Secure by Design: Integrating Security into Development

jannakha — Wed, 03 May 2023 11:45:06 +0000

Room

HS4 (Ground level)

jannakha Wed, 05/03/2023 - 13:45

Time Slot

Thu 10:45am to 11:30am (7/20/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

Cyber security (or lack of) has been covered extensively in the news. Hacker attacks range from bored school kids toying around to state-sponsored ransom-driven targeted strikes. As software engineers it’s our responsibility to incorporate cyber security best practices into the development cycle. In this presentation, I’ll provide a list of resources, best practices, tools and Drupal modules for designing and implementing a more secure Drupal web application and to prepare for penetration testing.

Speaker(s)

Janna Malikova

Senior Software Engineer at Tomato Elephant Studio

Speaker biography

Janna is software engineer and frontend performance specialist from Brisbane, Australia. She makes web applications run fast and shares her knowledge with the world at local meetups and conferences. She is a co-maintainer for a number of open source projects and co-organiser of Drupal events in Australia.

Session Keywords

Security

Development process

What is the secure software supply chain and the current state of the PHP ecosystem

paolo.mainardi — Sun, 23 Apr 2023 11:18:50 +0000

What is the secure software supply chain and the current state of the PHP ecosystem

Room

HS4 (Ground level)

paolo.mainardi Sun, 04/23/2023 - 13:18

Time Slot

Fri 4:15pm to 5:00pm (7/21/23)

Session length

Long session - 45min, including Q&A

Audience

All Attendees

Session Category

DevOps & Quality Assurance

In this talk I’ll present the current state of the software supply chain, the big global recent events (SolarWinds, log4shell, codecov, packagist) and the state of the PHP and Drupal ecosystem, the threats and the mitigations that can be applied using tools like Sigstore, Syft, and Grype for digital signatures, SBOM generation, and automatic vulnerability scanning and how to use them for real-world projects to gain unprecedented levels of knowledge of your digital artifacts.
There will be also a demo of the mentioned tools in action to implement a secure supply chain pipeline for your Drupal projects.

Speaker(s)

Paolo Mainardi

CTO at Sparkfabrik

Speaker biography

Hello, i am Paolo Mainardi, proud founder and CTO of Sparkfabrik.

My role is to drive the company toward innovation, by building cutting-edge and cloud-native web applications and doing Kubernetes consultancy at different levels, from the the cluster management to custom implementations, we are also CNCF Silver Member and Kubernetes Certified Service Provider (KCSP).

When i am not too busy with the company stuff, i like to contribute to open source projects, speaking and organizing conferences and actively participating to the community.

You can get in touch with me on Mastodon: https://continuousdelivery.social/@paolomainardi

Session Keywords

Security