Learn · CERN

Talk1 h 16 min

DevOops Redux

Chris Gates and Ken Johnson · CERN

Watch At CERN

About

DevOps toolchains are transforming Modern IT, but hackers can undermine their benefits through poorly implemented or vulnerable DevOps tools. Chris Gates and Ken Johnson will share their collaborative attack research into the technology driving DevOps. They will share an attacker?s perspective on exploiting DevOps organizations and the countermeasures these organizations should employ.

About the speakers

Ken Johnson, CTO of nVisium, has been hacking web applications professionally for 8 years. Ken is both a breaker and builder and currently leads the nVisium product team. Previously, Ken has spoken at DerbyCon, AppSec USA, AppSec DC, AppSec California, DevOpsDays DC, LASCON, RubyNation, and numerous Ruby, OWASP, and AWS events. Ken is currently investing his time between OWASP's Railsgoat, Elxir and Go, as well as all aspects of AWS offerings.

Chris Gates has extensive experience in network and web application penetration testing, Red Teaming and Purple Teaming. Chris is currently learning to be a part time fixer instead of full time breaker. In the past he has spoken at the United States Military Academy, BlackHat, DefCon, Toorcon, Brucon, Troopers, SOURCE Boston, Derbycon, LasCon, HashDays, HackCon, Bsides ATL, IT Defense, OWASP AppSec DC, and Devops Days. Chris is also a cofounder of NoVAHackers. .

0:00:00 Slide 1

0:02:37 Slide 2

0:03:14 Slide 3

0:03:39 Slide 4

0:04:04 Slide 5

0:04:21 Slide 6

0:04:43 Slide 7

0:05:19 Slide 8

The talk

  1. DevOops Redux 2017-03-23 · 1 h 16 min · CERN's player

Credits and licence

Institution
CERN
Department
CERN Computing Seminar
Taught by
Chris Gates, Ken Johnson
Year
2017
Language
English
Subjects
Computer science
Source
CERN
Licence
CERN, as CERN states it. CERN's terms
Attribution
© CERN. CERN provides its audiovisual media free of charge for educational and informational use, credited to CERN; this lecture is shown in CERN's own player.
Who can watch
CERN gives no rating. Invisible Network shows it to Teens profiles and older, judged from what the source says about it. How courses are placed