DevOps World | Jenkins World 2019 San Francisco

"The number one cause of cloud data breaches is infrastructure misconfiguration, whether due to human error, a lack of policy controls in CI/CD pipelines or bad actors. Modern cloud threats use automation to find and exploit these misconfiguration vulnerabilities before traditional scan and alert tools can identify them. Security teams that rely on manual remediation tactics are always reacting, and at a disadvantage. In order to become more proactive and prevent these threats from doing any damage, an organization needs to simulate real-world misconfigurations to identify security gaps before they are exploited. Netflix introduced chaos engineering as a means of stress testing their cloud infrastructure against a variety of unpredictable cloud events, such as a loss of cloud resources or entire regions. This enabled Netflix to create highly resilient infrastructure environments and ensure reliable application delivery. This session will apply Netflix's chaos engineering approaches to cloud security. We'll cover common cloud infrastructure misconfigurations that put data at risk and how to use automation to fix them. Attendees will see a live demonstration of: *How to use chaos engineering to attack the security posture of a cloud environment via intentional misconfiguration. * How different tools and methods for cloud infrastructure security stand up to these misconfiguration attacks. The audience will gain a practical understanding of how to: * Deploy chaos engineering against their own test cloud environments to measure cloud security resilience using Mean Time to Remediation (MTTR). * Evaluate and use different tools to automatically remediate misconfiguration without human intervention. * Identify critical cloud resources in order to prioritize their security efforts. * Build security collaboration between security, application teams and operations to decrease risk while increasing speed of innovation."

"One of the biggest problems within UI-based test automation is maintenance. A lot of effort is spent on maintaining the tests than writing actual tests. Indeed, a recent study suggested about 30% of testers' time is spent on maintenance. This leads to loss of valuable time and effort by teams which would be better spent on exploring the actual application. This problem of maintenance is not something new and has existed for the past several decades. There have been many tools, frameworks and approaches that to try and solve this problem but none have been successful till now. It's why UI-based test automation is looked upon with high skepticism. Artificial intelligence (AI) helps to analyze the DOM in real time and extract multiple attributes for each and every element a user interacts with in an application instead of just one attribute like current existing frameworks. Even when an element attribute changes, the tests do not immediately fail. Rather, AI chooses from the list of already extracted attributes to successfully locate the element. This strategy is called Dynamic Location Strategy and represents the future of UI-based test automation. In this talk, I will cover the basics of AI, discuss the current problems with UI based test automation and perform live demos of how AI-based dynamic locators. This session will show you how AI makes your tests more resilient to change, and in turn, helps build smarter, stable and much faster tests. Finally, I will cover the future of AI-based testing."