Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Shifting Left Securely

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Matt Stratton Matt Stratton
April 28, 2016
Technology
210
0

Shifting Left Securely

Avatar for Matt Stratton

Matt Stratton

April 28, 2016

More Decks by Matt Stratton

See All by Matt Stratton
Talk Selection As Mockumentary Film Editing
Avatar for Matt Stratton mattstratton
0
61
How Do You Infect Your Organization With Humane Ops?
Avatar for Matt Stratton mattstratton
0
150
Incidents and Accidents
Avatar for Matt Stratton mattstratton
0
190
Everything Is A Product - How To Apply Product Management Practices to Technology Services
Avatar for Matt Stratton mattstratton
0
990
The Handwaver's Guide to Contributing To Open Source - ChefConf 2017
Avatar for Matt Stratton mattstratton
0
680
Shifting Left Securely - DevOpsDays Denver 2017 Edition
Avatar for Matt Stratton mattstratton
0
1k
Making Infrastructure S'mores With Chef (ThatConference edition)
Avatar for Matt Stratton mattstratton
0
690
Making Infrastructure S'mores With Chef (KC DevOps edition)
Avatar for Matt Stratton mattstratton
0
87
The Five Love Languages of DevOps
Avatar for Matt Stratton mattstratton
2
170

Other Decks in Technology

See All in Technology
要件定義の精度を高めるための型と生成AIの活用 / Using Types and Generative AI to Improve the Accuracy of Requirements Definition
Avatar for haru860 haru860
0
290
知ってた？JavaScriptの"正しさ"を検証するテストが5万以上もあること(Test262)
Avatar for Riya Amemiya riyaamemiya
0
130
もっとコンテンツをよく構造化して理解したいので、LLM 時代こそ Taxonomy の設計品質に目を向けたい〜！
Avatar for MasatoMasaMasa morinota
0
150
データ定義の混乱と戦う 〜 管理会計と財務会計 〜
Avatar for wonohe wonohe
0
170
巨大プラットフォームを進化させる「第3のROI」
Avatar for Recruit recruitengineers
PRO
2
2.2k
Angular Architecture Revisited Modernizing Angular Architectural Patterns
Avatar for Rainer Hahnekamp rainerhahnekamp
0
120
[Scram Fest Niigata2026]Quality as Code〜AIにQAの思考を再現させる試み〜
Avatar for Masami Yajiri masamiyajiri
1
170
Fabric MCPの紹介と使い分け
Avatar for Ryoma Nagata ryomaru0825
1
110
古今東西SRE
Avatar for Kaoru okaru
1
110
AIはハッカーを減らすのか、増やすのか？──現役ホワイトハッカーから見るAI時代のリアル【MEGU-Meet】
Avatar for サイバーセキュリティクラウド cscengineer
PRO
0
260
「SaaSの次の時代」に重要性を増すステークホルダーマネジメントの要諦 ～解像度を圧倒的に高めPdMの価値を最大化させる方法～
Avatar for KAKEHASHI kakehashi
PRO
3
3.6k
Percolatorを廃止し、マルチ検索サービスへ刷新した話 / Search Engineering Tech Talk 2026 Spring
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
0
230

Featured

See All Featured
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
9
860
How to build an LLM SEO readiness audit: a practical framework
Avatar for Nick Samuel nmsamuel
1
730
Embracing the Ebb and Flow
Avatar for Simon Collison colly
88
5k
Gemini Prompt Engineering: Practical Techniques for Tangible AI Outcomes
Avatar for Mfonobong Umondia mfonobong
2
380
Noah Learner - AI + Me: how we built a GSC Bulk Export data pipeline
Avatar for Tech SEO Connect techseoconnect
PRO
0
170
Done Done
Avatar for chrislema chrislema
186
16k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
5.9k
Money Talks: Using Revenue to Get Sh*t Done
Avatar for Nikki Halliwell nikkihalliwell
0
210
B2B Lead Gen: Tactics, Traps & Triumph
Avatar for Sophie Logan marketingsoph
0
110
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
410
Fight the Zombie Pattern Library - RWD Summit 2016
Avatar for Marcelo Somers marcelosomers
234
17k

Transcript

  1. SHIFTING LEFT SECURELY

  2. WHOAMI

  3. QUALITY AND INNOVATION HISTORICALLY, A TRADEOFF

  4. None
  5. None
  6. None
  7. None
  8. None
  9. None
  10. None
  11. None
  12. None

  13. VERSIONED MODULARIZED TESTED

  14. HOW DOES THIS HELP ME WITH SECURITY?

  15. None
  16. None
  17. None
  18. None

  19. TO REVIEW > Treat your pipeline as code > Trust

    (but verify) your domain experts > Share the cooking > Use your production audit tests in your pipeline > Did I mention test?

  20. QUESTIONS?

  21. RESOURCES > Sidney Dekker - Field Guide to Human Error

    > github.com/mattstratton/shift-left-securely > twitter.com/mattstratton > speakerdeck.com/mattstratton > arresteddevops.com