A phased approach to building security automation into your CI/CD
Event Information
Description
Presented by Mahesh Babu
So your engineering team is using CI / CD and churning out code at a frenetic pace. It is unclear where the risk is, what controls to focus on and where in the SDLC to introduce those controls. Mahesh will introduce a practical, risk-based approach to introducing security automation into the CI / CD pipeline to surface critical issues, shorten remediation time without bottlenecking the release. Finally, he will touch on the concepts of interactive analysis (IAST) and runtime protection (RASP) as key tools in this approach.
Want to learn more now? Check out https://medium.com/@contrastsec/6-executive-tips-to-bring-security-into-the-devops-era-954b09d30316
Mahesh Babu is the Head of Product Strategy at Contrast Security and is responsible for growing Contrast Protect. He takes every opportunity to tell everyone how Contrast has fundamentally changed application security for the first time since he started working in security 10+ years ago. Mahesh has seen the industry evolve as a researcher, consultant, and practitioner within a large bank. He began his career as a security researcher at the CERIAS center at Purdue University. He then went on to build and scale large security & privacy programs a Senior Manager & architect for HSBC Information Security & Risk. He also spent time as a consultant at Deloitte and Booz & Company. Mahesh has a BS in Computer Science and MS in Information Security from Purdue University and an MBA from Duke University.
Meeting Location: PROS
3100 Main
2nd floor
Houston, TX 77002
Map
Suggested Parking:
Park across the street in the parking garage on Elgin on the 2nd, 3rd (best), or 7th floor in a VISITOR or unmarked parking spot, taking a parking receipt as you enter the parking garage. Parking is free after 7:00 PM, so you won't have to pay as you exit. Take the elevator to the 3rd floor of the parking garage and walk across the sky bridge. The HJUG meeting will be on the 2nd floor on the left just before you reach the elevator bank.
Meeting Sponsor: 
Preparing the world’s future innovators
Science and technology are critical drivers of today’s global innovation economy. More and more companies–across all industry sectors–are seeking people with computer science (CS) and computer engineering skills.
In the U.S., there will be 1.4 million CS-related jobs by 2020, yet U.S. college graduates are expected to fill less than a third of those jobs. For American youth, this means an unfortunate mismatch between education and opportunity that we must solve by bringing together professionals from across the CS industry.
By increasing access to CS for all youth as early as possible, we will help them prepare for the jobs of today and tomorrow and give them the opportunity to become creators of technology and the world’s future innovators.
About our venue sponsor: PROS
We aren't your run-of-the-mill software company. We're true to our word. When we say your success is our number one priority, we mean it. We'll work side-by-side with you to deliver on every promise every time. At PROS, we don't just see ourselves building software. We see ourselves as building blocks in our customers' success stories.
Our Core Values:
- Ownership - We take responsibility.
- Passion - We love what we do.
- Pride - We accept only the best.
- Trust - We can be counted on.
- Integrity - We do what's right.
- Innovation - We create possibilities.
- Customer Centricity - We put our customers first.
Door Prizes and Giveaways! - must RSVP on Eventbrite to win
- JetBrains has donated one IntelliJ license to be raffled off at this month's HJUG meeting if we have 30 attendees, two if we have 50 or more
- Hello2Morrow has donated a SonarGraph Personal license to be raffled off at this month's HJUG meeting
- Headway Software has donated a license of the new Structure101 IDE Plugin
- SemanticMerge has donated a one year license of their product to one lucky winner, and another to the speaker.
Meeting sponsored by Structure101 for Tangle free software.
