Build Systems that Drive Business
30–31 Oct 2018: Training
31 Oct–2 Nov 2018: Tutorials & Conference
London, UK

Schedule: Building Secure Systems sessions

Security can no longer be a bolt-on at the end of projects. This track explores how to incorporate security best practices into your system architecture from the ground up into every layer of your applications.

Track host

Erik St. MartinErik St. Martin (Microsoft) curiosity of computers began in his early childhood years playing on a family member's Macintosh SE. He was too young to understand the world of programming then, but it was enough to peak his interest. In his teen years the internet became very popular and he was infatuated with the concept of building his own websites, and like all teenage computer geeks the thrill of "learning to hack". He cut his teeth building his own websites and learned to program by modifying open-source forum software in Perl and PHP, and running his own Counter-Strike servers. Before he knew it he was being offered money to program as a profession. He has been in the open-source and Linux world ever since.

Add to your personal schedule
14:0017:30 Wednesday, 31 October 2018
Location: King's Suite - Balmoral Level: Intermediate
Secondary topics:  Systems Architecture & Infrastructure
Mandi Walls (Chef)
This workshop will cover the basics of working with and creating comprehensive security and compliance profiles with InSpec. Read more.
Add to your personal schedule
11:2012:00 Friday, 2 November 2018
Location: Park Suite (St. James / Regents) Level: Beginner
Secondary topics:  Resilient, Performant & Secure Distributed Systems
Liz Rice (Aqua Security)
Beyond looking out for a little green padlock in the browser bar, what do you need to know about secure connections as a programmer? What do people mean by terms like authentication, verifying a certificate, or signing a message? This talk aims to demystify HTTPS, TLS, X.509 and more! Read more.
Add to your personal schedule
13:1513:55 Friday, 2 November 2018
Location: Park Suite (St. James / Regents) Level: Beginner
Elisa Heymann (University of Wisconsin-Madison), Bart Miller (University of Wisconsin-Madison)
Elisa Heymann and Bart Miller explain how they performed an in-depth assessment of software controlling maritime container shipping, exposing opportunities for an attacker to smuggle goods or divert shipments and even damage personnel and ships. Read more.
Add to your personal schedule
15:4016:20 Friday, 2 November 2018
Location: Park Suite (St. James / Regents) Level: Intermediate
Secondary topics:  Systems Architecture & Infrastructure
Sabree Blackmon (Scytale)
This talk introduces the SPIFFE and SPIRE projects, which provide an open standard and toolchain for trusted communication in modern cloud computing environments, and how they are being used as a foundation for other infrastructure tools including Hashicorp Vault, Lyft's Envoy and Istio. Read more.
Add to your personal schedule
16:3517:15 Friday, 2 November 2018
Location: Park Suite (St. James / Regents) Level: Beginner
Secondary topics:  Resilient, Performant & Secure Distributed Systems
Jermila Paul Dhas (Financial Times)
This talk is about how at The Financial Times, the Cloud Enablement team who are responsible for equipping the delivery teams with their own AWS account proactively validates the security and compliance of the FT's entire cloud estate. Read more.