GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Â
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
Â
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Â
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
Â
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
Dev Dives: Train smarter, not harder â active learning and UiPath LLMs for do...UiPathCommunity
Â
đĽ Speed, accuracy, and scaling â discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Miningâ˘:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing â with little to no training required
Get an exclusive demo of the new family of UiPath LLMs â GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
đ¨âđŤ Andras Palfi, Senior Product Manager, UiPath
đŠâđŤ Lenka Dulovicova, Product Program Manager, UiPath
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
Â
Keynote at DIGIT West Expo, Glasgow on 29 May 2024.
Cheryl Hung, ochery.com
Sr Director, Infrastructure Ecosystem, Arm.
The key trends across hardware, cloud and open-source; exploring how these areas are likely to mature and develop over the short and long-term, and then considering how organisations can position themselves to adapt and thrive.
DevOps and Testing slides at DASA ConnectKari Kakkonen
Â
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
Essentials of Automations: Optimizing FME Workflows with ParametersSafe Software
Â
Are you looking to streamline your workflows and boost your projectsâ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, youâre in the right place.
Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part âEssentials of Automationâ series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects.
Hereâs what youâll gain:
- Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows.
- Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy.
- Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency.
- Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity.
Weâll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic.
Donât miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Â
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
The Art of the Pitch: WordPress Relationships and SalesLaura Byrne
Â
Clients donât know what they donât know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes?
All these questions and more will be explored as we talk about matching clientsâ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
Â
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. Whatâs changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
Â
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties â USA
Expansion of bot farms â how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks â Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
Neuro-symbolic is not enough, we need neuro-*semantic*Frank van Harmelen
Â
Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as âpredictable inferenceâ.
All of this illustrated with link prediction over knowledge graphs, but the argument is general.
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Â
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
Â
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
⢠The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
⢠Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
⢠Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
⢠Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Â
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
2. Interview questions and answers- Page 2
1. Tell me about yourself
Steps to answer interview questions:
Step 1: Give a brief introduction about yourself:
For example: My name is Peter. I graduated from XYZ
University with bachelor degree in Sales. After 5 years
working as a Sales Manager, I have well experienced in
training, mentoring and motivating other sales personnel
to achieve the goals of the Company.
Step 2: Give a brief summary of your experience in
your latest positions:
Give a summary of 2-3 latest companies that you have
worked for and companies that have helped you succeed
with your new jobs.
For example: recently, I have worked for ABC Company
as Sales Manager for North-East Region. With my skills
from training courses, I developed many sales campaigns
which contributed much to the development of new
customers and maintenance of current customer base.
After 6 months, my sales force and I did regain the
companyâs market and promote the sales revenue up by
37%.
3. Interview questions and answers- Page 3
1. Tell me about yourself - continue
Step 3: Connect your ability to the employerâs
requirements:
Never assume that the employer will by himself be able to
connect all of your abilities to the job requirements.
Step 4: Make a concerning question:
With a concerning question, it will help you gain âcontrolâ
of the interview. You may reduce the stress of the
interview with such questions.
For example: I would like to know the strong points of
your companyâs current Sales force.
4. Interview questions and answers- Page 4
2. What are your biggest strengths?
This question will help polishing your qualification to the
requirements of the employer.
Steps to answer this question:
a) Identify which you are good at:
⢠Knowledge;
⢠Experience;
⢠Skills;
⢠Abilities.
b) Prepare a list of your strong points:
c) Review the recruitment requirements:
You should review carefully the recruitment requirements
to know for sure which requirements are the most
important to the employer.
5. Interview questions and answers- Page 5
2. What are your biggest strengths? - continue
d) Make a list of your strong points in your resume/cover
letter:
List and describe your strong points in your resume and
cover letter orderly.
You should make descriptions to those points in your
resume.
e) Prepare persuasive answers to the question of the
employer about strong points:
You do not only state your strong points to the employer
but must also provide evidence for them by references or
records attached with your application form.
Useful source: List of strong points:
http://interview-tips-123.blogspot.com/2013/05/list-of-
strong-points.html
6. Interview questions and answers- Page 6
3. What have you learned from mistakes on the Erp field?
a. Answer tips
Here you have to come up with something or you strain
credibility. Make it small, well intentioned mistake with a
positive lesson learned. An example would be working too
far ahead of colleagues on a project and thus throwing
coordination off.
Everyone makes mistakes, of course, but some companies
are more willing to learn from them than punish those
involved.
Youâve learned that when you do make mistakes, someone
is usually disappointed in the choice you made, but you have
to figure it out for yourself, they might help you decide what
âs right and what âss wrong, but youâll be the decider on
which you choose. Youâve learned that people do care about
you, and to not do it again if you donât want to.
b. Answer samples
Every one makes mistakes but only few people can realize
there mistakes and they donât want to repeat those mistakes
againâŚ.. I am the one in those few people, I donât want to
repeat the mistakes which had done by me in my job/work.
7. Interview questions and answers- Page 7
4. What have you done to improve your Erp knowledge in the last year?
a. Answer tips
⢠Try to include improvement activities that relate to the job.
A wide variety of activities can be mentioned as positive self-
improvement. Have some good ones handy to mention.
⢠Employers look for applicants who are goal-oriented. Show
a desire for continuous learning by listing hobbies non-work
related. Regardless of what hobbies you choose to
showcase, remember that the goal is to prove self-
sufficiency, time management, and motivation.
b. Answer samples
⢠Every should learn from his mistake. I always try to consult
my mistakes with my kith and kin especially with elderly and
experienced person.
8. Interview questions and answers- Page 8
5. What are your career goals?
a. The reasons of this question:
This question will test your ability and ambition to develop
yourself as well as the ability to plan for the future.
b. Levels of career goals:
⢠You are not sure about your goals, then answer: Iâm rather
busy with my duties and goals of the Company; as a result, I
havenât focused much on my long-term personal goals.
⢠You have goals not or very little relating to the current job:
For example, you are applying for a sales manager, but your
career goal is to become the head of marketing department
in the next 5 years.
⢠Current job oriented career goals: For example, you are
working as a sales manager, you goal is to become the area
sales manager in the next 2 years and in the next 5 years,
you will be the regional sales manager.
Useful source: list of 50 career goals:
http://interview-tips-123.blogspot.com/2013/05/list-of-career-
goals.html
9. Interview questions and answers- Page 9
6. Why did you leave your last job?
a. Some sample answers to the interview question:
âWhy are you leaving your last job?â
⢠There is no opportunity to promote in my current job and
Iâm ready to face a new challenge;
⢠I have worked there for 04 years with much experience and
skills. I want to be promoted but the Company do not offer
me that opportunity;
⢠The company has cut down with its focus on the business
line my job is responsible for;
⢠My family transferred to another region, or, my current
workplace is too far away from my home;
⢠My old company often paid late and had inadequate
compensation policy.
b. You should avoid answers that:
⢠Speak ill of your old boss, colleague, etc.;
⢠They punished me many times forâŚ
⢠I did not complete my job.
10. Interview questions and answers- Page 10
7. What is your greatest weakness?
Ways to answer:
a) First way: Turning your strong point into weak point.
For example: I am a perfectionist and therefore, I rarely
believe in anyone who can work as well as me. As a result, I
am afraid to delegate important tasks to others.
This approach has a weak side as that if you are not clever,
you will cause the employer to believe that you are cheating
him.
b) Second way: Solving your weakness absolutely.
A better approach is that you state one point which was once
your weakness, but you have done well to resolve it.
For example: I tended to be a perfectionist, therefore I didnât
like to delegate to others. But I have found out that in order
to develop the organization, everyone in the organization
must be experienced with many tasks and this is very good
for an efficient team work.
11. Interview questions and answers- Page 11
8. What do you know about this organization?
This question is one reason to do some research on the
organization before the interview. Find out where they have
been and where they are going. What are the current issues
and who are the major players?
Sample answers:
a. A good organization with perfect management. I heard that in
this organization i can gain knowledge and good atmosphere.
b. If its for a good renowned company then its better to go
through the company website and know whatâs the company
profile and whatâs their achievements/successes and branches
& other details.
c. According to me this is one of the best company. It has a
good Environment, We feel good working in companies, which
has good growth in the IT Industries. This Organization has all
the qualities like good growth, good Environment, maintaining a
best level in the IT Industries, etc.
Other materials: Top 10 interview questions to ask employers.
http://interview-tips-123.blogspot.com/2013/05/top-10-interview-
questions-to-ask.html
12. Interview questions and answers- Page 12
9. What have you done to improve your Erp knowledge in the last year?
a. Answer tips
⢠Try to include improvement activities that relate to the job.
A wide variety of activities can be mentioned as positive self-
improvement. Have some good ones handy to mention.
⢠Employers look for applicants who are goal-oriented. Show
a desire for continuous learning by listing hobbies non-work
related. Regardless of what hobbies you choose to
showcase, remember that the goal is to prove self-
sufficiency, time management, and motivation.
b. Answer samples
⢠Every one should learn from his mistake. I always try to
consult my mistakes with my kith and kin especially with
elderly and experienced person.
⢠I enrolled myself into a course useful for the next version of
our current project. I attended seminars on personal
development and managerial skills improvement.
13. Interview questions and answers- Page 13
Useful interview materials
⢠Top 10 interview secrets to win every job interview:
http://interview-tips-123.blogspot.com/2013/05/top-10-secrets-to-win-every-job.html
⢠13 types of interview questions and how to face them:
http://interview-tips-123.blogspot.com/2013/05/13-types-of-interview-questions-and-how.html
⢠Top 12 common mistakes in job interviews:
http://interview-tips-123.blogspot.com/2013/05/top-12-common-mistakes-in-job-interviews.html