Be Mean To Your Code: Rugged Development & You

•

27 likes•14,379 views

Writing code that works is hard. Writing rugged code that can stand the test of time is even harder. This difficulty is often compounded by crunched timelines and fast cycles that prioritize new features. Add in evolving business needs and new technology and it becomes confusing to know what to do and how to integrate security into your application. This talk brings some advice/tools of the top developers and application security practitioners to help you ruggedize your end-to-end development lifecycle from code commit to running system. You will learn pragmatic approaches and tooling that will affect your development processes, delivery pipelines and even the operational runtime. You will walk away with solutions you can put into practice right away and you will also be armed with rugged anti-patterns to help you identify what to change.

BE MEAN TO
YOUR CODE
RUGGED DEVELOPMENT
& YOU
MATT JOHANSEN
JAMES WICKETT

@mattjay
The Beard of Destiny
Gauntlt Cheerleader
Head of WhiteHat
Threat Research
Center
BlackHat, DEFCON,
RSA, SXSW, more++

@wickett
Gauntlt Project Lead
Founder of LASCON
Sr. Engineer at Signal
Sciences

We’re making AppSec effective and practical
signalsciences.com

AUDIENCE SURVEY
Cloud or Metal?
DevOps? Agile? Flavors?
How does code get to production?
How often do you do code changes?
Do you do security testing in the build/deploy
pipeline?
#RUGGEDCODE

PRINCIPLES FOR A
MODERN SECURITY
#RUGGEDCODE
TEAM

#RUGGEDCODE
OSSM
On Demand
Scalable
Self-Service
Measured
Source: Dave Neilsen

OLD DECISION MATRIX
Function
Features
Gartner Magic Quadrant
Trial Eval
TCO
#RUGGEDCODE

NEW DECISION MATRIX
API and Integrations
Service Billing
Half Decent?
#RUGGEDCODE

PRINCIPLE #1
PLAY NICE AND
INTEGRATE WITH
#RUGGEDCODE
OTHERS

PEOPLE
PROCESS
TECHNOLOGY
#RUGGEDCODE

PRINCIPLE #2
INFLUENCE THE
#RUGGEDCODE
PEOPLE

#RUGGEDCODE
DEVOPS

#RUGGEDCODE
CAMS
Culture
Lean*
Automation
Measurement
Sharing
Source: @botchagalupe @damonedwards

#RUGGEDCODE

PRINCIPLE #3
WHAT WE VALUE IS
DETERMINED BY OUR
#RUGGEDCODE
CULTURE

#RUGGEDCODE

CONTINUOUS
DELIVERY IS KING
#RUGGEDCODE
PRINCIPLE #4

THERE ARE TWO PATHS
TO WINNING FOR
#RUGGEDCODE
SECURITY

THE DEVELOPMENT
AND BUILD PIPELINE
#RUGGEDCODE

OPERATIONAL
RUNTIME STATE AND
MONITORING
#RUGGEDCODE

WE ARE FOCUSING ON
DEV/BUILD PIPELINE IN
THIS PRESENTATION
#RUGGEDCODE

DETECT AND FIX
IN DEVELOPMENT
#RUGGEDCODE

WHY DOES THIS
#RUGGEDCODE
MATTER?
VULNERABLE CODE IS
EVERYWHERE

#RUGGEDCODE

HOW DO I FIX XSS?
#RUGGEDCODE

GOOD: INPUT
SANITIZATION
#RUGGEDCODE
[XSS]

BLACKLIST :(
#RUGGEDCODE
[XSS]

WHITELIST :)
#RUGGEDCODE
[XSS]

BETTER: OUTPUT
#RUGGEDCODE
ENCODING
[XSS]

< > BECOME &LT; &GT;
#RUGGEDCODE
[XSS]

SQL INJECTION
#RUGGEDCODE
[SQLi]

#RUGGEDCODE

#RUGGEDCODE

#RUGGEDCODE
CREDIT: XKCD

HOW DO I FIX IT?
#RUGGEDCODE
[SQLi]

PARAMETERIZED
#RUGGEDCODE
QUERIES
[SQLi]

PARAMETERIZED QUERIES (PHP)
#RUGGEDCODE
[SQLi]

PARAMETERIZED QUERIES (JAVA)
#RUGGEDCODE
[SQLi]

CROSS SITE REQUEST
#RUGGEDCODE
FORGERY
[CSRF]

#RUGGEDCODE

#RUGGEDCODE

HOW DO I FIX IT?
#RUGGEDCODE
[CSRF]

#RUGGEDCODE

#RUGGEDCODE
TOKENS!
[CSRF]

#RUGGEDCODE IMAGE CREDIT: DOTNETBIPS.COM

#RUGGEDCODE
AGAIN… VULNERABLE
CODE IS EVERYWHERE

GETS FIXED SLOWLY
#RUGGEDCODE

#RUGGEDCODE GETS FIXED SLOWLY

#RUGGEDCODE
…IF EVER

#RUGGEDCODE
OWASP TOP 10

#RUGGEDCODE

YOU HAVE A BUILD PIPELINE
TELL ME MORE ABOUT HOW
#RUGGEDCODE
SPECIAL YOU ARE

#RUGGEDCODE
GAUNTLT

BUILT ON
CUCUMBER
#RUGGEDCODE

GAUNTLT PRINCIPLES
AND PHILOSOPHY
Gauntlt comes with pre-canned steps that
hook security testing tools
Gauntlt does not install tools
Gauntlt can be part of the CI/CD pipeline
Be a good citizen of exit status and stdout/
stderr
MIT Open Source License
#RUGGEDCODE

#RUGGEDCODE

GAUNTLT
RESOURCES
• Google Group > https://groups.google.com/d/
forum/gauntlt
• Wiki > https://github.com/gauntlt/gauntlt/wiki
• Twitter > @gauntlt
• IRC > #gauntlt on freenode
• Issue tracking > http://github.com/gauntlt/
gauntlt
#RUGGEDCODE

THE GAUNTLT BOOK
FREE FOR LASCON!
book@gauntlt.org
#RUGGEDCODE

#RUGGEDCODE

./velocity/lab_3/.travis.yml
#RUGGEDCODE

./velocity/lab_3/.travis.yml
#RUGGEDCODE

#RUGGEDCODE
./Rakefile

./test/attacks/email_leakage.attack
#RUGGEDCODE

./test/attacks/email_leakage.attack
#RUGGEDCODE

./test/attacks/backdoors.attack
#RUGGEDCODE

./test/attacks/sql_injection.attack
#RUGGEDCODE

#RUGGEDCODE
DEMO

#RUGGEDCODE
@MATTJAY
@WICKETT

More Related Content

Viewers also liked

Why to docker

Karthik Gaekwad

Shirt Ops: How to make awesome t-shirts for your conference

Shirt Ops: How to make awesome t-shirts for your conference

Shirt Ops: How to make awesome t-shirts for your conference

From SXSW Interactive 2015 Writing code that works is hard. Writing rugged code that can stand the test of time is even harder. This difficulty is often compounded by crunched timelines and fast cycles that prioritize new features. Add in evolving business needs and new technology and it becomes confusing to know what to do and how to integrate security into your application. This workshop brings in some of the top developers and application security practitioners to help you ruggedize your end-to-end development lifecycle from code commit to running system. Three Takeaways: 1. You will learn pragmatic approaches and tooling that will affect your development processes and delivery pipelines. 2. Armed with tools and ideas for monitoring your operational and runtime security. 3. You will walk away with code examples and tools that you can put into practice right away for security and rugged testing. http://schedule.sxsw.com/2015/events/event_IAP35935

Pragmatic Security and Rugged DevOps - SXSW 2015

Pragmatic Security and Rugged DevOps - SXSW 2015

Pragmatic Security and Rugged DevOps - SXSW 2015

Containers - (Austin Cloud Meetup April 2016)

Containers - (Austin Cloud Meetup April 2016)

Containers - (Austin Cloud Meetup April 2016)

Derrick Wippler

Rugged DevOps: Bridging Security and DevOps

Rugged DevOps: Bridging Security and DevOps

Rugged DevOps: Bridging Security and DevOps

Automated Security Testing

Automated Security Testing

Automated Security Testing

Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

DevOps for Defenders in the Enterprise

DevOps for Defenders in the Enterprise

DevOps for Defenders in the Enterprise

13 practical tips for writing secure golang applications

13 practical tips for writing secure golang applications

13 practical tips for writing secure golang applications

Karthik Gaekwad

Authentication technologies are intersecting science fiction and comedy. A flyby of recently discovered and invented mechanisms to digitally identify a person makes it clear that it’s not for lack of options. If the usability and security of strong authentication have been solved, how can we improve deployability, which is the main reason we are still using passwords? This presentation was delivered by Mike Schwartz at RSA Conference 2016.

RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again

RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again

RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again

Over the years, application security (appsec) has made progress, but it has also made some considerable mis-steps. Appsec focuses almost solely on developer awareness and secure development training as remediation. This isn't sustainable and arguably does little good. There is a better way, but we have to separate ourselves from the core assumptions we have made that got us here. Lets journey together to find old truths and better approaches. We will explore ways to make a change for the better across all levels of the development lifecycle, but we will focus on security testing early on in the development process. From this session, you will learn pragmatic approaches and tooling that will affect your development processes and delivery pipelines. You will walk away with code examples and tools that you can put into practice right away for security and rugged testing. http://lascon.org http://lascon2015.sched.org/event/175e3c828095386b2fa0fc660b2502a3

New Farming Methods in the Epistemological Wasteland of Application Security

New Farming Methods in the Epistemological Wasteland of Application Security

New Farming Methods in the Epistemological Wasteland of Application Security

In recent years, Docker containers have become a key component of modern application design. Increasingly, developers are breaking their applications apart into smaller components and distributing them across a pool of compute resources. Using Docker on your local development machine is simple, but running Docker applications at scale in production can be difficult. In this session, we will discuss the difficulties of running Docker in production and how Amazon EC2 Container Service (ECS) can be used to reduce the operational burdens. We will give an overview of the core architectural principles underlying Amazon ECS., and we will walk through a number of patterns used by our customers to run their microservices platforms, to run batch jobs, and for deployments and continuous integration. We will also demonstrate how to define multi-container applications, deploy and scale them seamlessly on a cluster with Amazon ECS.

Containers and the Evolution of Computing

Containers and the Evolution of Computing

Containers and the Evolution of Computing

Amazon Web Services

10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

Viewers also liked (13)

Why to docker

Shirt Ops: How to make awesome t-shirts for your conference

Shirt Ops: How to make awesome t-shirts for your conference

Shirt Ops: How to make awesome t-shirts for your conference

Pragmatic Security and Rugged DevOps - SXSW 2015

Pragmatic Security and Rugged DevOps - SXSW 2015

Pragmatic Security and Rugged DevOps - SXSW 2015

Containers - (Austin Cloud Meetup April 2016)

Containers - (Austin Cloud Meetup April 2016)

Containers - (Austin Cloud Meetup April 2016)

Rugged DevOps: Bridging Security and DevOps

Rugged DevOps: Bridging Security and DevOps

Rugged DevOps: Bridging Security and DevOps

Automated Security Testing

Automated Security Testing

Automated Security Testing

Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

Security is Dead. Long Live Rugged DevOps: IT at Ludicrous Speed

DevOps for Defenders in the Enterprise

DevOps for Defenders in the Enterprise

DevOps for Defenders in the Enterprise

13 practical tips for writing secure golang applications

13 practical tips for writing secure golang applications

13 practical tips for writing secure golang applications

RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again

RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again

RSA Conference 2016: Who Are You? From Meat to Electrons and Back Again

New Farming Methods in the Epistemological Wasteland of Application Security

New Farming Methods in the Epistemological Wasteland of Application Security

New Farming Methods in the Epistemological Wasteland of Application Security

Containers and the Evolution of Computing

Containers and the Evolution of Computing

Containers and the Evolution of Computing

10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

10+ Deploys Per Day: Dev and Ops Cooperation at Flickr

Similar to Be Mean To Your Code: Rugged Development & You

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

Alessandro Cinelli (cirpo)

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

Michele Orselli

In the Manufacturing industry, reliability and time to market are key factors to accomplish business goals. Nowadays, Analytics are more and more deployed to get insights’ from data and foster a data driven culture to achieve a greater effectiveness and efficiency within business operations. In the Analytics domain, real challenges are often represented by data collection, such as the existence of heterogeneous and widespread data sources and the choice of ingestion technologies and strategies, the need to ensure a continuous data inflow and to release production-ready Analytics services to be integrated into in daily operations In order to address those challenges, Magneti Marelli ICT Innovation team has adopted a structured approach starting from foundations, that is by building a distinctive Big Data Architecture, known as the Magneti Marelli Architecture (MARC). Differently from common Big Data architectures, which are developed on batch or streaming paradigms, MARC is an event and service oriented architecture with the flexibility to manage complex tasks running both in the DMZ plant, in the plant network and in Cloud. It combines traditional patterns for handling data, such as “Service Broker”, “Forwarder”, “Singleton”, “Wrapping”, “Store and Forward”, with best of breed technologies such as Databricks, Microsoft Azure Data Lake Store, Azure SQL, PowerBI and Azure Functions. In this presentation MARC key components will be introduced, together with main integrated services. Additionally, it will be shown how mentioned routine issues in data management will be addressed and solved with the aid of MARC unique structure and related services: practical examples will be provided for incremental data ingestion, incremental data processing, hybrid Spark deployments and the usage of heterogeneous Application Servers. Finally, it will be clear how the adoption of a structured approach to the development of Big Data Architecture for data management has dramatically fostered the demand for Analytics services and their effective use by the business to accomplish manufacturing cost reduction.

Road to Enterprise Architecture for Big Data Applications: Mixing Apache Spar...

Road to Enterprise Architecture for Big Data Applications: Mixing Apache Spar...

Road to Enterprise Architecture for Big Data Applications: Mixing Apache Spar...

Gestire la qualità del codice con Visual Studio, SonarQube ed Azure Devops

Gestire la qualità del codice con Visual Studio, SonarQube ed Azure Devops

Gestire la qualità del codice con Visual Studio, SonarQube ed Azure Devops

Gian Maria Ricci

Swagger Code Generation

Swagger Code Generation

Swagger Code Generation

GDSC Info Sessiongdsc info session nfsu delhi 23'.pdf

GDSC Info Sessiongdsc info session nfsu delhi 23'.pdf

GDSC Info Sessiongdsc info session nfsu delhi 23'.pdf

Dave Liddament - международный спикер и разработчик в Lamp Bristol. Мы пригласили его выступить у нас на конференции 8 декабря с темой «Effective Code Review». ⠀ There are so many benefits from code review; lower development costs, increased code quality, quick up-skilling and on-boarding of team members. Despite these benefits many teams don’t have code review as part of their process at all. Others don’t get the gains they should from it. ⠀ This talk first outlines the business case for code review. It then explores how to make code review effective, specifically looking at: ⠀ • Expectations of what can be achieved with code review. • What should be covered by code review (including example code) • What should not be covered by code review • How to write code that makes code review easy • What makes good code review comments • What makes good responses to code review comments ⠀ Finally to wrap up you'll be shown how to enable a code review with Github. Spoiler alert: It can be done it under 5 mins!So if you are on a team that isn’t using code review, or isn’t using it effectively then you should be at this talk. CODEiD – это всеукраинское сообщество PHP-разработчиков. Наша цель — создать сильное сообщество всех, кто увлечен PHP-разработкой, и принимать в нашем уютном приморском городе коллег со всей Украины и мира.

Effective codereview | Dave Liddament | CODEiD

Effective codereview | Dave Liddament | CODEiD

Effective codereview | Dave Liddament | CODEiD

CODEiD PHP Community

DevOps toolchains are transforming modern IT, but hackers can undermine their benefits through poorly implemented or vulnerable DevOps tools. Chris Gates and Ken Johnson will share their collaborative attack research into the technology driving DevOps. They will share an attacker's perspective on exploiting DevOps organizations and the countermeasures these organizations should employ. RSAC 2017 Ken Johnson & Chris Gates

DevOOPS: Attacks and Defenses for DevOps Toolchains

DevOOPS: Attacks and Defenses for DevOps Toolchains

DevOOPS: Attacks and Defenses for DevOps Toolchains

Introduction to Serverless with AWS Lambda in C#.pptx

Introduction to Serverless with AWS Lambda in C#.pptx

Introduction to Serverless with AWS Lambda in C#.pptx

Brandon Minnick, MBA

In this session, attendees will learn about a real-world evolution to a Distributed Architecture without being involved of a complete Microservices Madness; we will be covering tips and tricks of an experience of a evolution of a huge EAR Core Banking Application and how we evolve to a modern distributed Architecture until the evolution of use 3rd party services and Serverless; tips, tricks, pros, cons and the reasons for being involved on move forward and present sample code as FaaS and explain the pitfalls of Serverless and the security concerns on this evolution. We will be using snippets code based on JAVA, JWT, JWS, Auth0, Spring Boot, Reactor, Webflux, Spring Cloud Gateway and Spring Cloud Functions.

Oracle Code Javaday Sao Paulo Nowadays Architecture Trends, from Monolith to ...

Oracle Code Javaday Sao Paulo Nowadays Architecture Trends, from Monolith to ...

Oracle Code Javaday Sao Paulo Nowadays Architecture Trends, from Monolith to ...

Alberto Salazar

Cada vez mais ferramentas, softwares e devices possuem soluções baseadas no WebKit. Contudo, poucas pessoas sabem o que ele é de verdade, como ele funciona internamente, seu potencial e o que ele oferece. Veremos seus core, discutiremos como é possível usar o WebKit para fazer o seu browser ou usá-lo dentro de sua aplicação e entenderemos seu funcionamento e suas ferramentas disponiveis. Ainda, veremos como funciona a interpretação e run do JavaScript dentro da engine V8

Nas entranhas do WebKit e do V8 - The Developers Conference 2013 SP - TDC2013

Nas entranhas do WebKit e do V8 - The Developers Conference 2013 SP - TDC2013

Nas entranhas do WebKit e do V8 - The Developers Conference 2013 SP - TDC2013

On this session, attendees will learn about a real world migration case involving a 10 years JEE monolithic application to Microservices; tips, tricks, pros, cons and the reasons for being involved on a microservices architecture. Talk Description On this session, attendees will learn about a real world migration case involving a 10 years JEE monolithic application to Microservices; tips, tricks, pros, cons and the reasons for being involved on a microservices architecture. We will also be reviewing some sample code and tips on how to move to a full microservices solution that will bring as result, less effort delivering new features, saving cost, time and therefore, faster time to market of banking applications. We will be using open source frameworks and products such as: JAVA, JEE, Angular, NativeScript, Apache Camel, Apache ActiveMQ, Spring Framework 5, Webflux, and Springboot.

#JavadayEcuador Monolith to Microservices

#JavadayEcuador Monolith to Microservices

#JavadayEcuador Monolith to Microservices

Alberto Salazar

In this session, attendees will learn about a real-world evolution to a Distributed Architecture without being involved of a complete Microservices Madness; we will be covering tips and tricks of an experience of a evolution of a huge EAR Core Banking Application and how we evolve to a modern distributed Architecture until the evolution of use 3rd party services and Serverless; tips, tricks, pros, cons and the reasons for being involved on move forward and present sample code as FaaS and explain the pitfalls of Serverless and the security concerns on this evolution. We will be using snippets code based on JAVA, JWT, JWS, Auth0, Spring Boot, Reactor, Webflux, Spring Cloud Gateway and Spring Cloud Functions.

Oracle Developer Tour Latam Nowadays Architecture Trends, from Monolith to Mi...

Oracle Developer Tour Latam Nowadays Architecture Trends, from Monolith to Mi...

Oracle Developer Tour Latam Nowadays Architecture Trends, from Monolith to Mi...

Alberto Salazar

Serverless: The Good, the Bad and the Ugly (2019-11-19)

Serverless: The Good, the Bad and the Ugly (2019-11-19)

Serverless: The Good, the Bad and the Ugly (2019-11-19)

Paco de la Cruz

Nesta sessão, os participantes aprenderão sobre um caso de migração do mundo real que envolve um aplicativo monolítico JEE de 10 anos para Microservices; dicas, truques, prós e contras e as razões para estar envolvido em uma arquitetura de microsserviços. Também estaremos revisando algumas amostras de código e dicas sobre como migrar para uma solução completa de microsserviços que trará como resultado menos esforço para fornecer novos recursos, economizando tempo, custo e, portanto, menor tempo de comercialização de aplicativos. Estaremos usando estruturas e produtos de software livre, como: JAVA, JEE, Token Web JWT Json, Spring Framework 5, Webflux e Springboot.

Oracle Code Javaday Sao Paulo Monolith_to Microservices

Oracle Code Javaday Sao Paulo Monolith_to Microservices

Oracle Code Javaday Sao Paulo Monolith_to Microservices

Alberto Salazar

During this talk we'll navigate through a customer's journey as they migrate an existing MongoDB deployment to MongoDB Atlas. While the migration itself can be as simple as a few clicks, the prep/post effort requires due diligence to ensure a smooth transfer. We'll cover these steps in detail and provide best practices. In addition, we’ll provide an overview of what to consider when migrating other cloud data stores, traditional databases and MongoDB imitations to MongoDB Atlas.

MongoDB SoCal 2020: Migrate Anything* to MongoDB Atlas

MongoDB SoCal 2020: Migrate Anything* to MongoDB Atlas

MongoDB SoCal 2020: Migrate Anything* to MongoDB Atlas

Hai mai pensato che le tue lambda functions possano fallire senza che tu te ne accorga? Se la risposta é "SI" probabilmente é perché ti sei giá "bruciato" giocando con il cloud, dove errori e fallimenti sono sempre dietro l'angolo. Purtroppo non possiamo prevenire tutti i fallimenti, pero' possiamo essere notificati quando qualcosa va storto cosí da poter reagire tempestivamente. Ma come fare a configurare il nostro ambiente AWS per raggiungere un buon livello di "Observability"? Se hai giá provato ad utilizzare CloudWatch saprai giá quanto possa essere complesso. In questo talk, esploreremo il tema dell'observability per applicazioni Serverless su AWS. Discuteremo problemi e best practices. Infine vi proporró un tool che permette di automatizzare la configurazione di CloudWatch per l'80% delle esigenze in pochi minuti!

Semplificare l'observability per progetti Serverless

Semplificare l'observability per progetti Serverless

Semplificare l'observability per progetti Serverless

Luciano Mammino

Coolblue - Behind the Scenes Continuous Integration & Deployment

Coolblue - Behind the Scenes Continuous Integration & Deployment

Coolblue - Behind the Scenes Continuous Integration & Deployment

Matthew Hodgkins

In this session, you will learn about a real-world case involving migration of a 10-year-old JEE monolithic application to microservices: tips, tricks, pros, cons, and the reasons for being involved in a microservices architecture in the first place. The presentation also reviews some sample code and tips on how to move to a full microservices solution that will mean less effort in delivering new features, cost and time savings, and therefore shorter time to market of applications. Open source frameworks and products such as Java, JEE, JSON Web Token (JWT), Spring Framework 5, WebFlux, and Spring Boot will be used.

Oracle Code One San Francisco - Monolith to microservices

Oracle Code One San Francisco - Monolith to microservices

Oracle Code One San Francisco - Monolith to microservices

Alberto Salazar

2018 MONOLITICH TO MICROSERVICES - Conferencia Javeros colombia

2018 MONOLITICH TO MICROSERVICES - Conferencia Javeros colombia

2018 MONOLITICH TO MICROSERVICES - Conferencia Javeros colombia

Alberto Salazar

Similar to Be Mean To Your Code: Rugged Development & You (20)

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

BDD - Buzzword Driven Development - Build the next cool app for fun and for.....

Road to Enterprise Architecture for Big Data Applications: Mixing Apache Spar...

Road to Enterprise Architecture for Big Data Applications: Mixing Apache Spar...

Road to Enterprise Architecture for Big Data Applications: Mixing Apache Spar...

Gestire la qualità del codice con Visual Studio, SonarQube ed Azure Devops

Gestire la qualità del codice con Visual Studio, SonarQube ed Azure Devops

Gestire la qualità del codice con Visual Studio, SonarQube ed Azure Devops

Swagger Code Generation

Swagger Code Generation

Swagger Code Generation

GDSC Info Sessiongdsc info session nfsu delhi 23'.pdf

GDSC Info Sessiongdsc info session nfsu delhi 23'.pdf

GDSC Info Sessiongdsc info session nfsu delhi 23'.pdf

Effective codereview | Dave Liddament | CODEiD

Effective codereview | Dave Liddament | CODEiD

Effective codereview | Dave Liddament | CODEiD

DevOOPS: Attacks and Defenses for DevOps Toolchains

DevOOPS: Attacks and Defenses for DevOps Toolchains

DevOOPS: Attacks and Defenses for DevOps Toolchains

Introduction to Serverless with AWS Lambda in C#.pptx

Introduction to Serverless with AWS Lambda in C#.pptx

Introduction to Serverless with AWS Lambda in C#.pptx

Oracle Code Javaday Sao Paulo Nowadays Architecture Trends, from Monolith to ...

Oracle Code Javaday Sao Paulo Nowadays Architecture Trends, from Monolith to ...

Oracle Code Javaday Sao Paulo Nowadays Architecture Trends, from Monolith to ...

Nas entranhas do WebKit e do V8 - The Developers Conference 2013 SP - TDC2013

Nas entranhas do WebKit e do V8 - The Developers Conference 2013 SP - TDC2013

Nas entranhas do WebKit e do V8 - The Developers Conference 2013 SP - TDC2013

#JavadayEcuador Monolith to Microservices

#JavadayEcuador Monolith to Microservices

#JavadayEcuador Monolith to Microservices

Oracle Developer Tour Latam Nowadays Architecture Trends, from Monolith to Mi...

Oracle Developer Tour Latam Nowadays Architecture Trends, from Monolith to Mi...

Oracle Developer Tour Latam Nowadays Architecture Trends, from Monolith to Mi...

Serverless: The Good, the Bad and the Ugly (2019-11-19)

Serverless: The Good, the Bad and the Ugly (2019-11-19)

Serverless: The Good, the Bad and the Ugly (2019-11-19)

Oracle Code Javaday Sao Paulo Monolith_to Microservices

Oracle Code Javaday Sao Paulo Monolith_to Microservices

Oracle Code Javaday Sao Paulo Monolith_to Microservices

MongoDB SoCal 2020: Migrate Anything* to MongoDB Atlas

MongoDB SoCal 2020: Migrate Anything* to MongoDB Atlas

MongoDB SoCal 2020: Migrate Anything* to MongoDB Atlas

Semplificare l'observability per progetti Serverless

Semplificare l'observability per progetti Serverless

Semplificare l'observability per progetti Serverless

Coolblue - Behind the Scenes Continuous Integration & Deployment

Coolblue - Behind the Scenes Continuous Integration & Deployment

Coolblue - Behind the Scenes Continuous Integration & Deployment

Oracle Code One San Francisco - Monolith to microservices

Oracle Code One San Francisco - Monolith to microservices

Oracle Code One San Francisco - Monolith to microservices

2018 MONOLITICH TO MICROSERVICES - Conferencia Javeros colombia

2018 MONOLITICH TO MICROSERVICES - Conferencia Javeros colombia

2018 MONOLITICH TO MICROSERVICES - Conferencia Javeros colombia

More from James Wickett

A Pragmatic Union: Security and SRE

A Pragmatic Union: Security and SRE

A Pragmatic Union: Security and SRE

DevOps and the subsequent move to bring security in under the umbrella of DevSecOps has created a new ethos for security. This is good. But, when things go wrong–and we know they will–are we going to be successful with the DevSecOps model, or will we be left searching yet again? In an attempt to answer this question, we will look back in history to learn how engineering decisions affect the lives of those around us, with an eye on how to make meaningful progress today. Along the way, we will highlight the high-performing DevSecOps teams of today and introduce MEASURE, a framework for approaching DevSecOps in your organization. Topics range from empathy to lean to system safety with the hope to frame a new playbook for devs, ops, and security to work together. ---- thanks to Verica https://verica.io and techstrongcon.com

A Way to Think about DevSecOps: MEASURE

A Way to Think about DevSecOps: MEASURE

A Way to Think about DevSecOps: MEASURE

The Security, DevOps, and Chaos Playbook to Change the World

The Security, DevOps, and Chaos Playbook to Change the World

The Security, DevOps, and Chaos Playbook to Change the World

All organizations want to go faster and decrease friction in delivering software. The problem is that InfoSec has historically slowed this down or worse. But, with the rise of CD pipelines and new devsecops tooling, there is an opportunity to reverse this trend and move Security from being a blocker to being an enabler. This talk will discuss hallmarks of doing security in a software delivery pipeline with an emphasis on being pragmatic. At each phase of the delivery pipeline, you will be armed with philosophy, questions, and tools that will get security up-to-speed with your software delivery cadence. From DeliveryConf 2020

Pragmatic Pipeline Security

Pragmatic Pipeline Security

Pragmatic Pipeline Security

DevOps and the subsequent move to bring security in under the umbrella of DevSecOps has created a new ethos for security. This is good. But, when things go wrong–and we know they will–are we going to be successful with the DevSecOps model, or will we be left searching yet again? In an attempt to answer this question, we will look back in time over 120 years to unveil a tale that touches on business, engineering, and resilience. We will see how engineering decisions affect the lives of those around us and even though the world has radically changed over the last century, we are still facing many of the same root challenges. Along the way, we will highlight the high-performing DevSecOps teams of today and introduce a framework for approaching DevSecOps in your organization. Topics range from empathy to lean to system safety with the hope to frame a new playbook for devs, ops, and security to work together. From Innotech Austin 2019 and Cloud Austin Nov 2019

A Tale of Woe, Chaos, and Business

A Tale of Woe, Chaos, and Business

A Tale of Woe, Chaos, and Business

DevOps and the subsequent move to bring security in under the umbrella of DevSecOps has created a new ethos for Security. This is good. But, when things go wrong–and we know they will–are we going to be successful with the DevSecOps model, or will we be left searching yet again? In an attempt to answer this question, we will look back in time over 120 years to unveil a tale that touches on business, engineering, and resilience. We will see how engineering decisions affect the lives of those around us, and even though the world has radically changed over the last century, we are still facing many of the same root challenges. Along the way, we will highlight the high-performing DevSecOps teams of today and introduce a framework for approaching DevSecOps in your organization. Topics range from empathy to lean to system safety with the hope to frame a new playbook for devs, ops, and security to work together.

A DevSecOps Tale of Business, Engineering, and People

A DevSecOps Tale of Business, Engineering, and People

A DevSecOps Tale of Business, Engineering, and People

Talk given for https://www.thesecuredeveloper.com/events/the-new-ways-of-devsecops DevOps and the subsequent move bring security in under the umbrella of DevSecOps has created a new an ethos for security. This is good, however moving security and devops closer together in many organizations leaves us with questions of how this merge works in practice. What happens to security? To developers? And where does chaos engineering fit in? This talk highlights security's place in DevOps and how topics ranging from empathy to chaos to system safety fit in organizations today. The hope is to uncover a new playbook for devs, ops, and security to work together.

The New Ways of DevSecOps - The Secure Dev 2019

The New Ways of DevSecOps - The Secure Dev 2019

The New Ways of DevSecOps - The Secure Dev 2019

DevOps and the subsequent move bring security in under the umbrella of DevSecOps has created a new an ethos for security. This is good, however moving security and devops closer together in many organizations leaves us with questions of how this merge works in practice. What happens to security? To developers? And where does= chaos engineering fit in? This talk highlights security's place in DevOps and how topics ranging from empathy to chaos to system safety fit in organizations today. The hope is to uncover a new playbook for devs, ops, and security to work together.

NewOps Days 2019: The New Ways of Chaos, Security, and DevOps

NewOps Days 2019: The New Ways of Chaos, Security, and DevOps

NewOps Days 2019: The New Ways of Chaos, Security, and DevOps

VMware Thought Leadership Series: The New Ways of Chaos, Security, and DevOps Abstract: DevOps and the subsequent move bring security in under the umbrella of DevSecOps has created a new an ethos for security. This is good, however moving security and DevOps closer together in many organizations leaves us with questions of how this merge works in practice. What happens to security? To developers? And where does chaos engineering fit in? This talk highlights security's place in DevOps and how topics ranging from empathy to chaos to system safety fit in organizations today. The hope is to uncover a new playbook for devs, ops, and security to work together.

The New Ways of Chaos, Security, and DevOps

The New Ways of Chaos, Security, and DevOps

The New Ways of Chaos, Security, and DevOps

James Wickett and Karthik Gaekwad talk about Serverless Security at DevOps Days Austin. Security in FaaS isn't what we are used to, but this talk shows you how what we learned in appsec still applies. Using LambHack, which is a vulnerable serverless application written in Go on AWS Lambda using Sparta, we will evaluate how to do security in serverless. In this talk, we will talk about security strategies and pitfalls in the serverless world. You'll leave with an understanding of how to approach security conversations about serverel Talk goals: - How to approach the security concerns in a serverless world. - Talk about the 'WIP' methodology for serverless security. - Understand current serverless attacks for things to defend against. - Learn what different cloud providers (AWS/GKE/Azure/Oracle Cloud) do to protect you in a serverless world.

DevOpsDays Austin: Security in the FaaS Lane

DevOpsDays Austin: Security in the FaaS Lane

DevOpsDays Austin: Security in the FaaS Lane

DevOps and the subsequent move bring security in under the umbrella of DevSecOps has created a new ethos for security. This is good, however moving security and devops closer together in many organizations leaves us with questions of how this merge works in practice. What happens to security? To developers? And really, what makes a good DevSecOp? This talk highlights the seven habits that the high-performing DevSecOp of today (and tomorrow) should develop. Topics range from empathy to lean to system safety with the hope to uncover a new playbook for devs, ops, and security to work together.

The Seven Habits of the Highly Effective DevSecOp

The Seven Habits of the Highly Effective DevSecOp

The Seven Habits of the Highly Effective DevSecOp

Serverless Security: A How-to Guide @ SnowFROC 2019

Serverless Security: A How-to Guide @ SnowFROC 2019

Serverless Security: A How-to Guide @ SnowFROC 2019

DevSecOps brings security to the DevOps party and it is completely changing the security playbook. This talk will cover 10 practices and patterns we have implemented that bring DevSecOps value to everyone involved. This talk will be loaded with examples that will be usable for developers, security and operations teams and you can take home next week to put into practice. Shannon Lietz, Intuit James WIckett, Signal Sciences RSA Conference 2019

Release Your Inner DevSecOp

Release Your Inner DevSecOp

Release Your Inner DevSecOp

Security in the FaaS Lane

Security in the FaaS Lane

Security in the FaaS Lane

The New Security Playbook: DevSecOps

The New Security Playbook: DevSecOps

The New Security Playbook: DevSecOps

The Emergent Cloud Security Toolchain for CI/CD

The Emergent Cloud Security Toolchain for CI/CD

The Emergent Cloud Security Toolchain for CI/CD

Adversary Driven Defense in the Real World

Adversary Driven Defense in the Real World

Adversary Driven Defense in the Real World

All organizations want to go faster and decrease friction in their cloud software delivery pipeline. Infosec has an opportunity to change their classic approach from blocker to enabler. This talk will discuss hallmarks of CI/CD and some practical examples for adding security testing across different organizations. The talk will cover emergent patterns, practices and toolchains that bring security to the table. Presented at LASCON 2018, in Austin, TX.

The DevSecOps Builder’s Guide to the CI/CD Pipeline

The DevSecOps Builder’s Guide to the CI/CD Pipeline

The DevSecOps Builder’s Guide to the CI/CD Pipeline

All organizations want to go faster and decrease friction in their cloud software delivery pipeline. Infosec has an opportunity to change their classic approach from blocker to enabler. This talk will discuss hallmarks of CI/CD and some practical examples for adding security testing across different organizations. The talk will cover emergent patterns, practices and toolchains that bring security to the table. Presented at OWASP NoVA, Sept 25th, 2018

DevSecOps and the CI/CD Pipeline

DevSecOps and the CI/CD Pipeline

DevSecOps and the CI/CD Pipeline

The State of DevSecOps in 2018

The State of DevSecOps in 2018

The State of DevSecOps in 2018

More from James Wickett (20)

A Pragmatic Union: Security and SRE

A Pragmatic Union: Security and SRE

A Pragmatic Union: Security and SRE

A Way to Think about DevSecOps: MEASURE

A Way to Think about DevSecOps: MEASURE

A Way to Think about DevSecOps: MEASURE

The Security, DevOps, and Chaos Playbook to Change the World

The Security, DevOps, and Chaos Playbook to Change the World

The Security, DevOps, and Chaos Playbook to Change the World

Pragmatic Pipeline Security

Pragmatic Pipeline Security

Pragmatic Pipeline Security

A Tale of Woe, Chaos, and Business

A Tale of Woe, Chaos, and Business

A Tale of Woe, Chaos, and Business

A DevSecOps Tale of Business, Engineering, and People

A DevSecOps Tale of Business, Engineering, and People

A DevSecOps Tale of Business, Engineering, and People

The New Ways of DevSecOps - The Secure Dev 2019

The New Ways of DevSecOps - The Secure Dev 2019

The New Ways of DevSecOps - The Secure Dev 2019

NewOps Days 2019: The New Ways of Chaos, Security, and DevOps

NewOps Days 2019: The New Ways of Chaos, Security, and DevOps

NewOps Days 2019: The New Ways of Chaos, Security, and DevOps

The New Ways of Chaos, Security, and DevOps

The New Ways of Chaos, Security, and DevOps

The New Ways of Chaos, Security, and DevOps

DevOpsDays Austin: Security in the FaaS Lane

DevOpsDays Austin: Security in the FaaS Lane

DevOpsDays Austin: Security in the FaaS Lane

The Seven Habits of the Highly Effective DevSecOp

The Seven Habits of the Highly Effective DevSecOp

The Seven Habits of the Highly Effective DevSecOp

Serverless Security: A How-to Guide @ SnowFROC 2019

Serverless Security: A How-to Guide @ SnowFROC 2019

Serverless Security: A How-to Guide @ SnowFROC 2019

Release Your Inner DevSecOp

Release Your Inner DevSecOp

Release Your Inner DevSecOp

Security in the FaaS Lane

Security in the FaaS Lane

Security in the FaaS Lane

The New Security Playbook: DevSecOps

The New Security Playbook: DevSecOps

The New Security Playbook: DevSecOps

The Emergent Cloud Security Toolchain for CI/CD

The Emergent Cloud Security Toolchain for CI/CD

The Emergent Cloud Security Toolchain for CI/CD

Adversary Driven Defense in the Real World

Adversary Driven Defense in the Real World

Adversary Driven Defense in the Real World

The DevSecOps Builder’s Guide to the CI/CD Pipeline

The DevSecOps Builder’s Guide to the CI/CD Pipeline

The DevSecOps Builder’s Guide to the CI/CD Pipeline

DevSecOps and the CI/CD Pipeline

DevSecOps and the CI/CD Pipeline

DevSecOps and the CI/CD Pipeline

The State of DevSecOps in 2018

The State of DevSecOps in 2018

The State of DevSecOps in 2018

Recently uploaded

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Conference: Engage2024 in Antwerp Type: Workshop Speakers: Florian Vogler, Henning Kunz, Christoph Adler Title: Navigating the Future with The Hitchhiker's Guide to Notes and Domino 14 Abstract: Embark on an exhilarating journey with industry trailblazers Florian Vogler, Henning Kunz, and Christoph Adler in this not-to-be-missed workshop at the forefront of the tech universe. Get ready for a thrilling kick-off as we navigate the current state of the HCL universe, setting the stage for an exploration of the groundbreaking Notes and Domino 14. Discover the latest enhancements and revolutionary features that will redefine your experience. In this interactive session, unlock a treasure trove of tips and tricks to elevate your utilization of version 14, both with and without the game-changing panagenda MarvelClient. Brace yourself for also diving into Nomad, Nomad Web, and VoltMX, expanding your horizons in the expansive HCL landscape. Be a part of this exclusive opportunity to stay ahead in the ever-evolving world of HCL technologies. Your journey to mastering Notes and Domino 14 begins here. And remember, in the spirit of intergalactic exploration, don't forget to bring your towel!

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

Model Call Girl Services in Delhi reach out to us at 🔝 9953056974 🔝✔️✔️ Our agency presents a selection of young, charming call girls available for bookings at Oyo Hotels. Experience high-class escort services at pocket-friendly rates, with our female escorts exuding both beauty and a delightful personality, ready to meet your desires. Whether it's Housewives, College girls, Russian girls, Muslim girls, or any other preference, we offer a diverse range of options to cater to your tastes. We provide both in-call and out-call services for your convenience. Our in-call location in Delhi ensures cleanliness, hygiene, and 100% safety, while our out-call services offer doorstep delivery for added ease. We value your time and money, hence we kindly request pic collectors, time-passers, and bargain hunters to refrain from contacting us. Our services feature various packages at competitive rates: One shot: ₹2000/in-call, ₹5000/out-call Two shots with one girl: ₹3500/in-call, ₹6000/out-call Body to body massage with sex: ₹3000/in-call Full night for one person: ₹7000/in-call, ₹10000/out-call Full night for more than 1 person: Contact us at 🔝 9953056974 🔝. for details Operating 24/7, we serve various locations in Delhi, including Green Park, Lajpat Nagar, Saket, and Hauz Khas near metro stations. For premium call girl services in Delhi 🔝 9953056974 🔝. Thank you for considering us!

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

9953056974 Low Rate Call Girls In Saket, Delhi NCR

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in Tembisa ● Abortion Pills For Sale in Tembisa ● Tembisa 🏥🚑!! Abortion Clinic Near Me Cost, Price, Women's Clinic Near Me, Abortion Clinic Near, Abortion Doctors Near me, Abortion Services Near Me, Abortion Pills Over The Counter, Abortion Pill Doctors' Offices, Abortion Clinics, Abortion Places Near Me, Cheap Abortion Places Near Me, Medical Abortion & Surgical Abortion, approved cyctotec pills and womb cleaning pills too plus all the instructions needed This Discrete women’s Termination Clinic offers same day services that are safe and pain free, we use approved pills and we clean the womb so that no side effects are present. Our main goal is that of preventing unintended pregnancies and unwanted births every day to enable more women to have children by choice, not chance. We offer Terminations by Pill and The Morning After Pill.” Our Private VIP Abortion Service offers the ultimate in privacy, efficiency and discretion. we do safe and same day termination and we do also womb cleaning as well its done from 1 week up to 28 weeks. We do delivery of our services world wide SAFE ABORTION CLINICS/PILLS ON SALE WE DO DELIVERY OF PILLS ALSO Abortion clinic at very low costs, 100% Guaranteed and it’s safe, pain free and a same day service. It Is A 45 Minutes Procedure, we use tested abortion pills and we do womb cleaning as well. Alternatively the medical abortion pill and womb cleansing !!!

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

Medical / Health Care (+971588192166) Mifepristone and Misoprostol tablets 200mg

VTU technical seminar 8Th Sem on Scikit-learn

VTU technical seminar 8Th Sem on Scikit-learn

VTU technical seminar 8Th Sem on Scikit-learn

AmarnathKambale

%in Soweto+277-882-255-28 abortion pills for sale in soweto

%in Soweto+277-882-255-28 abortion pills for sale in soweto

%in Soweto+277-882-255-28 abortion pills for sale in soweto

We specialize in Psychic Readings, Psychic Love Spells, Binding Love Spells, Obsession Spells, Voodoo Spells, Lottery Spells, Marriage Spells, Black Magic Spells, Palm Readings & much more. Are you depressed? We perform this come-to-me love spell that works instantly with the aim of Winnipeg back the victim to the person performing the magic. Have you lost your lover? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? Do u need to solve any relationship problem? Contact the powerful spells caster chief kule with love spells that work overnight and love spells that really work. Have you found yourself infatuated with a special someone you think could be the one? Are you looking for a spell to provide them with a nudge in the right direction? Or maybe the spell you cast didn’t achieve the results you were hoping for? Whether you’re new or versed in the ways of spell casting, we’re here to help. Today we’re going to provide you with a detailed guide on the types of love spells to cast. Not only that but there’s something for those who wish to find outside advice from more advanced spell casters. We’re also going to provide you with the top sites available to help you with your dilemma. Let’s begin our journey by educating ourselves on love magic and what a real love caster looks like. Love Magic and Love Casters Love magic made its first appearance back in Ancient Egypt and has been an active practice since. This type of magic is a branch of traditional magic and can be practiced in various ways. Typically the more common use of love magic is through the work of spells, but other methods look like Charms Rituals-LOVE Potions-Dolls and even Amulets If you are interested in becoming a love caster, be prepared for what’s to come. A genuine love caster knows that the art of love casting is no easy feat and shouldn’t be done casually. You should know that not only does it require you to be gifted spiritually, but you must be ready to serve others. Someone who is considered a real love caster has experience in all manner of spells, no matter the difficulty. Training yourself in attraction, commitment, and marriage spells is an excellent place to start. But this by no means will make you a professional. Practice your craft and expand your knowledge; understand that you will possess the ability to help others in time truly. Types of Love Spells What better way to start broadening your experiences with love spells than by learning more about them? These spells work like just about any other spell. Simply apply your intention, use a medium (sigils, mantras, candles, or charm bags), and top it off with establishing the belief that you will receive what you want. So what kind of spells are available and which ones suit your needs the best? Let’s take a look at the many options you have at your disposal. Attraction Spells

%+27788225528 love spells in Huntington Beach Psychic Readings, Attraction sp...

%+27788225528 love spells in Huntington Beach Psychic Readings, Attraction sp...

%+27788225528 love spells in Huntington Beach Psychic Readings, Attraction sp...

Announcing Codolex 2.0 from GDK Software

Announcing Codolex 2.0 from GDK Software

Announcing Codolex 2.0 from GDK Software

(Vivek)Call Us, 8448380779,Call girls in Delhi NCr – We Offer best in class call girls. escort Service At Affordable Price At low Rate with Space Night 8000 We Are One Of The Oldest Escort and Call girls Agencies in Delhi. You Will Find That Our Female Escorts Are Full Of Fun, Sexy And They Would Love Enjoy Your Company. We Have A Fantastic Selection Of Escort Ladies Available For In-Calls As Well As Out-Calls. Our Escorts Are Not Only Beautiful But All Have Great Personalities Making Them The Perfect Companion For Any Occasion. In-Call:- You Can Come At Our Place in Delhi Our place Which Is Very Clean Hygienic 100% safe Accommodation. Out-Call:- You have To Come Pick The Girl From My Place We Are Also Provide Door Step Services (Delhi Ncr, Noida, Gurgaon, Faridabad, Ghaziabad Note:- Pic Collectors Time Passers Bargainers Stay Away As We Respect The Value For Your Money Time And Expect The Same From You Hygienic:- Full Ac room And Clean Rooms Available In Hotel 24 * 7 Hourly In Delhi NCR More Details, With WhatsApp Number, +91-8448380779

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

Delhi Call girls

%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain

%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain

%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain

Craft an AI & Machine Learning Pitch with our Editable Professional PowerPoint Template. Ignite your AI & Machine Learning pitch with our cutting-edge PowerPoint template tailored for the industry. Perfect for AI conferences, investor presentations, sales pitches to tech-focused companies, training sessions, and educational programs. - 20+ editable slides: Get a variety of options to choose from for your presentation. - Time-saving solution: Download, replace text/images with a few clicks. - User-friendly customization: Easy to use and personalize. - Modern and attractive design: Captivating visuals, sleek layout. - Tailored to your requirements: Fully alterable for customization. - Well-organized slides: Complete control over content. - Thematic specificity: Reflects healthcare industry with relevant graphics. - Showcase your business idea: Communicate value proposition effectively.

AI & Machine Learning Presentation Template

AI & Machine Learning Presentation Template

AI & Machine Learning Presentation Template

Presentation.STUDIO

Software Quality Assurance Interview Questions

Software Quality Assurance Interview Questions

Software Quality Assurance Interview Questions

WSO2Con2024 - Enabling Transactional System's Exponential Growth With Simplicity

WSO2Con2024 - Enabling Transactional System's Exponential Growth With Simplicity

WSO2Con2024 - Enabling Transactional System's Exponential Growth With Simplicity

We specialize in Psychic Readings, Psychic Love Spells, Binding Love Spells, Obsession Spells, Voodoo Spells, Lottery Spells, Marriage Spells, Black Magic Spells, Palm Readings & much more. Are you depressed? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? We perform this come-to-me love spell that works instantly with the aim of bringing back the victim to the person performing the magic. Have you lost your lover? Do u need to solve any relationship problem? Contact the powerful spells caster chief kule with love spells that work overnight and love spells that really work. Have you found yourself infatuated with a special someone you think could be the one? Are you looking for a spell to provide them with a nudge in the right direction? Or maybe the spell you cast didn’t achieve the results you were hoping for? Whether you’re new or versed in the ways of spell casting, we’re here to help. Today we’re going to provide you with a detailed guide on the types of love spells to cast. Not only that but there’s something for those who wish to find outside advice from more advanced spell casters. We’re also going to provide you with the top sites available to help you with your dilemma. Let’s begin our journey by educating ourselves on love magic and what a real love caster looks like. Love Magic and Love Casters Love magic made its first appearance back in Ancient Egypt and has been an active practice since. This type of magic is a branch of traditional magic and can be practiced in various ways. Typically the more common use of love magic is through the work of spells, but other methods look like Charms Rituals-LOVE Potions-Dolls and even Amulets If you are interested in becoming a love caster, be prepared for what’s to come. A genuine love caster knows that the art of love casting is no easy feat and shouldn’t be done casually. You should know that not only does it require you to be gifted spiritually, but you must be ready to serve others. Someone who is considered a real love caster has experience in all manner of spells, no matter the difficulty. Training yourself in attraction, commitment, and marriage spells is an excellent place to start. But this by no means will make you a professional. Practice your craft and expand your knowledge; understand that you will possess the ability to help others in time truly. Types of Love Spells What better way to start broadening your experiences with love spells than by learning more about them? These spells work like just about any other spell. Simply apply your intention, use a medium (sigils, mantras, candles, or charm bags), and top it off with establishing the belief that you will receive what you want. So what kind of spells are available and which ones suit your needs the best? Let’s take a look at the many options you have at your disposal.

%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...

%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...

%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...

%in Midrand+277-882-255-28 abortion pills for sale in midrand

%in Midrand+277-882-255-28 abortion pills for sale in midrand

%in Midrand+277-882-255-28 abortion pills for sale in midrand

+971565801893 Mtp-Kit (500MG) Prices » Dubai [(+971565801893**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Leen Whatsapp +971565801893 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971565801893''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971565801893' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Clinic in Abu Dhabi, United Arab Emirates.+971565801893

+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...

+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...

+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...

Define the academic and professional writing..pdf

Define the academic and professional writing..pdf

Define the academic and professional writing..pdf

PearlKirahMaeRagusta1

WSO2CON 2024 - Does Open Source Still Matter?

WSO2CON 2024 - Does Open Source Still Matter?

WSO2CON 2024 - Does Open Source Still Matter?

The title is not connected to what is inside

The title is not connected to what is inside

The title is not connected to what is inside

shinachiaurasa2

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

Recently uploaded (20)

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

CHEAP Call Girls in Pushp Vihar (-DELHI )🔝 9953056974🔝(=)/CALL GIRLS SERVICE

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

Abortion Pill Prices Tembisa [(+27832195400*)] 🏥 Women's Abortion Clinic in T...

VTU technical seminar 8Th Sem on Scikit-learn

VTU technical seminar 8Th Sem on Scikit-learn

VTU technical seminar 8Th Sem on Scikit-learn

%in Soweto+277-882-255-28 abortion pills for sale in soweto

%in Soweto+277-882-255-28 abortion pills for sale in soweto

%in Soweto+277-882-255-28 abortion pills for sale in soweto

%+27788225528 love spells in Huntington Beach Psychic Readings, Attraction sp...

%+27788225528 love spells in Huntington Beach Psychic Readings, Attraction sp...

%+27788225528 love spells in Huntington Beach Psychic Readings, Attraction sp...

Announcing Codolex 2.0 from GDK Software

Announcing Codolex 2.0 from GDK Software

Announcing Codolex 2.0 from GDK Software

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

call girls in Vaishali (Ghaziabad) 🔝 >༒8448380779 🔝 genuine Escort Service 🔝✔️✔️

%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain

%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain

%in Bahrain+277-882-255-28 abortion pills for sale in Bahrain

AI & Machine Learning Presentation Template

AI & Machine Learning Presentation Template

AI & Machine Learning Presentation Template

Software Quality Assurance Interview Questions

Software Quality Assurance Interview Questions

Software Quality Assurance Interview Questions

WSO2Con2024 - Enabling Transactional System's Exponential Growth With Simplicity

WSO2Con2024 - Enabling Transactional System's Exponential Growth With Simplicity

WSO2Con2024 - Enabling Transactional System's Exponential Growth With Simplicity

%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...

%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...

%+27788225528 love spells in new york Psychic Readings, Attraction spells,Bri...

%in Midrand+277-882-255-28 abortion pills for sale in midrand

%in Midrand+277-882-255-28 abortion pills for sale in midrand

%in Midrand+277-882-255-28 abortion pills for sale in midrand

+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...

+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...

+971565801893>>SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHAB...

Define the academic and professional writing..pdf

Define the academic and professional writing..pdf

Define the academic and professional writing..pdf

WSO2CON 2024 - Does Open Source Still Matter?

WSO2CON 2024 - Does Open Source Still Matter?

WSO2CON 2024 - Does Open Source Still Matter?

The title is not connected to what is inside

The title is not connected to what is inside

The title is not connected to what is inside

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

Be Mean To Your Code: Rugged Development & You

1. BE MEAN TO YOUR CODE RUGGED DEVELOPMENT & YOU MATT JOHANSEN JAMES WICKETT

2. @mattjay The Beard of Destiny Gauntlt Cheerleader Head of WhiteHat Threat Research Center BlackHat, DEFCON, RSA, SXSW, more++

3. @wickett Gauntlt Project Lead Founder of LASCON Sr. Engineer at Signal Sciences

4. We’re making AppSec effective and practical signalsciences.com

5. AUDIENCE SURVEY Cloud or Metal? DevOps? Agile? Flavors? How does code get to production? How often do you do code changes? Do you do security testing in the build/deploy pipeline? #RUGGEDCODE

6. PRINCIPLES FOR A MODERN SECURITY #RUGGEDCODE TEAM

7. #RUGGEDCODE OSSM On Demand Scalable Self-Service Measured Source: Dave Neilsen

8. OLD DECISION MATRIX Function Features Gartner Magic Quadrant Trial Eval TCO #RUGGEDCODE

9. NEW DECISION MATRIX API and Integrations Service Billing Half Decent? #RUGGEDCODE

10. PRINCIPLE #1 PLAY NICE AND INTEGRATE WITH #RUGGEDCODE OTHERS

11. PEOPLE PROCESS TECHNOLOGY #RUGGEDCODE

12. PRINCIPLE #2 INFLUENCE THE #RUGGEDCODE PEOPLE

13. #RUGGEDCODE DEVOPS

14. #RUGGEDCODE CAMS Culture Lean* Automation Measurement Sharing Source: @botchagalupe @damonedwards

15. #RUGGEDCODE

16. PRINCIPLE #3 WHAT WE VALUE IS DETERMINED BY OUR #RUGGEDCODE CULTURE

17. #RUGGEDCODE

18. CONTINUOUS DELIVERY IS KING #RUGGEDCODE PRINCIPLE #4

19. THERE ARE TWO PATHS TO WINNING FOR #RUGGEDCODE SECURITY

20. THE DEVELOPMENT AND BUILD PIPELINE #RUGGEDCODE

21. OPERATIONAL RUNTIME STATE AND MONITORING #RUGGEDCODE

22. WE ARE FOCUSING ON DEV/BUILD PIPELINE IN THIS PRESENTATION #RUGGEDCODE

23. DETECT AND FIX IN DEVELOPMENT #RUGGEDCODE

24. WHY DOES THIS #RUGGEDCODE MATTER? VULNERABLE CODE IS EVERYWHERE

25. #RUGGEDCODE

26. HOW DO I FIX XSS? #RUGGEDCODE

27. GOOD: INPUT SANITIZATION #RUGGEDCODE [XSS]

28. BLACKLIST :( #RUGGEDCODE [XSS]

29. WHITELIST :) #RUGGEDCODE [XSS]

30. BETTER: OUTPUT #RUGGEDCODE ENCODING [XSS]

31. < > BECOME &LT; &GT; #RUGGEDCODE [XSS]

32. SQL INJECTION #RUGGEDCODE [SQLi]

33. #RUGGEDCODE

34. #RUGGEDCODE

35. #RUGGEDCODE CREDIT: XKCD

36. HOW DO I FIX IT? #RUGGEDCODE [SQLi]

37. PARAMETERIZED #RUGGEDCODE QUERIES [SQLi]

38. PARAMETERIZED QUERIES (PHP) #RUGGEDCODE [SQLi]

39. PARAMETERIZED QUERIES (JAVA) #RUGGEDCODE [SQLi]

40. CROSS SITE REQUEST #RUGGEDCODE FORGERY [CSRF]

41. #RUGGEDCODE

42. #RUGGEDCODE

43. HOW DO I FIX IT? #RUGGEDCODE [CSRF]

44. #RUGGEDCODE

45. #RUGGEDCODE TOKENS! [CSRF]

46. #RUGGEDCODE IMAGE CREDIT: DOTNETBIPS.COM

47. #RUGGEDCODE AGAIN… VULNERABLE CODE IS EVERYWHERE

48. GETS FIXED SLOWLY #RUGGEDCODE

49. #RUGGEDCODE GETS FIXED SLOWLY

50. #RUGGEDCODE …IF EVER

51. #RUGGEDCODE OWASP TOP 10

52. #RUGGEDCODE

53. YOU HAVE A BUILD PIPELINE TELL ME MORE ABOUT HOW #RUGGEDCODE SPECIAL YOU ARE

54. #RUGGEDCODE GAUNTLT

55. BUILT ON CUCUMBER #RUGGEDCODE

56. GAUNTLT PRINCIPLES AND PHILOSOPHY Gauntlt comes with pre-canned steps that hook security testing tools Gauntlt does not install tools Gauntlt can be part of the CI/CD pipeline Be a good citizen of exit status and stdout/ stderr MIT Open Source License #RUGGEDCODE

57. #RUGGEDCODE

58. GAUNTLT RESOURCES • Google Group > https://groups.google.com/d/ forum/gauntlt • Wiki > https://github.com/gauntlt/gauntlt/wiki • Twitter > @gauntlt • IRC > #gauntlt on freenode • Issue tracking > http://github.com/gauntlt/ gauntlt #RUGGEDCODE

59. THE GAUNTLT BOOK FREE FOR LASCON! book@gauntlt.org #RUGGEDCODE

60. #RUGGEDCODE

61. ./velocity/lab_3/.travis.yml #RUGGEDCODE

62. ./velocity/lab_3/.travis.yml #RUGGEDCODE

63. #RUGGEDCODE ./Rakefile

64. ./test/attacks/email_leakage.attack #RUGGEDCODE

65. ./test/attacks/email_leakage.attack #RUGGEDCODE

66. ./test/attacks/backdoors.attack #RUGGEDCODE

67. ./test/attacks/sql_injection.attack #RUGGEDCODE

68. #RUGGEDCODE DEMO

69. #RUGGEDCODE @MATTJAY @WICKETT