Putting the Sec in DevSecOps

The meetup is organised by Prodops.io and ESL and hosted by Vim.

The paradigm of DevOps has taken the world by storm, focusing on faster development pace and quicker releases, resulting in happier customers, organisation's management and shareholders. Has this focus however lead to a compromise on security? With multiple builds and releases on a daily basis, how can security teams carry out full assessments of their risks, identify their vulnerabilities and ensure a robust cyber posture?

Enter DevSecOps, a paradigm for integration of the Security team into the DevOps and SDLC, introducing AppSec testing early to build security in from the start, enabling organisations to be secure by design. In order for this to be truly successful without impacting on development velocity, automation and full integration are imperative.

Join us to discuss the future of AppSec testing automation already being deployed by organisations the world over and how the AST market has evolved to counter the growing and continual threat of cyber attacks.

Agenda:
17.30-18.00 - Mingling and food
18.00-18.20 - Talk 1
18.20-18.50 - Talk 2 - AppSec in DevOps
18.50-19.00 - Break
19.00-19.30 - Talk 3 - NeuraLegion, a user story
19:30-20.00 - Talk 4

#Talk1#
The talk main topics:
Vim's challenges in the Healthcare industry
Security as a key guide in the Healthcare industry
DevOps challenges at Vim

Asaf is the CTO of Vim. Asaf leads Vim’s long-term technology vision and is responsible for supervising all development and innovation efforts. Asaf also founded Bink, an innovative technology-based internet bank.

# Talk2 #
We will discuss and tackle the issues of security in the world of sprints, how to automate menial tasks and the important role of AppSec, focusing on:

• What does DevSecOps even mean?
• Security audit in the hourly release cycle
• Automation, automation and automation - how is Artificial intelligence delivering this?
• Automated AppSec Testing at the speed of DevOps
• Containers and their impact on the security flow
• Can we learn from traditional security practices?

# About Bar Hofesh - Co-Founder and CTO of NeuraLegion
A cyber security veteran with more than a decade of experience acting as a Security Officer, Researcher, Hacker, Developer and Software architect, Bar is instrumental in developing NeuraLegion's proprietary AIAST Technology that powers NexPloit, a New Generation of AppSec Testing Automation revolutionising the industry.

# Talk3 #
Gil will discuss the ease of integrating NexPloit into the SDLC and how any organisation can introduce comprehensive AppSec testing into their workflows with it, even with no established security team, empowering every company and their development team.
# About Gil Messerman - SogoServices #
Gil is the CTO and co-founder of SogoServices, he is a very skilled developer with years of experience of both architecture and code.
# Talk 4 #
What is in 85% of my code? - Defending your supply chain against attacks
Most companies rely on 3rd party open source components in their software development. As we move further into nimble delivery and acceptance of new innovation, bad actors are stepping-up their game, something we can see in recent high profile and devastating cyber attacks, with some using automation and precision targeting inside 3rd party software dependencies which are commonly used today. If we don’t fight back by doing the same - i.e automating security directly into the DevOps pipeline - then we’ll always be at the hackers’ mercy. This session will provide new research on the above, and how to get started.

##About Yossi Turgeman - ESL##
Yossi Turgeman is a veteran in the open source governance field.
Working with different tools and companies since 2012.
Helping making sure their open 3rd party code is secure and in compliance license wise.
Today Yossi is in ESL , a company which provides its customers with an ecosystem of software development, devops and security tools.