DevOps Chat

As any CIO knows, a data management architecture is essential to caring for one of the organization's most valuable assets: data. Data management sounds simple but it's not. Backup and recovery, disaster recovery, data retention, governance, e-discovery... all are parts of any effective data protection strategy. As businesses move and grow their presence in the cloud, the same capabilities apply i...

Network technology has undergone its own transformation in parallel with cloud infrastructure, how we create software, and the adoption of DevOps. SDN, NFV, virtual network appliances, and an ever-expanding suite of APIs making network and security technologies much more accessible to developers. Network engineers' worlds are rapidly changing too. From highly skilled to associate-level, all networ...

It's easy to forget not everyone started their move to the cloud eight or even ten years ago. Early adopters have a wealth of experiences that can benefit newcomers and experienced teams alike. A preview to August 14th's webinar "Top 5 AWS Security Mistakes and How to Stop Them Before You Lose Data", DisruptOps CEO Mike Rothman joins us on DevOps Chat. In this episode, we reflect on learnings and...

In a world where our apps are stitched together from a various building blocks, why wouldn't we do the same with Kubernetes? Operators make this possible. We spoke with Rob Szumski of IBM RedHat OpenShift team about the groundbreaking work he and the OpenShift team have been doing with bringing an entire library/repo of Operators for Kubernetes that will make it easier and faster to deploy and use...

The tribe at Armory (https://armory.io) announced their $28m series B funding, led by Insight Partners. Armory enables continuous software delivery at enterprise scale, powered by Spinnaker. That is a crisp mission statement, but beyond that Armory is bringing the open source Spinnaker to the enterprise market. As such they are also helping the entire Spinnaker community and as part of this the en...

Martin McKeay, a cybersecurity veteran, joins us to review Akamai's latest State of The Internet report (SOTI). This SOTI edition, dubbed Financial Services Attack Economy, highlights the vast array of cyber attacks targeted at the financial systems ecosystem over the past 18 months. Martin highlight from the report includes readily available lists of compromised user IDs and passwords, stuffing a...

Michael Coates is on a mission, a journey, an unassailable quest. You don't come away from senior security leadership roles at Twitter and Mozilla without some real-world lessons of how to improve cybersecurity. Those lessons inspired our guest Michael Coates, former Twitter CISO, to co-found his new startup Altitude Networks. While we don't yet know all the details about Altitude Networks, we kno...

Agile, DevOps, multiple cloud providers, serverless, contemporary cloud native apps, shadow IT using a credit card…it can be daunting for any IT organization to be responsive to the internal customer needs. It’s even tougher to be proactive and get ahead of the curve. Enter Cloud Management Platforms (CMP). On this episode of DevOps Chat, we talk with Bernard Sanders (no, not the presidential cand...

Should we secure containers? How do we secure containers? How do we secure serverless computing architectured apps? With code repositories growing rapidly with each container we create, our guest John Kinsella, VP of Engineering - Container Security at Qualys, has some sage advice for securing containers. Containers are not intended to isolate code from security vulnerabilities, containers are des...

RSAC 2019 APJ in Singapore is coming up and we’re lucky enough to preview a talk by Derek Manky titled "Flash War: Tapering an Accelerating Attack Chain." The speed at which networks are attacked, compromised and then intruders spread laterally is increasing rapidly. Add swarm technologies with AI machine learning and automation and the future holds a world where attacks that take days, hours or m...

RSA Asia Pacific & Japan Conference 2019 in Singapore promises exciting and engaging sessions. A likely popular and possibly controversial talk will be “The Future of AppSec is Cloud Native.” Co-Presented by Jimmy Mesta (CEO and co-founder Ksoc and CTO at Manicode Security) and Jim Manico (Founder and trainer at Manicode Security), this talk makes the bold assertion that how we build cloud native...

Our podcast guest believes the world changed “on a Tuesday" six months ago when the enterprise move to the cloud became imperative, not just an aspirational goal. That eureka moment was enough to pull Steve Mullaney off the sidelines and back into the game as CEO of Aviatrix after successful executive gigs at Palo Alto Networks and Nicira. Go-build might be a wonderful approach for cloud-native ap...

Secure software depends on people finding vulnerabilities and deploying fixes before they are exploited in the wild. This has lead to a world of security researchers and bug bounties directed at finding new vulnerabilities. As dedicated as security researchers are, there is a vast ocean of software in existence, waiting for someone to find and exploit the next security vulnerability for profit or...

Wouldn’t it be helpful to know if other cloud users are seeing the same or similar attacks that you are? Security intelligence about cloud applications beyond just those you own and operate as an enterprise opens up a new dimension in attack visibility against an even large sets of cloud apps. Sumo Logic announced its extending their machine analytics and intelligence platform to include AWS Guard...

Making sure our applications are secure during runtime is of course important but how do we shift left so security is built into containerized, serverless applications? Lacework announced the addition of build-time security capabilities which complement their existing run-time offering for cloud, container and hybrid environments. This “shift left” will provide security and compliance visibility a...

Introducing chaotic, unpredictable test software into your methodical testing regime is a good idea, right? Yes, it's a branch of testing called Chaos Engineering, or Chaos Testing. Netflix's Chaos Monkey famously introduced many of us to the idea that resilient systems, networks and software become more resilient and less brittle if we use chaotic testing methods to find their weak points before...

As more and more of the components that make up the applications we use are open source, the need to secure these open source components increases. Of course Equifax is the poster child for this issue. Checkmarx, one of the leaders i application security scanning has had an open source scanning module for sometime. They have now updated that with a new homegrown engine that greatly improves the ab...

Agility, DevOps and Digital Transformation are racing into the mainstream. You know that’s the case when enterprise technology suppliers shift and adapt their strategies from infrastructure software to platforms for application delivery. That’s certainly been the case with SUSE, a company we’ve know for a long time going back to its Linux distribution origins. Adoption of contemporary software tec...

SignalFx just announced a $75m dollar round of financing, bringing their total raise to date to $179m. This is an impressive war chest that allows SignalFx to continue it mission of bringing next generation Cloud Monitoring to large enterprises. In this DevOps Chat we sat down with SignalFx CEO and co-founder, Karthik Rau to discuss what were the big trends he and the team bet on early in SignalFx...

DevOps and Agile are all about making software cycles short and dynamic, empowering development teams to rapidly iterate, leveraging tools with fewer burdens and reliance on outside organizations. It's the dev + ops combination that is so powerful. But what about security, specifically the identity of physical and virtual devices, containers and micro services? Digital certificates are a key asset...

Dynatrace is a company that really reinvented itself as it saw the world it played in changing over the last few years. They moved from tracing and APM to what they call Software Intelligence and Smart Monitoring. In this DevOps Chat we sat

Mark Schwartz is one of the rare individuals who is not only a great IT exec but can also analyze what works and doesn't work and write it up in a way that helps others. His "A Seat at the Table" is still one of my favorite DevOps books. Mark's new book is called War, Peace & IT. You can download an excerpt of it here: https://dl.orangedox.com/WarPeaceITExcerpt We speak with Mark about the book an...

Machine data comprises a vast array of data sources including logs, messages, events, telemetry data, and application and domain-specific relevant data. Aggregating all of these types of data, from sources across the enterprise and devices connected to our networks, brings opportunities to create intelligent analytics and new insights for use by the business, service delivery, security, devops and...

Adopting devops means changes from how you build software to organizational processes and cultural behaviors. Large enterprises have even greater challenges to overcome including supporting a large number of applications and addressing technical debt while also taking on new development initiatives like digital transformation. What can we learn from experienced devops practitioners? In this DevOps...

Lumigo finds itself in the middle of one of the biggest waves in infrastructure deployment today, serverless. This is no accident, the company was started about a year ago with the mission of providing a serverless intelligence platform. The founders are ex-Checkpoint folks who saw the need for a best practices based platform to help deploy serverless payloads (apps) across different public cloud...