DeveloperWeek 2023

Kiran Kamity, Founder & CEO, Deepfactor

Whether we like it or not, security is now a critical part of delivering quality code and applications – just as important as functionality, performance, and reliability. The data breaches caused by supply chain security attacks, the zero day vulnerabilities discovered in open source components like Log4J or Spring4Shell, are now regular occurrences. DevSecOps and shift left projects are making progress with engineering teams but the toolchain and processes rarely provide a developer-friendly experience that empowers them to find and fix vulnerabilities efficiently.

In this keynote, Deepfactor CEO and Founder Kiran Kamity will share developer security principles and real-world best practices that will help engineering teams reduce risk, improve release velocity, and save engineering time and resources. The talk will include engineering team strategies to deal with common challenges faced in DevSecOps programs:

Alert fatigue - prioritizing vulnerabilities reducing the volume of alerts by correlating runtime usage

Lack of actionability around remediation Information - giving developers the context and remediation information in their security alerts to eliminate additional research.

Tool sprawl - consolidating, automating, and integrating security into existing toolchains

Lack of developer security training - provide developers with guidance and training information that is relevant to their code on a regular basis.

Lack of security testing by QA teams - provide QA teams to test for security bugs and fixes just like how they test functionality or performance bugs.