DeveloperWeek 2025: Full Schedule

arrow_back View All Dates

4:00pm PST

PRO WORKSHOP: The Dark Side of Open Source Productivity

Tuesday February 11, 2025 4:00pm - 4:50pm PST

Derek Francour, Endor Labs, Solutions

There is a dark side to productivity with open source. In modern applications, the majority of code on which an application is built isn’t code written by your team. Modern applications are built on the backs of volunteer communities and open-source software. These volunteers and their software delivery practices all become potential attack vectors. The truth is that most organizations do not factor open-source supply chain attacks into their organization’s threat models today. Security incidents such as the CodeCov bash uploader script, the npm colors, and faker intentionally introduced malicious commits, and the recent PyPi backdoors targeting AWS credentials highlight the impact of supply chain attacks as a scalable attack pattern. To spread awareness on supply chain attacks so that organizations can scalably handle them we propose baking supply chain attacks into existing threat modeling procedures and software development culture so that organizations can champion supply chain management of open source in the places where they are most impactful, at development time. We will present a comprehensive, comprehensible, and technology-agnostic taxonomy of attack vectors, created on the basis of hundreds of real-world incidents and validated by experts in the domain. Following, we will discuss the types of defenses you can put in place to detect and respond to such modern day attacks and how you can work these defenses in based on your program’s maturity.

Speakers

Derek Francour

Solutions, Endor Labs

As a Solutions Architect at Endor Labs, Derek Francour helps teams implement application security programs that don't slow down developers and make upgrading open source dependencies easier. Previously, Derek worked in Healthcare IT as a full-stack web developer and solutions engineer... Read More →

Tuesday February 11, 2025 4:00pm - 4:50pm PST
DeveloperWeek PRO Stage

Cloud Native World

Tracks & Topics Enterprise
Session Type PRO Workshop Day (Tues)
Conferences OpsWorld, Cloud Native World
In-Person/Virtual In Person

5:00pm PST

PRO WORKSHOP: Crypto-secure Data Management with In-Database Blockchain

Tuesday February 11, 2025 5:00pm - 5:25pm PST

DeveloperWeek PRO Stage

Mark Rakhmilevich, Oracle, Vice President, Product Management, Mission-Critical and Blockchain Technologies

Existing security mechanisms are designed to keep hackers out. However, they have unavoidable vulnerabilities - chiefly due to human weaknesses (e.g., phishing attacks). We cannot prevent these break-in's, but we can minimize their impact by making critical data tamper-proof by using blockchain technologies.

Conventional blockchain systems, however, have been very difficult to use because of the requirement for new programming languages, tools, and workflow processes. This is changing as blockchain features are being incorporated in general-purpose databases. This makes it possible to implement blockchain in mainstream enterprise and government applications with minimal application changes.

This talk will begin by introducing the threats posed by hackers and compromised insiders. Then we will describe an implementation of in-database blockchain and how it can protect your data against these threats. We will compare this against conventional blockchains as well as share use cases from customers who have adopted this technology.

Speakers

Mark Rakhmilevich

Vice President, Product Management, Mission-Critical and Blockchain Technologies, Oracle

Tuesday February 11, 2025 5:00pm - 5:25pm PST
DeveloperWeek PRO Stage

Cloud Native World

Tracks & Topics Enterprise
Session Type PRO Workshop Day (Tues)
Conferences Cloud Native World
In-Person/Virtual In Person