Jforum #109 - Why Are We Doing DevOps & How To Secure Your Supply Chain

We are excited to announce a meetup hosted at Google

Agenda:
17:30 Doors open, light food and drinks

18:00 Identifying And Avoiding Malicious Packages In Supply Chain Attacks
Jonathan Sar Shalom Director of Threat Research at JFrog
The talk will be a technical showcase of the different types of malicious packages that are prevalent today in popular package repositories. Many examples shown in the presentation will be based on real data and malicious packages that were identified and disclosed by JFrog. We will dive into the types of attacks and payloads contained in these malicious packages and explain how these packages can be identified and rejected, using a recommended secure development workflow and relevant OSS tools.

18:50 Really, Why are we doing DevOps?
Fred Simon, co-founder & Chief Data Scientist, JFrog
It's always a good idea to go back to first principles of your craft. What are we trying to achieve? Why is it better now? What can make it better tomorrow? What were the main forces for the DevOps movement? Where are we now? Finally, with software usage continuing to expand into every aspect of our daily lives, how will our DevOps practices need to change in order to support this evolution?
Let's imagine the exciting path forward.

19:35 After the talks, those who want to mingle and have a drink can follow us to a pub nearby!

Speakers :

• Fred Simon, Chief Data Scientist and Co-Founder of JFrog
• Jonathan Sar Shalom, Director of Threat Research at JFrog