<commit_before>---
layout: post
title:  "DevSecCon 2015"
date:   2015-10-22 12:00:00 +0000   
categories: highlight conferences
teaser: My notes from DevSecCon 2015
permalink: /blog/devseccon2015
img-url: /assets/blog/training/devseccon2015/dsc.jpg
---


# Securing innovation @ speed and scale via DevSecOps

* Devops growing faster than security - problem!
* Cloud security is on the rise
    * security has to keep up with innovation pace of other engineering features
* Get out of checklist mode; automate security testing
* Problems
    * friction for the sake of it
    * manual process and meeting culture
    * point in time assessments
    * thought about outside the value creation process
* Mission - "Target customer value through secure iterative innovation at speed and scale"
* Red and blue team security testing - "find exploits day"
* Security self service is important
* Devsecops
    * Security engineering 
        * experiment, automate, test
    * Ops
        * hunt, detect, contain
    * Compliance operations
        * response manage and train
    * Security science<commit_msg>Change title of first heading in hope to fix formatting issue<commit_after>---
layout: post
title:  "DevSecCon 2015"
date:   2015-10-22 12:00:00 +0000   
categories: highlight conferences
teaser: My notes from DevSecCon 2015
permalink: /blog/devseccon2015
img-url: /assets/blog/training/devseccon2015/dsc.jpg
---


# Securing innovation at speed and scale via DevSecOps

* Devops growing faster than security - problem!
* Cloud security is on the rise
    * security has to keep up with innovation pace of other engineering features
* Get out of checklist mode; automate security testing
* Problems
    * friction for the sake of it
    * manual process and meeting culture
    * point in time assessments
    * thought about outside the value creation process
* Mission - "Target customer value through secure iterative innovation at speed and scale"
* Red and blue team security testing - "find exploits day"
* Security self service is important
* Devsecops
    * Security engineering 
        * experiment, automate, test
    * Ops
        * hunt, detect, contain
    * Compliance operations
        * response manage and train
    * Security science
{'fraction_non_alphanumeric': 0.05892778023925565, 'fraction_numerical': 0.030128489144882586, 'mean_word_length': 3.5250501002004007, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '17870', 'n_tokens_mistral': 642, 'n_tokens_neox': 570, 'n_words': 268}