DevSecOps: Creating A Secure Software Supply Chain

DevSecOps - Netherlands is a DevSecOps community for anyone interested in securing a software development lifecycle (DevSecOps). To deliver secure innovations and shift security left, organizations must commit to changes in skills, culture, technology and processes. Join this community to learn more about DevSecOps and how to make it successful within your organization.

DevSecOps - Netherlands

Details:
<HR>
 
Agenda
18:00 – Welcome with food and drinks
18:30 – First talk with Wiebe de Roos
19:30 – Second talk with Andrew Martin
20:30 – Networking
21:00 – End 
<H2 CLASS="MsoNormal">PLEASE NOTE: Register under your real name (full name) and bring your ID to the venue. </H2>
<HR>
 
Location: KPN Technium
Go to the entrance and follow our DevSecOps Meetup signs.
Public Transport: take the bus/train to Amsterdam Sloterdijk
Parking: There is free parking available.
 
<HR>
 
We are excited to have our next DevSecOpsNL meetup and see the Dutch DevSecOps community growing. Together with KPN, we will have another great evening with great speakers. The evening will consist out of two talks by our two great speakers Wiebe de Roos from Flusso B.V. and Andrew Martin from Controlplane. We hope that you will enjoy the presentations and wish you an interesting evening.
 
<HR>
 
Wiebe de Roos
Summary: Modernize CI/CD initiatives to accelerate DevSecOps for the enterprise
This talk highlights the ups and downs of a 2-year journey to move a large CI/CD tool to the cloud. The tool is running in production since October last year. It has a big impact on the CI/CD & DevOps program which is currently being rolled out. The movement accelerated innovation and a lot of Dev(Sec)Ops initiatives which in itself impacts 350+ DEV teams.
Come and listen to the stories behind the transformation. It’s a mixture of a lot of topics with 1 goal in mind: improve and speed up ;-) We will touch various important moments in time both from the business (management) as well as from the technical perspective.
Bio: Wiebe de Roos is a passionate CI/CD Consultant / Engineer and has over 12 years of experience in various ICT related roles. These roles include Java developer, product owner, technical consultant, architect and a sparring partner for (senior) management. He is a regular speaker at conferences.
His mission is to help companies improve and speed their Dev(Sec)Ops journey. This is achieved from a (strategic) management and a technical point of view. He advised large companies in the financial, mining & software development industry as well as governmental organizations both in The Netherlands as well as abroad. He always keeps an eye on security related aspects.
Wiebe works for Flusso BV - a small ICT consultancy firm in The Netherlands. In 2018 he founded Business IT Nerd. The focus of his company is to align the business strategy of organizations with the right IT projects and activities. https://www.businessitnerd.com.
LinkedIn: https://www.linkedin.com/in/wiebe-de-roos/
 
<HR>
 
Andrew Martin
Summary: The State of Your Supply Chain
Container security often focuses on runtime best-practices whilst neglecting the software shipped in the supply chain.  Application or library vulnerabilities are a likely route to data exfiltration, and containers offer a new opportunity to mitigate this risk. 
Treating containers as immutable artefacts allows us to "upgrade" images by rebuilding and shipping whole images, avoiding configuration drift and state inconsistencies. This makes it possible to constantly patch software, and to easily enforce what is deployed into our environments.
In this talk we detail an ideal software supply chain, describe the current state of the ecosystem, and dig into specific tools. Grafeas, Kritis, in-toto, Clair, Micro Scanner, TUF, and Notary are covered, and we demo how to identify a vulnerable image then automatically rebuild and redeploy it.
Bio: Andrew has an incisive security engineering ethos gained architecting and deploying high-traffic web applications. Proficient in systems development, testing, and operations, he is comfortable profiling and securing every tier of a bare metal or cloud native application, and has battle-hardened experience delivering containerized solutions to enterprise clients. He is a co-founder at <A HREF="https://control-plane.io" TARGET="_blank" DATA-MSYS-CLICKTRACK="0" REL="nofollow noopener noreferrer">https://control-plane.io</A>
Twitter: @sublimino
LinkedIn: https://www.linkedin.com/in/andr3wmartin/

Teleportboulevard 121

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

DevSecOps: Creating A Secure Software Supply Chain

More events from DevSecOps - Netherlands

Follow organizers to get events picked for you

Still looking for the right event?

Explore all events in Amsterdam and filter by date, category, and more to find the perfect fit.

DevSecOps: Creating A Secure Software Supply Chain

More events from DevSecOps - Netherlands

Follow organizers to get events picked for you

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Amsterdam and filter by date, category, and more to find the perfect fit.