Founder, Cloud Security Architect
Ovidiu is a cybersecurity enthusiast with over 16 years of experience in the field of IT, working with Go, Big Data, Python and Linux. He wore many hats throughout the years, being at first a Software Developer, then a Software Security Engineer and before creating his own company (https://cyscale.com/), he was also responsible of the entire Security Department for an Industrial IoT Analytics, Insights and Predictive Maintenance company. Ovidiu is also speaker on national and international conferences covering different topics Cybersecurity and is not stranger to the pro-bono work, being in charge of running the Open Web Application Security Project® (OWASP) Chapter in Cluj-Napoca. As if that was not enough, Ovidiu is also father of three.
Workshop – Minimum Secure SDLC
The goal of the workshop
The goal is to get an initial overview on what Secure SDLC (Software Development Life Cycle) is and how should a minimum setup look like for you or your organization. There are at least a few ways to configure SDLC, and in this workshop we will try to use both cloud-native and self-maintained setups.
What will we do in this workshop?
You will prepare a demo cloud environment to test the setup. You will be creating a Gitlab/Github account (if you don’t have it already), configure CI/CD pipelines to inject security checks and controls in these processes.
You are in the target of the audience if you:
You should be:
- familiar with basic cloud computing and public cloud service providers such as AWS, GCP, or Azure.
- comfortable with writing or copying some source code and work with it in a source code versioning system such as git.
- eager to see how easy a minimum SDLC can be added to your daily workflow
What will you learn at the end:
At the end of the workshop, you will feel more comfortable that the code and applications you are producing are going to be more secure than before. You will also learn that the sooner you embed security into your CI/CD, the better and less costlier it will be on the long-run.
What tools do you need installed on your computer before the workshop starts
- git command line
- Visual Studio Code (or another IDE)
- public cloud service provider account (AWS, GCP, or Azure will work, but also Digital Ocean or Linode, etc.)
- I like pen & paper to take notes
In case you register for this workshop and you need info regarding tools, let us know, either by email or on Facebook Messenger.