This event has ended. View the official site or create your own event → Check it out
This event has ended. Create your own
View analytic
Thursday, May 11 • 14:10 - 14:50
Requirements Gathering for Successful DevSecOps Pipeline - Aaron Volkman and Hasan Yasar (USA_

Sign up or log in to save this to your schedule and see who's attending!

Feedback form is now closed.
Secure coding and verification practices within the software development lifecycle are paramount to producing secure software. Every team has unique requirements, motivations, and technologies requiring preparation and iteration to achieve DevOps nirvana. We must consider and shape our organization’s security policy, development platform, application technical stack, cross-team involvement, and most importantly secure software practices.

The key questions are:
  • How to assess the current state?
  • Where are the productivity bottlenecks?
  • Whom to train on what?
  • What and how to measure?
  • Finally How to monitor? 
Orgs leveraging a custom, integrated development pipeline can increase security assurance along with other quality attributes such as quality, performance, and regulatory compliance. In this session, we will share our considerations and approach to discovering the proper requirements for a security-first automated development pipeline implementation in your organization

avatar for Aaron Volkman

Aaron Volkman

Aaron Volkmann is a developer and DevOps researcher at Carnegie Mellon University's Software Engineering Institute / CERT division specializing in product and research-driven development. He teaches DevOps workshops and assists government software shops adopt DevOps principles.  ... Read More →
avatar for Hasan Yasar

Hasan Yasar

Hasan Yasar is the technical manager of the Secure Lifecycle Solutions group in the CERT Division of the Software Engineering Institute, CMU. Hasan leads an engineering group on software development processes and methodologies, specifically on DevOps and development; and cloud technologies, and big data problems while providing expertise... Read More →

Thursday May 11, 2017 14:10 - 14:50
Waterfront Center: Hall 2A

Attendees (34)