The road to software architecture evolution is paved with ...€¦ · The road to software...
Transcript of The road to software architecture evolution is paved with ...€¦ · The road to software...
![Page 1: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/1.jpg)
The road to software architecture evolution is paved with DevSecOps
Matina Tsavli / Security System Architect NOKIA TAS
29/03/2019
![Page 2: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/2.jpg)
Security System Architect NOKIA Telephony Application Server
• 10 years experience in IT, specialized in security
• ISO 27001 ISMS Lead Auditor, TUV Nord
• Certified Ethical Hacker, EC Council
• Cobit 5 Foundation Course, ISACA
©2019 Nokia Public
• Computer Engineering, Telecoms & Networks, MSc• Security of Digital Systems, MSc• Telecoms, MBA
www.linkedin.com/in/matina-tsavli
![Page 3: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/3.jpg)
Outline
▪ Software Architecture Evolution
▪ #catchy_tech_buzzwords
▪ DfSEC & DevSecOps
©2019 Nokia Public
![Page 4: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/4.jpg)
Software Architecture Evolution
©2019 Nokia Public
![Page 5: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/5.jpg)
Monolithic / SOA / Microservices
System Architecture Evolution
©2019 Nokia Public
![Page 6: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/6.jpg)
Dark Ages
Virtualization Era
Docker Containers
Monolithic Cloud-native
History from infrastructure standpoint
System Architecture Evolution
©2019 Nokia Public
![Page 7: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/7.jpg)
#catchy_tech_buzzwords
©2019 Nokia Public
![Page 8: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/8.jpg)
focuses on
processes
highlighting
change
while accelerating
delivery
focuses on
Software-defined life cycles
highlighting
tools
that emphasize
automation
focuses on
culture
highlighting
roles
that emphasize
responsiveness
Taking the extra mile
Agile vs. CI/CD vs. DevOps
©2019 Nokia Public
![Page 9: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/9.jpg)
@hijinksensue
@petecheslock
Early DevOps workflows…
DevSecOps
©2019 Nokia Public
![Page 10: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/10.jpg)
Example: Feature on top of feature
DevSecOps
©2019 Nokia Public
![Page 11: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/11.jpg)
Example: feature on top…
DevSecOps
©2019 Nokia Public
![Page 12: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/12.jpg)
NOKIA TAS Architecture
Scheduling & Orchestration with Kubernetes
©2019 Nokia Public
![Page 13: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/13.jpg)
DevOps in NOKIA
©2019 Nokia Public
Tools
![Page 14: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/14.jpg)
Gitlab CI/CD
DevOps in action
©2019 Nokia Public
![Page 15: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/15.jpg)
Mocking the ENV
DevOps and Testing
©2019 Nokia Public
![Page 16: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/16.jpg)
DfSEC & DevSecOps
©2019 Nokia Public
![Page 17: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/17.jpg)
Privacy Risk Assessments
Privacy Respecting Design
Privacy Documentation
Security Requirements
Security Hardening
Product Security Compliance
Security Architecture
Secure Coding
Threat & Risk Analysis Assessment
Security Design
Security Vulnerability Monitoring
Security Testing Security Auditing
DfSEC
Security Lifecycle
Security by Design
©2019 Nokia Public
![Page 18: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/18.jpg)
Audit-runner
Security Culture
©2019 Nokia Public
Shift Left Methodology
A tool designed to provide security hardening audit checks in containerized environments
• Short execution time• Platform & application independent• On commit basis, shift left• Compliance measurements• Aggregated results in HTML• Simple API
Initiative of Athens R&D
Shares our passion for DevSecOps practises
![Page 19: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/19.jpg)
Audit-Runner
DevSecOps workflow in NTAS
©2019 Nokia Public
AUDIT
![Page 20: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/20.jpg)
Audit-Runner
DevSecOps workflow in NTAS
©2019 Nokia Public
![Page 21: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/21.jpg)
Thank you
©2019 Nokia Public
![Page 22: The road to software architecture evolution is paved with ...€¦ · The road to software architecture evolution is paved with DevSecOps Matina Tsavli / Security System Architect](https://reader036.fdocuments.in/reader036/viewer/2022062506/5ee34954ad6a402d666d4127/html5/thumbnails/22.jpg)
©2019 Nokia Public