1. #devopsdays

2. DevOps Finishes What Agile Started
Plan
Code
Build
Test
Release
Deploy
Operate
DevOps
VALUE
Agile
#devopsdays

3. The Component Revolution
8,000
7,000
Requests in Millions
6,000
5,000
4,000
3,000
2,000
8 Billion
1,000
Requests in 2012
2001
#devopsdays
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012

4. Applying Supply Chain Concepts to Software Development
#devopsdays

5. Poorly Managed Components Puts Organizations At Risk
Security
Licensing
Business
Risk
Quality Issues
#devopsdays

6. Struts Widespread Compromise: CVE-2013-2251
Global
Bank
So+ware
Provider
So+ware
Provider’s
Customer
State
University
Three-­‐Le?er
Agency
Large
Financial
Exchange
Hundreds
of
Other
Sites
#devopsdays

7. Organizations Can’t Keep Pace
Complexity
Diversity
Volume
Change
One component may
rely on 00s
of others
40,000 Projects
200MM Classes
400K Components
Typical Enterprise
Consumes
000s of
Components Monthly
Typical Component
is Updated 4X
per Year
#devopsdays

8. What’s this
got to do with
DevOps?
Components are used to build applications.
Agile Development is factored into how
DevOps works.
DevOps Success is dependent on
supporting how applications are built today.
DevOps Must Support Component-based Development!
#devopsdays

9. Release Management is Key to DevOps Success
#devopsdays

10. Flaws That Filter Through to Production Can Cripple You
#devopsdays

11. Policies
#devopsdays

12. Automated Policies are Necessary to Keep Up
#devopsdays

13. Guide Developers With Component Intelligence in Their IDE
#devopsdays

14. Support the Build/CI/CD Process With Integrated Intelligence
#devopsdays

15. Shifting Activity Left Eliminates Downstream Impact
It’s More Than Shifting the Testing Effort
Prevent Problems from the beginning to eliminates downstream effort.
Identify Vulnerabilities early to speed development & decrease cost.
Incorporate Security into the design process vs. security as an afterthought.
Remediate Flaws vs. solely focusing on problem identification.
#devopsdays

16. “Prevention is the
Ultimate Form
of Shifting Left”
Curtis Yanko
Architecture Manager – Application
Development & Delivery Services
#devopsdays

17. DevOps : A Natural Way to Assimilate Other Disciplines
Respect & Trust
CULTURE
Shared Information
#devopsdays
Problem Solving

18. Add “Sec” to DevOps
DEV
SECURITY
OPS
QUALITY
#devopsdays

19. Overwhelmed? Consider these Questions
Can we build an accurate inventory of our
open source application components?
What applications are placing our
business at risk?
#devopsdays

20. Let Me Know if You Need Help!
If you want advice on how to get started, please
talk to me during DevOpsDays, or contact me
anytime…
Manfred Moser
manfred@sonatype.com
@simpligility
#devopsdays