spring Boot and GraalVM
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
Artificia Intellicence and XPath Extension Functions
Artificia Intellicence and XPath Extension Functions
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
J-Spring 2024 - Going serverless with Quarkus, GraalVM native images and AWS ...
J-Spring 2024 - Going serverless with Quarkus, GraalVM native images and AWS ...
Melbourne meetup march 2018
- 2. All contents © MuleSoft Inc. Salesforce and MuleSoft 2
- 3. All contents © MuleSoft Inc. API-Led Integration EA – Mulesoft API Blueprint Readout Technical Delivery Lead: Wes Herbert Version: 1.0
- 4. More Beer and Pizza…. Break
- 5. by Michael Hyatt, MuleSoft Tracing Mule flows with Zipkin and Opentracing
- 6. All contents © MuleSoft Inc. Debugging distributed systems
- 7. All contents © MuleSoft Inc. Real life debugging • Often starts with end user latency complaint • Success of reuse = debugging becomes harder • Debugging tools? – log files :’( – vendor tools – Log aggregator?
- 8. All contents © MuleSoft Inc. Design for traceability • Developers and support are users of the system and their experience matters! • Designed for distributed systems tracing • Cross-technology • Cross-component • Auto-discovery and dynamic resolution of dependencies • Ability to zoom in and out of technologies
- 9. All contents © MuleSoft Inc. Opentracing and Zipkin • https://opentracing.io - A vendor-neutral open standard for distributed tracing • https://zipkin.io - Tracer implementation (one of them) a=123 a=456 a=0
- 10. All contents © MuleSoft Inc. Tracing propagation
- 11. All contents © MuleSoft Inc. Standard for trace propagation, but… Client Span Server Span ┌──────────────────┐ ┌──────────────────┐ │ │ │ │ │ TraceContext │ Http Request Headers │ TraceContext │ │ ┌──────────────┐ │ ┌───────────────────┐ │ ┌──────────────┐ │ │ │ TraceId │ │ │ X─B3─TraceId │ │ │ TraceId │ │ │ │ │ │ │ │ │ │ │ │ │ │ ParentSpanId │ │ Extract │ X─B3─ParentSpanId │ Inject │ │ ParentSpanId │ │ │ │ ├─┼─────────>│ ├────────┼>│ │ │ │ │ SpanId │ │ │ X─B3─SpanId │ │ │ SpanId │ │ │ │ │ │ │ │ │ │ │ │ │ │ Sampled │ │ │ X─B3─Sampled │ │ │ Sampled │ │ │ └──────────────┘ │ └───────────────────┘ │ └──────────────┘ │ │ │ │ │ └──────────────────┘ └──────────────────┘https://github.com/openzipkin/b3-propagation
- 12. All contents © MuleSoft Inc. Flows and activities are Spans. Callers and callees are parents and children. Spans are propertied from outside 1 2 3 4 6 8 5 7 9 1 2 3 4 6 8 5 7 9
- 13. Demo time!
- 14. All contents © MuleSoft Inc.