Software Engineering Institute

May 25, 2023—The SEI recently released presentations, graphic recordings, and videos from DevSecOps Days Pittsburgh 2023. The virtual conference about integrating security into DevOps practices took place May 11. The presentation slides and graphic recordings are available in the SEI Digital Library, and videos are available on YouTube.

DevSecOps practitioners presented a variety of topics on integrating security into their teams and automating security within the entire developer and production pipeline:

• web security at early-stage startups
• automating DevSecOps tasks
• securing the Internet of Things supply chain
• engineering survivable systems
• building secure environments for capture-the-flag competitions
• implementing quantum-resistant cryptography in industry
• building, provisioning, and deploying Common Vulnerabilities and Exposure’s (CVE) infrastructure and services

Kate Stewart, vice president of dependable embedded systems at the Linux Foundation, gave a keynote presentation on how to leverage the Software Package Data Exchange (SPDX) software bill of materials (SBOM) data to improve system automation and provide confidence that the necessary retesting and analysis will satisfy safety profiles.

Nabor Felix Cortez, U.S. Air Force engineering supervisor, led a keynote panel that discussed the rigor and complication of DevSecOps designed for embedded development and how to overcome this time-consuming problem.

DevSecOps Days Pittsburgh is part of a series of global one- and two-day conferences helping to educate practitioners and evolve and explore concepts around developing security as code. The DevSecOps Days Community, a group of international volunteers that provide a central hub of DevSecOps resources, coordinates the series and has partnered with the Software Engineering Institute on two DevSecOps Days this year: the Pittsburgh event and an in-person event to be held in Washington, D.C., on October 12. Registration for the Washington, D.C., event is now open.

Access the DevSecOps Days Pittsburgh 2023 slides and graphic recordings in the SEI Digital Library, and watch the presentation videos on YouTube. For more information on DevSecOps Days, including videos and presentations from past events, visit the event website.