Agile + DevOps East 2023 - Security
Customize your Agile + DevOps East 2023 experience with sessions covering security for software developers and testers.
Thursday, November 9
Testing Your Way Out of Microservices Hell
A microservices architecture offers the fantastic promise of loosely coupled systems, independently testable and deployable. However, it can also present some significant challenges while conducting integration & exploratory testing. Since a single service will often not do anything valuable without several collaborator services, one typically needs to understand the way many services work together to effectively integration-test the system. This challenge can be viewed optimistically as well. By design, a microservice must at least provide some API interface, often making it easy to...
Pipelineless Security
It's 2023 and security still needs to earn some respect if they want to slide their Sec between Dev and Ops. Their tooling slows down deployment pipelines, typically finding more false positives than real bugs, usually in code written years ago, and often harming development velocity. To their credit, security teams will occasionally make concessions, like pulling long-running rules out of static analysis engines, but that means that the bugs those tools would otherwise find get caught months later in bug bounties, penetration tests, or security incidents. Bug reports for code you didn't...