Welcome!

Microservices Expo Authors: Liz McMillan, Elizabeth White, Pat Romanski, Stackify Blog, Andreas Grabner

Related Topics: Wearables, @CloudExpo, @DevOpsSummit

Wearables: Blog Post

Survey Says DevOps Maturing Rapidly | @DevOpsSUMMIT @Sonatype @CloudBees #DevOps #DevSecOps #Serverless #Kubernetes

The survey showed that 28 percent of all organizations have adopted “very mature” DevOps practices

CloudBees, the enterprise DevOps leader powering the continuous economy, along with survey lead Sonatype, announced the results of the 6th annual DevSecOps Community Survey today. While DevOps practices are maturing rapidly, corporate application security initiatives are only gradually gaining traction, according to a survey released today by Sonatype, CloudBees, Carnegie Mellon's Software Engineering Institute and several other partners. The 2019 DevSecOps Community Survey of 5,558 IT professionals also found that organizations with elite DevSecOps programs are outperforming others in terms of DevOps automation, open source controls, container controls, training and cybersecurity preparedness. The 6th annual DevSecOps Community Survey was led by Sonatype with CloudBees as a major sponsor.

The survey showed that 28 percent of all organizations have adopted "very mature" DevOps practices, company-wide or in pockets, up slightly from 25 percent in 2018. Another 49 percent reported their DevOps practices as "improving." Overall, 95 percent of respondents say their organizations are using advanced development processes - agile, DevOps and/or continuous integration/continuous delivery (CI/CD) - with the remainder clinging to legacy waterfall development methods. Deployments are also getting more frequent - with 9 percent saying they deploy with every change and 65 percent deploying at least once per week.

"The clear increase in adoption of modern development practices of Agile, CD and DevOps signifies important progress in the software delivery space," said Brian Dawson, DevOps evangelist, CloudBees. "These practices are the foundation for the wider adoption of DevSecOps practices and a security-first mindset. Software is intertwined in the very fabric of our business and personal lives, making it critical that we continuously secure software by automating key security practices into the development and delivery pipeline. There's still a lot of work to do to get to DevSecOps but, as an industry, we are making progress."

The survey showed mixed levels of progress on the security front. Overall, only 54 percent of respondents said their organizations have cybersecurity incident response plans in place - the same as 2018. More than a quarter (26 percent) have no protections for confidential information like passwords and API keys. And security tools are still not well integrated with the DevOps pipeline: 11 percent are fully integrated and automated, while 75 percent are not or are only partially integrated.

Breaches are still happening, but they're becoming less frequent. Seventeen percent of respondents said their companies experienced a breach definitely or possibly tied to a web application vulnerability in the past year - down from one third a year ago.

Developers themselves seem to want to get more involved in the application security (appsec) process. Based on the survey, 28 percent were fully focused on appsec, and another 46 percent want to be but are too busy. To get up to speed they'd need training - but 17 percent of survey takers said their companies have no appsec training available.

Meanwhile, organizations that have developed "elite" practices are outperforming peers in several areas. For example, in DevOps automation, elite DevSecOps practices are six times more likely to have fully integrated and automated security practices across the DevOps pipeline than their less mature peers. In open source controls, 62 percent with elite programs have an open source governance policy in place, and follow it, compared to just a quarter of those without DevOps practices. For container controls, 51 percent of respondents with elite practices say they leverage security products to identify vulnerabilities in containers, while only 16 percent of those without said the same thing.

Cloud-Native thinking and Serverless Computing are now the norm in financial services, manufacturing, telco, healthcare, transportation, energy, media, entertainment, retail and other consumer industries, as well as the public sector.

The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time to wait for long development cycles that produce software that is obsolete at launch. DevOps may be disruptive, but it is essential.

DevOpsSUMMIT at CloudEXPO expands the DevOps community, enable a wide sharing of knowledge, and educate delegates and technology providers alike. Recent research has shown that DevOps dramatically reduces development time, the amount of enterprise IT professionals put out fires, and support time generally. Time spent on infrastructure development is significantly increased, and DevOps practitioners report more software releases and higher quality. Sponsors of DevOpsSUMMIT at CloudEXPO will benefit from unmatched branding, profile building and lead generation opportunities.

Sponsorship & Exhibit Opportunities ▸ Here

Register Today and SAVE ▸ Here

Speaking Opportunities ▸ Here

Silicon Valley Faculty ▸ Here

Silicon Valley Schedule ▸ Here

At CloudEXPO Silicon Valley, June 24-26, 2019, Digital Transformation (DX) is a major focus with expanded DevOpsSUMMIT and FinTechEXPO programs within the DXWorldEXPO agenda. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term. A total of 88% of Fortune 500 companies from a generation ago are now out of business. Only 12% still survive. Similar percentages are found throughout enterprises of all sizes.

ServerlessSUMMIT at CloudEXPO to Present 50 Rockstar Speakers and 60 Serverless and Kubernetes Sessions in Three Simultaneous Tracks

Register Today and SAVE ▸ Here

Speaking Opportunities ▸ Here

Silicon Valley Faculty ▸ Here

Silicon Valley Schedule ▸ Here

This month @nodexl announced that ServerlessSUMMITDevOpsSUMMIT own the world's top three most influential Kubernetes domains which are more influential than LinkedIn, Twitter, YouTube, Medium, Infoworld and Microsoft combined.

ServerlessSUMMIT at CloudEXPO to present 50 rockstar speakers, 60 sessions in three simultaneous tracks. Call for Papers Here.

The three-day event will take place June 24-26, 2019 at the Santa Clara Convention Center, Santa Clara, CA and will be colocated with CloudEXPO Silicon Valley!

Today we have announced our first 12 sessions. We are accepting speaking submissions for ServerlessSUMMIT through Friday, February 8th.

Our CloudEXPO Silicon Valley 2019 schedule showcases 200 presentations, including keynotes, technical sessions, general sessions, power panels, and hands-on tutorials presented by 150 rockstar speakers in the 10 hottest conference tracks of 2019. We are excited to add the ServerlessSUMMIT to this lineup!

Cloud-Native thinking and Serverless Computing are now the norm in financial services, manufacturing, telco, healthcare, transportation, energy, media, entertainment, retail and other consumer industries, as well as the public sector.

The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time to wait for long development cycles that produce software that is obsolete at launch. DevOps may be disruptive, but it is essential.

As they do so, IT professionals are also embracing the reality of Serverless architectures, which are critical to developing and operating real-time applications and services. Serverless is particularly important as enterprises of all sizes develop and deploy Internet of Things (IoT) initiatives.

Serverless and Kubernetes are great examples of continuous, rapid pace of change in enterprise IT. They also raise a number of critical issues and questions about employee training, development processes, and operational metrics.

The Most Popular 20 Cloud-Native, Serverless and Kubernetes Speakers and Sessions at ServerlessSUMMIT Silicon Valley

Monta Vista Ventures Presentation:

AIOps Disruption for Cloud, IT and SaaS - Muddu Sudhakar

Red Hat Kubernetes Track:

Securing Applications and Pipelines on a Container Platform - Veer Muchandi

Red Hat Kubernetes Track:

Service Mesh with Enhanced Observability and Traceability - Veer Muchandi

Red Hat Kubernetes Track:

Container Technologies - Impact on Enterprises - Veer Muchand

IBM Kubernetes Presentation:

Hybrid Container Serverless Mobile Backend - Marek Sadowski

Rapidvalue Solutions Session:

Serverless Architecture on AWS - Avinash Thakur

Red Hat Kubernetes Track:

Continuous Security with Kubernetes - Chris Van Tuin

Intel Kubernetes Session:

How to Better Manage Your Cloud Infrastructure - Rami Radi

Microsoft Azure Track:

Docker on Azure Hands-On Lab - Docker to Helm - Rags Srinivas

Microsoft Azure Track:

Policy Driven Enterprise Security For Kubernetes - Dave Strebel

jFrog Kubernetes Session:

Building a Kubernetes Powered Central Go Modules Repository - Leon Stigter

Platform9 Kubernetes Session:

Serverless Applications You Can Implement Today: 3 Key Use Cases and Design Patterns - Vamsi Chemitiganti

Data Theorem Session:

Serverless Applications vs Apps Built in Docker Containers - Doug Dooley

SUSE Serverless Track:

OpenStack and Kubernetes Get the Heat Treatment - Cameron Seader

Capgemini Serverless Session:

Microservices Implementation at Scale - Rishi Singh

Red Hat Kubernetes Track:

Containers: Don't Skeu Them Up. Use Microservices Instead - Gordon Haff

WSO2 Kubernetes Session:

Cloud Native Programming with Docker, Kubernetes, and Ballerina - Lakmal Warusawithana

Buoyant Linkerd Session:

Microservice Forensics: Investigating Problems in Production - Thomas Rampelberg

Palo Alto Networks Containers Session:

Shift Left Security In a Containerized World - Gunjan Patel

Palo Alto Networks Containers Session:

Container Security Best Practices - Gunjan Patel

DevOpsSUMMIT at CloudEXPO Celebrates Its 12th Event in Six Years

ServerlessSUMMIT and DevOpsSUMMIT at CloudEXPO expands the DevOps community, enable a wide sharing of knowledge, and educate delegates and technology providers alike.

There's a real need for serious conversations about Serverless and Kubernetes among the people who are doing this work and managing it.

So we are very pleased today to announce the ServerlessSUMMIT at CloudEXPO.

At CloudEXPO Silicon Valley, June 24-26, 2019, Digital Transformation (DX) is a major focus with expanded DevOpsSUMMIT and FinTechEXPO programs within the DXWorldEXPO agenda. Successful transformation requires a laser focus on being data-driven and on using all the tools available that enable transformation if they plan to survive over the long term. A total of 88% of Fortune 500 companies from a generation ago are now out of business. Only 12% still survive. Similar percentages are found throughout enterprises of all sizes.

CloudEXPO Has Been the M&A Capital For Cloud Companies For More Than a Decade

CloudEXPO has been the M&A capital for Cloud companies for more than a decade with memorable acquisition news stories which came out of CloudEXPO expo floor. DevOpsSUMMIT New York faculty member Greg Bledsoe shared his views on IBM's Red Hat acquisition live from NASDAQ floor. Acquisition news was announced during CloudEXPO New York which took place November 12-13, 2019 in New York City.

Our Silicon Valley 2019 schedule will showcase 200 keynotes, sessions, general sessions, power panels, and hands on tutorials presented by 150 rockstar speakers in 10 hottest conference tracks of 2019:

» CloudEXPO
» DevOpsSUMMIT
» ServerlessSUMMIT
» Kubernetes at CloudEXPO
» FinTechEXPO Blockchain
» DXWorldEXPO Digital Transformation
» AI | ML | DL | Artificial Intelligence
» Big Data | Analytics
» IoT | IIoT | Smart Cities
» Mobility | Security
» Enterprise Cloud Hot Topics

Sponsorship and Exhibit Opportunities at CloudEXPO Silicon Valley, June 24-26, 2019, Santa Clara Convention Center, Santa Clara, CA

CloudEXPO Silicon Valley 2019 Show Prospectus ▸ HERE

Prospectus At-a-Glance ▸ HERE
Attendee Profile ▸ HERE
Keynote Opportunities ▸ HERE
General Session Opportunities ▸ HERE
Diamond Sponsorship Opportunity ▸ HERE
Platinum Sponsorship Opportunity ▸ HERE
Gold and Silver Sponsorship Opportunities ▸ HERE
Bronze Sponsorship and Exhibitor Packages ▸ HERE
Benefits of Exhibiting at CloudEXPO 2019 ▸ HERE

CloudEXPO is the single event where technology buyers and vendors meet to experience and discus cloud computing and all that it entails. For more than a decade, sponsors and exhibitors of CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities through our following unique tools. For more information on sponsorship, exhibit, and keynote opportunities call us at 954 242-0444 or contact us ▸ Here

  • Featured on-site presentation and ongoing on-demand webcast exposure to a captive audience of industry decision-makers
  • Showcase exhibition during our new extended dedicated expo hours
  • Breakout Session Priority scheduling for Sponsors that have been guaranteed a 40-minute technical session
  • Online advertising on 4,5 million article pages in SYS-CON's leading i-Technology Publications
  • Capitalize on our Comprehensive Marketing efforts leading up to the show with print mailings, e-newsletters and extensive online media coverage
  • Unprecedented PR Coverage: Unmatched editorial coverage on Cloud Computing Journal
  • Tweetup to over 184,000 plus Twitter followers
  • Press releases sent on major wire services to over 500 industry analysts

About DXWorldEXPO LLC

DXWorldEXPO LLC is a Lighthouse Point, Florida-based trade show company and the creator of DXWorldEXPO - Digital Transformation Conference & Expo. The company produces and presents the world's most influential technology events including CloudEXPO, DevOpsSUMMIT, and FinTechEXPO.

More Stories By Pat Romanski

News Desk compiles and publishes breaking news stories, press releases and latest news articles as they happen.

Microservices Articles
Is advanced scheduling in Kubernetes achievable?Yes, however, how do you properly accommodate every real-life scenario that a Kubernetes user might encounter? How do you leverage advanced scheduling techniques to shape and describe each scenario in easy-to-use rules and configurations? In his session at @DevOpsSummit at 21st Cloud Expo, Oleg Chunikhin, CTO at Kublr, answered these questions and demonstrated techniques for implementing advanced scheduling. For example, using spot instances and co...
SYS-CON Events announced today the Kubernetes and Google Container Engine Workshop, being held November 3, 2016, in conjunction with @DevOpsSummit at 19th Cloud Expo at the Santa Clara Convention Center in Santa Clara, CA. This workshop led by Sebastian Scheele introduces participants to Kubernetes and Google Container Engine (GKE). Through a combination of instructor-led presentations, demonstrations, and hands-on labs, students learn the key concepts and practices for deploying and maintainin...
Skeuomorphism usually means retaining existing design cues in something new that doesn’t actually need them. However, the concept of skeuomorphism can be thought of as relating more broadly to applying existing patterns to new technologies that, in fact, cry out for new approaches. In his session at DevOps Summit, Gordon Haff, Senior Cloud Strategy Marketing and Evangelism Manager at Red Hat, discussed why containers should be paired with new architectural practices such as microservices rathe...
Docker is sweeping across startups and enterprises alike, changing the way we build and ship applications. It's the most prominent and widely known software container platform, and it's particularly useful for eliminating common challenges when collaborating on code (like the "it works on my machine" phenomenon that most devs know all too well). With Docker, you can run and manage apps side-by-side - in isolated containers - resulting in better compute density. It's something that many developer...
In his session at 20th Cloud Expo, Mike Johnston, an infrastructure engineer at Supergiant.io, will discuss how to use Kubernetes to setup a SaaS infrastructure for your business. Mike Johnston is an infrastructure engineer at Supergiant.io with over 12 years of experience designing, deploying, and maintaining server and workstation infrastructure at all scales. He has experience with brick and mortar data centers as well as cloud providers like Digital Ocean, Amazon Web Services, and Rackspace....
Modern software design has fundamentally changed how we manage applications, causing many to turn to containers as the new virtual machine for resource management. As container adoption grows beyond stateless applications to stateful workloads, the need for persistent storage is foundational - something customers routinely cite as a top pain point. In his session at @DevOpsSummit at 21st Cloud Expo, Bill Borsari, Head of Systems Engineering at Datera, explored how organizations can reap the bene...
As software becomes more and more complex, we, as software developers, have been splitting up our code into smaller and smaller components. This is also true for the environment in which we run our code: going from bare metal, to VMs to the modern-day Cloud Native world of containers, schedulers and micro services. While we have figured out how to run containerized applications in the cloud using schedulers, we've yet to come up with a good solution to bridge the gap between getting your contain...
In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, discussed how Dice leverages data insights and tools to help both tech professionals and recruiters better understand how skills relate to each other and which skills are in high demand using interactive visualizations and salary indicator tools to maximize earning potential. Manish Dixit is VP of Product and Engineering at Dice. As the leader of the Product, Engineering and Data Sciences team at D...
DevOps is speeding towards the IT world like a freight train and the hype around it is deafening. There is no reason to be afraid of this change as it is the natural reaction to the agile movement that revolutionized development just a few years ago. By definition, DevOps is the natural alignment of IT performance to business profitability. The relevance of this has yet to be quantified but it has been suggested that the route to the CEO’s chair will come from the IT leaders that successfully ma...
Skeuomorphism usually means retaining existing design cues in something new that doesn’t actually need them. However, the concept of skeuomorphism can be thought of as relating more broadly to applying existing patterns to new technologies that, in fact, cry out for new approaches. In his session at DevOps Summit, Gordon Haff, Senior Cloud Strategy Marketing and Evangelism Manager at Red Hat, will discuss why containers should be paired with new architectural practices such as microservices ra...