Hackers Would Like You To Put In Long Hours

As presented at DevOpsDays Silicon Valley
https://www.devopsdays.org/events/2018-silicon-valley/program/ryan-prior/

When we plan our agile sprints and staff our teams, do we leave time to operate safely? We know from rigorous data collection that long work hours contribute to a dramatically increased hazard rate, yet we work in a field that often glorifies and rewards all night server room firefights and epic code-crushing death marches. We might be working too hard to be secure. What if we could save money, improve security, and serve our customers better by working less? This session will cover ways that, as DevOps leaders within our organizations, we can lead change, set the example, and use our skills to build reliable systems that don’t get hacked.

Transcript

1. HACKERS WOULD LIKE YOU TO PUT IN LONG HOURS Ryan Prior Software Engineer at CyberArk Conjur.org @ryanprior
2. EVERY INDUSTRY HAS HAZARDS
3. TREMENDOUS LEVERAGE MEANS HUGE HAZARDS This is the tech industry
4. LONG HOURS INCREASE HAZARD RATE in every industry
5. LONG WEEKS LONG SHIFTS ALSO INCREASE HAZARD RATE hazards like: bugs, opsec fails
6. TECH LENDS ITSELF TO HAZARDS One screw loose can bring the whole house down
7. ARE TECH WORKERS UNIQUELY RELIABLE?
8. ARE WE MORE RELIABLE THAN NURSES? Tired nurses are a hazard to patients
9. ARE WE MORE RELIABLE THAN AIRLINE PILOTS? Tired pilots are a hazard to passengers
10. PUT TIRED OPS IN YOUR THREAT MODEL Mistakes make you vulnerable
11. THREAT MITIGATION: ELIMINATE OVERWORK
12. MULTIPLE MODELS OF MITIGATION to fit varying circumstances
13. MITIGATION: SPLIT SHIFTS THROUGHOUT THE DAY NapOps
14. MITIGATION: ALLOW SWAPPING WEEKEND DAYS FOR WEEKDAYS Put an end, to weeks that never end
15. MITIGATION: NORMALIZE RESCHEDULING WORK TO TAKE NEEDED REST Respect your (& your team’s) limits
16. DESIGN YOUR TECH WITH SWITCHES TO TOLERATE OUTAGES Amy Unger spoke about this at DevOpsDays Madison
17. OTHER INDUSTRIES STRUGGLE WITH THIS TOO
18. REMEMBER THE MANY GOOD REASONS TO AVOID OVERWORK
19. ALIGN SECURITY PRACTICES WITH YOUR VALUES
20. THANK YOU! @RYANPRIOR – CONJUR.ORG Slide 2 by Hubert Mousseigne on Unsplash Slide 3 by Diana Măceşanu on Unsplash Slide 4 by Luis Melendez on Unsplash Slide 5 by Kristopher Allison on Unsplash Slide 6 by Débora Rousse on Unsplash Slide 7 by Paul Skorupskas on Unsplash Slide 8 by rawpixel on Unsplash Slide 9 by Chris Leipelt on Unsplash Slide 10 by Markus Spiske on Unsplash Slide 11 by Jonathan Velasquez on Unsplash Slide 12 by jean wimmerlin on Unsplash Slide 13 by Alex Plesovskich on Unsplash Slide 14 by Nik MacMillan on Unsplash Slide 15 by Jacob Ufkes on Unsplash Slide 16 by Oudom Pravat on Unsplash Slide 17 by Emil Bruckner on Unsplash Slide 18 by Simon Migaj on Unsplash Slide 19 by Mauricio Artieda on Unsplash