are run, used, and tested”Who said it?Frederick Brooks Jr. • Joined IBM in 1956 • Manager for the development of the IBM System/360 family of computers and the OS/360 software package • In 1975

CVE-2015-3337 [任意⽂件读取] 未授权访问,敏感信息泄露 RabbitMQ 弱⼝令 Glassfish 任意⽂件读取 [ 低版本 ] 控制台弱⼝令,部署webshell IBM Websphere Java 反序列化 控制台弱⼝令,部署webshell Axis2 任意⽂件读取 ⽬录遍历 Apache ActiveMQ 未授权访问,5.12 之前的版本

Delivery blog by Scott Ambler and Mark Lines  Agile Management by Version One  Scott Ambler's IBM Blog  Leading Answers Blog  Effective Practices for Software Solution Delivery by Scott Ambler

INTERNAL OR RESTRICTED, ALL RIGHTS RESERVED © 北京快猫星云科技有限公司 六分科技——国内领先的⾼精定位服务产品专业提供商 http://flashcat.cloud/blog/liufen/ 痛点： 1. 监控⼯具太多，维护和使⽤都很麻烦 2. 缺少业务维度的监控 3. 缺乏统⼀的稳定性视图，缺乏故障定位的驾驶舱 效果： 1. 通过Flashcat平 北京快猫星云科技有限公司 INTERNAL OR RESTRICTED, ALL RIGHTS RESERVED © 北京快猫星云科技有限公司 某国内领先的医疗⼤健康产业集团 http://flashcat.cloud/blog/case-flashcat-in-medicine-company/ 痛点： 1. 故障发现慢，主要依赖⽤户保障 2. 缺乏基于业务视⻆的全链路监控，故障定位耗时较⻓ 3. 缺乏对重要故障场景的应急预案的梳理和演练 北京快猫星云科技有限公司 北京快猫星云科技有限公司 © 北京快猫星云科技有限公司 企业版 vs. 开源版 更详细对⽐请访问 https://flashcat.cloud/docs 开源监控引领者 故障定位真帮⼿ 访问 www.flashcat.cloud 了解更多

tests for appropriate settings and use the tests to scan environments for vulnerabilities iii. 18F Cloud.gov (uses AWS GovCloud – 1. Created platform addressing bulk of compliance concerns driven by ATO AWS – auditors traditional training of sampling with screenshot evidence doesn’t really work in cloud, container or similar environments with infrastructure-as-code and auto- scaling. Must create alternatives

%20DevSecOps%20Reference%20Design.pdfContainerized Software Factory Reference DesignSoftware Factory using Cloud DevSecOps Services Sidecar Container Security Stack Sidecar Container Security Stack enables: correlated