Conference:  Global AppSec San Francisco 2022

Authors: Niclas Kjellin

2022-11-18

A little trust goes a long way, or so they say. The fundamentals of any resilient network, be it human or digital, starts with trust, where entities can authenticate themselves and others and communicate securely.Traditionally, a digital network uses the X.509 certificate standard and application-specific solutions to build trust and secure communication. Dime (Data Integrity Message Envelope) is an alternative open data format used to build trust and share data securely within networks of any size and shape. Dime envelopes contain encoded information, including verifiable claims by the sending party and application-specific data. In addition, using digital signatures and end-to-end encryption ensures that data cannot be altered or read by unauthorized parties. Some of the covered topics:- Trust-based networks – public key-based authentication to provide trust between entities- Message wrapping – end-to-end encryption to securely deliver data- Cryptographic linking – link items cryptographically for proof-building- Signature tags – to prove reception, processing, or verification of an itemAlthough there is no need to have deep secure engineering knowledge to get going with Dime, this talk aims to go through the underlying concepts, which will help to avoid common pitfalls and enable you to build more secure applications. The presentation uses real code examples to support and explain each concept further. Human readability and ease of use are at the heart of Dime, drawing on ideas from other formats such as JWT, PASETO, and Branco.As many use cases exist, including IoT, instant messaging, and banking apps, Dime may be crucial to your plans to take over the world (with your subsequent app success). At the very least, it will work through and strengthen your (digital) trust issues.

Conference:  CloudOpen 2022

Authors: Hema Veeradhi

2022-06-23

The presentation discusses the importance of a data-driven approach in DevOps and how to effectively use metrics to measure success.

• Aggregating data from various sources is important to make correlations and provide meaningful insights
• Test-driven development is similar to using metrics to answer questions quickly and make quicker decisions
• Metrics should be categorized based on outcomes and grouped accordingly
• Operate First is an open-source community cloud environment that allows users to test and influence software in a production-grade environment
• The presentation provides references and resources for getting started with data-driven DevOps