On November 27, 2017, MedStack Co-Founder and CTO Simon Woodside presented at DevTO. MedStack is a cloud developer platform that accelerates the integration of healthcare-specific privacy and data exchange standards. Over 30 applications in the US and Canada have rolled out on MedStack's cloud hosting service, which is built on custom DevOps automation of Linux deployment tooling, for both flexibility and security. Simon discussed how the company uses a combination of unique tooling creativity and cybersecurity knowhow to deliver business value to their customers. Watch Simon's presentation here: https://youtu.be/Z4gtTYKBKcY

1. Powering Up DevOps Tooling
to Deliver Both Security &
Developer Flexibility
Simon Woodside, CTO
MedStack.co

2. Tools Matter

3. Platform for App-Enabled Healthcare
Privacy &
Security
HIPAA
Compliance
Developer
Flexibility

4. The Stack
INFRASTRUCTURE
OS/SERVICES
APP

5. INFRASTRUCTURE
OS/SERVICES
APP Anything
Linux
AWS Azure
Google IBM
The Stack

7. Manual

8. #! /bin/bash
Ansible
ansible + terraform
+ stuff
Manual

9. #! /bin/bash
Ansible
ansible + terraform
+ stuff
Manual
Chef
Puppet
Docker
nix
CoreOSDokku
Cloud
Foundry
Salt

10. Breadth First Search
1. Form your own opinion
2. Go to events
3. Discuss with experts
that you know

11. 1 Make each program do one thing well. To do a
new job, build afresh rather than complicate old
programs by adding new "features".
2 Expect the output of every program to become
the input to another, as yet unknown, program.
Don't clutter output with extraneous
information. Avoid stringently columnar or
binary input formats. Don't insist on interactive
input.
3 Design and build software, even operating
systems, to be tried early, ideally within weeks.
Don't hesitate to throw away the clumsy parts
and rebuild them.
4 Use tools in preference to unskilled help to
lighten a programming task, even if you have to
detour to build the tools and expect to throw
some of them out after you've finished using
them.
•Write programs that
do one thing and do it
well.
•Write programs to
work together.
•Write programs to
handle text streams,
because that is a
universal interface.
Let complexity emerge

12. Security
matters

15. PHI
GnuPG Encryption
Data lifecycle policies
Data access restrictions
etc…

16. PHI
GnuPG Encryption
Data lifecycle policies
Data access restrictions
etc…
No security is perfect

18. and ~ 5,000 lines library code

19. Start small, build up
Breadth first search
Modular architecture, UNIX philosophy
Secure from the start
Write less code
…
Be cool
simon@medstack.co

20. Want to learn more about MedStack?
Visit us at MedStack.co