May 2023 Program Guide

SECURITY OPERATIONS

Beginners Guide To Mobile Application Penetration Testing Speaker: Whitney Phillips Talk Time: 11:30 AM - 11:55 AM PT Abstract: This session will be an introduction into mobile application penetration testing, it will start with a high-level overview of jailbreaking for iOS and rooting for Android. The presenter will then share tools and tips that will help someone new to this field get started.

Devsecops : The Inevitable Wave In Devops World

Speaker: Viraj Gandhi Talk Time: 1:00 PM - 1:25 PM PT

Abstract: Software is everywhere, and modern software consists of 80% of open-source components, automation of software delivery has amplified security risks. Software supply chain security incidents have been growing tremendously, which has changed cybersecurity priorities lately. We all have heard of the Solar Winds attack and how it was a catalyst for the industry to start bringing security into the DevOps culture and secure CI/CD pipeline. The talk will provide insight to the audience on what can go wrong when DevSecOps is not adopted in organizations by going over a few real-world famous attacks that happened in past like NPM supply chain attack issues, SolarWinds attacks, etc. Developers in DevOps attending this talk will take away key techniques to embrace a culture of DevSecOps and best practices on how to shift left from shift right. The talk will help developers in DevOps to broaden their knowledge and start thinking of adding security in DevOps and will guide them to the path of the DevSecOps world.

DAY OF SHECURITY

29

Powered by