Faster safer and 100 user centric application at equifax with docker

Jun 20, 20181 like287 views

Equifax faced challenges around software development lifecycles, vulnerability detection, and security. They implemented Docker to improve security, reduce development cycles, and support multiple platforms. Their solution involved Docker Swarm for infrastructure, CI/CD pipelines for builds and deployments, and Dockerized applications including APIs, web apps, and mobile apps. This allowed them to deliver a new product in 3 months with greater transparency, faster deployments, improved security and scaling.

JAYA POLUMURU
Sr. Director of Technology,
Equifax Inc
Faster, Safer and 100% User
Centric Application at
Equifax with Docker

JAYA POLUMURU
Sr. Director of Technology,
Equifax Inc
Docker at Equifax
Kartik Pisharodi
Cloud Systems Developer,
Cloudreach
Docker Infrastructure

- Software Development Lifecycle Challenges
- Track Inventory of Software Packages
- Detect Vulnerabilities
- Reduce Remediation Cycles
- Improve Overall Security Process
- Need for better transparency for all departments
- Deliver a product to help protect our consumers
- WebApp
- Mobile Apps
Facing the Challenge

- Security by Design
- Exposing Vulnerabilities
- Reduction of Attack Surface
- Quicker Development Cycle
- Supported on various infrastructure platforms
Solution Hunting Criteria
n
nt

- Host Level Security
- Infrastructure/Platform Level Security
- Data Security
- Process Security
- Container Security
Layers of Security

- Consistency
- Automation
- Community
- Reusability
- Examples of tools: Sceptre/Terraform/Troposphere
Infrastructure as Code

- Landing Zone / POC
- Docker EE Swarm
Execution Plan

- Learning Curve
- Networking
- Built into Docker EE
Docker Swarm
TEST STAGING
• Signature
verification
• Native encryption
Scanning SigningAutomated
PoliciesDocker for Mac
or
Docker for Windows
PRODUCTION

- Landing Zone / POC
- Docker EE Swarm
- Build & Deploy to Swarm
- Enabling Gates
Execution Plan

- Accountability
- Enforcement Gates
- Security
- Automated CVE checks
- Consistent Building
- Quick Promotion
CI/CD Pipeline

- Landing Zone / POC
- Docker EE Swarm
- Build & Deploy to Swarm (Jenkins)
- Enabling Gates
- Product Delivery
Execution Plan

Dockerized Applications
- API Services (Microservices)
- Lock and Alert WebApp
- CS Agent Portal
- Batch/Offline Jobs
Infrastructure Tools
- New CI/CD Pipeline
- Infrastructure as code
Mobile Apps
- iOS
- Android
What did we build

- Networking
- Mobile App Integration
- Logging
- Scheduled/Offline jobs
- DTR Image Building
- Swarm Stack yaml
Hurdles during Build

Networking Challenge
10.1.2.3/X10.1.2.3/X
10.1.2.21
10.1.2.2110.1.2.20

- Delivered a new product in 3 months
- Greater Transparency at all levels
- Faster deployment cycles
- Quicker detection and remediation cycles
- Rolling Update and Automated Rollback
- Able to scale better
- Built environments using infrastructure-through-code
- Deeper and Wider Metrics capabilities
What we accomplished

- Security is a constant activity
- Improve not just toolset but process and thinking
- Get buy-in from all IT groups
- Faster and secure SDLC
- Developers are more productive
- Focus on product without compromising security
Conclusion

MetLife has adopted a containerization strategy using Docker to modernize its traditional applications. Some key points: - MetLife aims to embrace containers ubiquitously across its portfolio to improve speed, stability, scalability, security and reduce costs. - It has seen success with its strategy, such as a 70% reduction in infrastructure costs and millions of dollars avoided in costs. - MetLife provides training and knowledge sharing programs to help developers and operations teams adopt containers. It also offers services to support customers in piloting, putting early apps into production, and migrating apps at scale to containers.

Don’t have a Meltdown! Practical Steps for Defending Your AppsDocker, Inc.

Security is a key concern for application developers and operations teams, as well as security professionals. Have I done enough? What do I need to do in the face of new threats like Meltdown and Spectre? What happens when the next big issue comes along? What should my priorities be? How do containers help? In this talk we’ll demonstrate some common attacks live, and show how you can effectively defend your container deployment against them, using a combination of best practices, configuration, and tools. Taking inspiration from highlights of the OWASP Top 10, and other high profile exploits and attacks, in this talk we will look at risks and preventative measures related to: - authentication - injection - updates - sensitive data - configuration By the end of the talk you should understand the most important security risks in your applications, and how to go about mitigating them.

Building Your NoSQL Ship: How an Enterprise Transitioned from a RDBMS to NoSQ...Docker, Inc.

How do you bring a NoSQL DB into a production Docker Environment? What are key orchestration challenges? How can you design a portable solution that can lift and shift into any environment? What are pro’s and con’s to containerizing your database? By establishing a set of best practices and proper testing you can ensure that your infrastructure design can be resilient in any global environment. The challenge is identifying what works best for your organization. Disruptive testing and partnering with other teams within your company can ensure success when implementing a global application. In this session you will learn from a member of MetLife’s ModSquad innovation team firsthand what challenges MetLife overcame using a NoSQL DB in a Docker environment. You will learn about key decisions impacting orchestration, availability, database replication, and disaster recovery. Additionally, you will understand key differences in classic and swarm mode and how Kubernetes and Docker teaming up will help your Production Design.

DockerCon 18 Cool Hacks: solo.ioDocker, Inc.

This document discusses the challenges of transitioning between monolithic, microservices, and serverless architectures. It presents several potential solutions to this problem, ultimately advocating for a hybrid approach that allows applications to utilize elements of each architecture. The key benefits of this hybrid app vision are fast delivery of new features, a gradual transition with minimal disruption, and a unified toolset. The document demonstrates this approach using Gloo, an open source project that acts as a layer to connect applications built with different architectures.

DCSF 19 Mitigating Legacy Windows Operating System Vulnerabilities with Docke...Docker, Inc.

Entergy, a large utility company headquartered in New Orleans, LA has launched an initiative to modernize their application infrastructure. During the initial analysis, Entergy recognized the existing legacy infrastructure’s lack of compatibility with more recent operating systems would stand in the way of progress. As a result, containerization was fast-tracked as the solution that can help them with the various tenants of their strategy: hyperconvergence, SaaS (ServiceNow), and workload portability. Docker Enterprise proved to be the right solution to migrate roughly 850 legacy applications from Windows Server 2003 and 2008 to Windows Server 2016 quickly, securely and economically. Entergy IT has now delivered the ability for the business to run applications on-premise, in the cloud, and future-proofed the applications for migration to new versions of Windows Server. In this session, Entergy will talk about how they are modernizing their infrastructure to become more agile, secure, and enable workload portability.

DockerCon EU 2015: Official Repos and Project NautilusDocker, Inc.

Digital Transformation with Docker, Cloud, and DevOps: How JCPenney Handles B...Docker, Inc.

At JCPenney, Black Friday is one of our most critical shopping periods, both in stores and increasingly online. Hundreds of millions of dollars are on the line for us in a narrow shopping window so scaling to handle the traffic and being able to deploy promotions and fix issues without disruption to the website and our business are critical. Our prior way of delivering applications was built on a waterfall model, locked in to a set of ISV vendor dependencies, with rigid silos. It was too slow and expensive to deploy changes and keep pace with our business. We needed an application delivery platform that can handle the scale of Black Friday, and allow us to adapt our systems as our business continues to evolve. In our DockerCon session, we will tell you how we are transforming JCPenney’s omnichannel business with Docker and open solutions like Jenkins, Spring cloud, Netflix OSS and Ansible. We went live in our first iteration in just two months, and then on-boarded over 30 services in the first 6 months. We learned quite a bit along the way and you'll hear why we made an important decision to switch from Docker Community Edition to Docker Enterprise Edition. Our new cloud-native, Dockerized systems handle over 100,000 deployments per year and can scale to handle events like Black Friday with zero issues.

DockerCon EU 2017 - General Session Day 1Docker, Inc.

This document discusses Docker and its container platform. It highlights Docker's momentum in the industry with over 21 million Docker hosts and 24 billion container downloads. The document then summarizes Docker's container platform and how it enables applications across diverse infrastructures and throughout the lifecycle. It also discusses how Docker can help modernize traditional applications and provide portability, agility and security. The remainder of the document focuses on how MetLife leveraged Docker to containerize applications, seeing benefits like a 70% reduction in VMs and 66% reduction in costs. It outlines Docker Enterprise Edition and its value in areas like security, multi-tenancy, policy automation and management capabilities for Swarm and Kubernetes.

Microservices, docker , kubernetes and many moreVishwas N

Microservices architecture organizes applications as loosely connected services that communicate through well-defined APIs. This allows for greater agility, scalability, and fault tolerance compared to monolithic architectures. Docker containers make it easier to deploy and manage microservices. Kubernetes provides tools to automate deployment, scaling, and management of containerized microservices or applications across a cluster of hosts.

DCSF19 Kubernetes Security with OPA Docker, Inc.

The document discusses using Open Policy Agent (OPA) to enforce guardrails and security policies in Kubernetes clusters. It provides examples of sample policies for OPA that restrict which image registries pods can use and prevent conflicting ingress hosts. It also summarizes key features of OPA such as its declarative policy language, sidecar deployment model, and community support from many major companies using it for admission control, authorization, risk management and other use cases.

DockerCon 2017 - General Session Day 1 - Ben GolubDocker, Inc.

The document summarizes the growth of Docker over the past 3 years. It notes that DockerCon attendance grew from 500 attendees in 2014 to 5,500 in 2017. Other growth metrics highlighted include a 77,000% increase in Docker job listings, over 390,000% growth in image pulls, and 12 billion Docker apps deployed. The document discusses how Docker is now used across many industries and how the needs of stakeholders have expanded and diversified. It outlines Docker's current free, open source, and commercial products and services and thanks major contributors, maintainers, and the growing ecosystem and community around Docker.

DCSF 19 Improving the Human Condition with DockerDocker, Inc.

This document discusses how RTI International, a non-profit research institute, uses Docker to help improve various software products and tools. It describes several projects including CFS Analytics, a crime analysis tool; Crosstab Builder, a statistical analysis tool; and Public Health Microsimulations. For each, it explains how Docker helps allow for scalability, platform independence, security, and reproducibility. Overall, it conveys that Docker helps RTI International build reliable software and facilitate scientific analysis to work towards improving conditions for humanity.

Disruption from withinDocker, Inc.

Sharon Frazier and Don Bauer of Franklin American Mortgage Company summarized their company's approach to innovation through a DevOps transformation. They tackled problems by creating a new tool called "Delivery" to manage services using Docker EE. Delivery helped standardize pipelines and images while enabling visibility through monitoring and compliance checks. The team focused on pillars of visibility, simplification, standardization, and experimentation. Currently, Delivery manages over 1,000 containers across many environments and sees continuous improvement.

5 patterns for success for application transformationDocker, Inc.

Legacy apps weren't designed to run in a modern distributed platform like Docker. They have their own ideas about logging, configuration and health which don't translate to the world of containers and make transformation projects hard. This session shows you how to bring your old apps into the modern world, and integrate them with Docker - without changing code. We'll cover patterns for all the core application concerns: * logging * configuration * monitoring * health * dependency management The sample apps will be in .NET and Java, and will show you how to turn your existing apps into good Docker citizens.

PKS - Solving Complexity for Modern Data Workloads Carlos Andrés García

DCSF 19 Docker Enterprise Platform and ArchitectureDocker, Inc.

Docker Enterprise is an enterprise container platform for developers and IT admins building and managing container applications. The platform includes integrated orchestration (Swarm and Kubernetes), advanced private image registry, and a centralized admin console to secure, troubleshoot, and manage containerized applications. This talk will focus on the Docker Enterprise technical architecture, key features and use cases it is designed to support. Key areas covered in this session: Latest features and enhancements Security and Compliance - how to ensure oversight and validate applications for different compliance regulations Operational Insight - how to identify and troubleshoot issues in your container environment Integrated Technology - the technologies are supported and can be run with Docker Enterprise Policy-based Automation - how to scale container environments through automated policies

DCSF 19 How Entergy is Mitigating Legacy Windows Operating System Vulnerabili...Docker, Inc.

Jason Brown - Program Manager, Entergy Jeff Hummel - IT Infrastructure, Architect, Entergy Entergy, a large utility company headquartered in New Orleans, LA has launched an initiative to modernize their application infrastructure. During the initial analysis, Entergy recognized the existing legacy infrastructure’s lack of compatibility with more recent operating systems would stand in the way of progress. As a result, containerization was fast-tracked as the solution that can help them with the various tenants of their strategy: hyperconvergence, SaaS (ServiceNow), and workload portability. Docker Enterprise proved to be the right solution to migrate roughly 850 legacy applications from Windows Server 2003 and 2008 to Windows Server 2016 quickly, securely and economically. Entergy IT has now delivered the ability for the business to run applications on-premise, in the cloud, and future-proofed the applications for migration to new versions of Windows Server. In this session, Entergy will talk about how they are modernizing their infrastructure to become more agile, secure, and enable workload portability.

Docker Meetup at Docker HQ: Docker CloudDocker, Inc.

Talk #1: Ryan Kennedy, CI: Build and Test in Docker Cloud In this talk, Ryan Kennedy will present an overview of Docker Cloud and demonstrate how to configure a CI pipeline using the automated build and test capabilities. We will dive into the latest features available in Docker Cloud, including sharing repositories with teams and securing your application pipeline. * Talk #2: Bryan Lee and Alberto Megia, Deploying and Managing Applications in Docker Cloud In this talk, Bryan Lee and Alberto Megia will demonstrate auto-deployment capabilities in Docker Cloud as well as how to deploy, manage, and scale container-based applications directly within the tool.

Communication Operations: Lift off with Docker! - Jesse WhiteDocker, Inc.

Communication Ops (Co-Ops) is a collaboration model that helps connect people, machines, software and automation to a get-things-done pipeline. Encouraging transparency, continual improvement and speed, Co-Ops helps everyone work together. In this session, you'll learn how to build your own lightweight communication infrastructure based on Docker components, and what integrations matter most in getting your team humming along productively. We'll also use the latest in bot technology to augment reporting, support, and execution of a software delivery lifecycle.

Orchestrating stateful applications with PKS and PortworxVMware Tanzu

This document provides an overview of Portworx, including: 1. Portworx is a leader in providing stateful container orchestration that works across any cloud or scheduler. 2. It has an experienced team and investors, with headquarters in Los Altos, CA and 70 employees globally. 3. Portworx allows applications to run across different infrastructure types and clouds with a portable cloud stack that provides high availability, replication, security and data mobility features.

DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise EditionDocker, Inc.

DockerCon EU 2015: Containing IoT Sensor TelemetryDocker, Inc.

Presented by Samuel Cozannet, Strategic Program Manager, Canonical and Michael Schloh, Computer Scientist, Europalab In this hour we consider benefits of interfacing docker with IoT systems using sensor telemetry and actuator telecommand technology. IoT has come a long way by embracing web interfaces like JavaScript and NodeJS, but lacks good packaging and container abstraction allowing for portability across hardware platforms. We bridge this inadequacy by introducing Docker and IoT to each other.

Cloud Native Patterns Using AWS - Practical ExamplesAnderson Carvalho

This document discusses cloud native patterns using AWS. It defines cloud native as taking advantage of what the cloud offers to build scalable applications in public, private, and hybrid clouds. The document outlines foundation patterns like having one database per component, using event streaming, and event sourcing. It also discusses boundary patterns such as API gateways and backend for frontends. Finally, it covers control patterns involving event collaboration and orchestration and provides examples of how to implement these patterns using AWS services.

DockerCon 2017 - General Session Day 2 - Ben GolubDocker, Inc.

Ben Golub, CEO of Docker, gave the keynote presentation on the second day of the conference. He discussed how Docker is being widely adopted in the enterprise across many industries like healthcare, finance, and public sector. Docker's commercial adoption has been strong not only for microservices but also for infrastructure. Golub also highlighted how Visa is using Docker in production for over 6 months to power several applications, achieving improvements in scalability, provisioning time, and maintenance. He emphasized that organizations have diverse environments that are not simply "microservices" versus "traditional" and that Docker can help support this diversity.

Whats new in brigade 2LibbySchulze

This document discusses event-driven scripting for Kubernetes using Brigade. Brigade allows asynchronous, event-driven scripting that chains together containers to create workflows using Kubernetes as the workload execution substrate. It provides flow control that wraps container execution without being opinionated about what the containers do. Brigade supports use cases like CI/CD, GitOps, and report generation. Events originate from external systems and enter Brigade via event gateways like GitHub or Slack. Projects subscribe to events and define workers to handle events by running scripts in containers. Jobs can also be created to handle discrete tasks. Brigade features include Git integration, shared volumes, user authentication, and an ecosystem of gateways and SDKs. It emphasizes events while tools like Argo emphasize

Why cloud native mattersCheryl Hung

This document discusses why cloud native computing matters and provides three case studies. It begins by explaining how infrastructure is changing with the rise of containerization solutions in the 2010s. It then discusses why people use cloud native technologies because they work well and have a great community behind them. Three case studies are presented where companies moved workloads to cloud native solutions on Kubernetes to increase agility, reduce costs, and improve developer productivity. The document concludes by noting that while technology challenges can be solved, changing organizational culture can be the hardest challenge to address.

Azure kubernetes serviceVishwas N

Azure Kubernetes Service (AKS) is a managed container orchestration service that allows users to deploy, scale, and manage containerized applications. It offers fully managed Kubernetes clusters, enabling end-to-end deployment, scalability, and high availability. AKS manages the control plane of Kubernetes which includes components like etcd and the API server, allowing users to focus on managing applications. It provides a way to deploy and manage containerized applications without having to stand up or manage Kubernetes infrastructure.

Docker Store: The New Destination for Enterprise Software - Lily Guo and Alfr...Docker, Inc.

Docker Store is the place to find trusted community and enterprise content. Independent software vendors, startups and developers alike now have a marketplace to create and distribute Enterprise-ready content through the Store. Join Chinmayee and Alfred from the Docker Store team to learn how ISVs, big and small, are using Docker Store. They will cover: How to publish and distribute high quality, reusable containers and plugins; and How Enterprise customers can simplify procurement and management of their software assets using Docker Store.

AWS live hack: Docker + Snyk Container on AWSEric Smalling

Pragmatic Pipeline SecurityJames Wickett

All organizations want to go faster and decrease friction in delivering software. The problem is that InfoSec has historically slowed this down or worse. But, with the rise of CD pipelines and new devsecops tooling, there is an opportunity to reverse this trend and move Security from being a blocker to being an enabler. This talk will discuss hallmarks of doing security in a software delivery pipeline with an emphasis on being pragmatic. At each phase of the delivery pipeline, you will be armed with philosophy, questions, and tools that will get security up-to-speed with your software delivery cadence. From DeliveryConf 2020

More Related Content

What's hot (20)

Microservices, docker , kubernetes and many moreVishwas N

DCSF19 Kubernetes Security with OPA Docker, Inc.

DockerCon 2017 - General Session Day 1 - Ben GolubDocker, Inc.

DCSF 19 Improving the Human Condition with DockerDocker, Inc.

Disruption from withinDocker, Inc.

5 patterns for success for application transformationDocker, Inc.

PKS - Solving Complexity for Modern Data Workloads Carlos Andrés García

DCSF 19 Docker Enterprise Platform and ArchitectureDocker, Inc.

DCSF 19 How Entergy is Mitigating Legacy Windows Operating System Vulnerabili...Docker, Inc.

Docker Meetup at Docker HQ: Docker CloudDocker, Inc.

Communication Operations: Lift off with Docker! - Jesse WhiteDocker, Inc.

Orchestrating stateful applications with PKS and PortworxVMware Tanzu

DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise EditionDocker, Inc.

DockerCon EU 2015: Containing IoT Sensor TelemetryDocker, Inc.

Cloud Native Patterns Using AWS - Practical ExamplesAnderson Carvalho

DockerCon 2017 - General Session Day 2 - Ben GolubDocker, Inc.

Whats new in brigade 2LibbySchulze

Why cloud native mattersCheryl Hung

Azure kubernetes serviceVishwas N

Docker Store: The New Destination for Enterprise Software - Lily Guo and Alfr...Docker, Inc.

Microservices, docker , kubernetes and many moreVishwas N

DCSF19 Kubernetes Security with OPA Docker, Inc.

DockerCon 2017 - General Session Day 1 - Ben GolubDocker, Inc.

DCSF 19 Improving the Human Condition with DockerDocker, Inc.

Disruption from withinDocker, Inc.

5 patterns for success for application transformationDocker, Inc.

PKS - Solving Complexity for Modern Data Workloads Carlos Andrés García

DCSF 19 Docker Enterprise Platform and ArchitectureDocker, Inc.

DCSF 19 How Entergy is Mitigating Legacy Windows Operating System Vulnerabili...Docker, Inc.

Docker Meetup at Docker HQ: Docker CloudDocker, Inc.

Communication Operations: Lift off with Docker! - Jesse WhiteDocker, Inc.

Orchestrating stateful applications with PKS and PortworxVMware Tanzu

DockerCon 18 Cool Hacks: Cloud Native ML with Docker Enterprise EditionDocker, Inc.

DockerCon EU 2015: Containing IoT Sensor TelemetryDocker, Inc.

Cloud Native Patterns Using AWS - Practical ExamplesAnderson Carvalho

DockerCon 2017 - General Session Day 2 - Ben GolubDocker, Inc.

Whats new in brigade 2LibbySchulze

Why cloud native mattersCheryl Hung

Azure kubernetes serviceVishwas N

Docker Store: The New Destination for Enterprise Software - Lily Guo and Alfr...Docker, Inc.

Similar to Faster safer and 100 user centric application at equifax with docker (20)

AWS live hack: Docker + Snyk Container on AWSEric Smalling

Pragmatic Pipeline SecurityJames Wickett

Containerization StrategyBalaji Mariyappan

OPC UA Connectivity with InduSoft and the OPC FoundationAVEVA

The document discusses the role and mission of the OPC Foundation. It states that the Foundation is the world's leading community for interoperability solutions based on OPC specifications that deliver universal connectivity. The mission of the community is to advance the development, adoption and certification of OPC-based products through global collaborations. The Foundation is also the official source for the OPC Certification Program, which ensures that OPC products plug-and-play in real-world applications.

Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...PranavPatil822557

This document provides an overview of machine learning, analytics, and cyber security presented by Manjunath N V. It includes definitions of key concepts like machine learning, data analytics, and cyber security. It also discusses how machine learning, data analytics, and cyber security are related and can be combined. The document outlines topics that will be covered, including theoretical foundations, hands-on materials, career opportunities, and demonstration of a final output.

Implementing Fast IT Deploying Applications at the Pace of Innovation Cisco DevNet

Fast innovation requires Fast IT: the new model for IT that transforms the way we deliver new business application capabilities to our clients. Cisco IT has created solutions that enable automated provisioning of environments and fast deployment of cloud applications through “Software Development-as-a-Service”. In this session, we’ll provide a hands-on experience of how application teams use an automated toolset to combine quality and agility, while reducing operational expense. We’ll also provide a view of the key technologies that enable this solution. Finally, there’s a quick glimpse into what’s next: containerization and IOE Application Enablement.

DockerCon SF 2015: Faster, Cheaper, SaferDocker, Inc.

This document discusses how Docker can help organizations achieve faster, cheaper, and safer development and operations. It outlines how Docker enables microservices architectures and continuous delivery for faster development. Using Docker allows consolidating resources for cheaper and more efficient infrastructure. Following security best practices like immutable deployments and role-based access helps ensure safer applications. The document provides examples of how different types of workloads can benefit from Docker in production environments.

ABN AMRO DevSecOps JourneyDerek E. Weeks

This document summarizes ABN AMRO's DevSecOps journey and initiatives. It discusses their implementation of continuous integration and delivery pipelines to improve software quality, reduce lead times, and increase developer productivity. It also covers their work to incorporate security practices like open source software management, container security, and credentials management into the development lifecycle through techniques like dependency scanning, security profiling, and a centralized secrets store. The presentation provides status updates on these efforts and outlines next steps to further mature ABN AMRO's DevSecOps capabilities.

AWS live hack: Atlassian + Snyk OSS on AWSEric Smalling

The document discusses securing modern applications in AWS. It begins with an overview of the risk profile of modern applications, noting that they often incorporate a large amount of open source code and are deployed rapidly using containers and infrastructure as code. It then demonstrates how to "live hack" an application running on AWS. Next, it discusses how Snyk can help prevent such exploits by empowering developers, automating fixes, and providing security throughout the entire codebase. It also outlines additional security practices like minimizing container footprints, using secrets safely, and implementing network policies. Finally, it promotes attending additional security sessions and provides references for further reading.

Democratizing securitySanjeev Sharma

This document discusses democratizing security as the next frontier for DevSecOps adoption in enterprises. It covers evolving delivery practices like Agile, DevOps, and SRE. Democratizing involves making capabilities self-service, granting permission to act with guardrails, and building trust. This includes democratizing infrastructure, software delivery, data, and security by making them technology agnostic, self-service, and including them in the DevSecOps toolchain to improve applications, platforms, processes, and culture. Security chaos engineering and value stream mapping are also discussed as ways to identify vulnerabilities and inefficiencies to continuously improve operational readiness and adoption.

AWS TechConnect 2018 - Container AdoptionAlex Rhea

Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...Patrick Chanezon

This document provides an overview of developing and deploying Java applications on Azure using Docker. It discusses using Docker to build Java applications, running containers, and deploying stacks. It also covers Docker Enterprise Edition, including subscriptions, certifications, and security features. Finally, it demonstrates using Docker on Azure, such as with Azure Container Service, and shows examples of building, running, and deploying Java applications with Docker.

What's New in Docker - February 2017Patrick Chanezon

This document provides an overview of Container as a Service (CaaS) with Docker. It discusses key concepts like Docker containers, images, and orchestration tools. It also covers DevOps practices like continuous delivery that are enabled by Docker. Specific topics covered include Docker networking, volumes, and orchestration with Docker Swarm and compose files. Examples are provided of building and deploying Java applications with Docker, including Spring Boot apps, Java EE apps, and using Docker for builds. Security features of Docker like content trust and scanning are summarized. The document concludes by discussing Docker use cases across different industries and how Docker enables critical transformations around cloud, DevOps, and application modernization.

Azure 101: Shared responsibility in the Azure CloudPaulo Renato

Whether you’re working exclusively on Azure or with multiple cloud environments, there are certain things you should consider when moving assets to the public cloud. As with any cloud deployment, security is a top priority, and moving your workloads to the Azure cloud doesn’t mean you’re not responsible for the security of your operating system, applications, and data. Building on the security of the Azure infrastructure, this shared security responsibility starts with making sure your environment is secure. In this session, we will discuss step-by-step what you need to do to secure access at the administrative, application and network layers.

Microservices and containers for the unitiatedKevin Lee

Let's banish "it works on my machine"Stephanie Locke

Between spending hours (or days!) making sure you can code and test locally and the difficulties of keeping remote environments up to date, sometimes we find ourselves falling back on "It works on my machine!". Getting rid of the difficulties in making new development environments and maintaining testing infrastructure is really key to banishing the dreaded phrase. In this session, we'll take you through some of the recent tools and techs that will not only make your life easier but will mean you never have to say "works on my machine" ever again.

ResumeMd Zahir Uddin

Docker Enterprise Edition Overview by Steven Thwaites, Technical Solutions En...Ashnikbiz

This was presented by Steven Thwaites, Technical Solutions Engineer at Docker at Cloud Expo Asia. Docker is the only Containers-as-a-Service platform for IT that manages and secures diverse applications across disparate infrastructure, both on-premises and in the cloud. It covers topics like: VMs vs Containers The Docker Ecosystem How to Build and Ship your Docker Image Unique Advantages with Docker EE and more

Cncf checkov and bridgecrewLibbySchulze

This document discusses a webinar about integrating infrastructure as code (IaC) security into the development lifecycle using Checkov. It notes that nearly half of open source Terraform and CloudFormation templates contain security issues. Checkov is introduced as an open source IaC scanning tool that supports multiple frameworks and cloud providers. The benefits of Checkov include lower remediation times, reduced security incidents, and simplifying compliance. Integrations with DevOps tools and the Cloud Native Application Platform Approach (CNAPP) are also discussed. A demo of Checkov is then shown including using it with VS Code and Azure DevOps.

Resume_AppajiAppaji K

This document provides a summary of Appaji Koppula's professional experience, including his current role as a Senior Software Development Engineer at Cisco Systems since January 2013. It also outlines his previous roles at Citrix R&D India, Juniper Networks, and Intoto Software, with descriptions of some representative projects he worked on in each role. These projects involved areas such as routing, virtual private networks, intrusion detection, and domain name resolution. The document concludes by listing Appaji Koppula's education qualifications, including a Master of Science in Software Systems from BITS Pilani and a Master of Business Administration from Icfai University.

AWS live hack: Docker + Snyk Container on AWSEric Smalling

Pragmatic Pipeline SecurityJames Wickett

Containerization StrategyBalaji Mariyappan

OPC UA Connectivity with InduSoft and the OPC FoundationAVEVA

Machine Learning , Analytics & Cyber Security the Next Level Threat Analytics...PranavPatil822557

Implementing Fast IT Deploying Applications at the Pace of Innovation Cisco DevNet

DockerCon SF 2015: Faster, Cheaper, SaferDocker, Inc.

ABN AMRO DevSecOps JourneyDerek E. Weeks

AWS live hack: Atlassian + Snyk OSS on AWSEric Smalling

Democratizing securitySanjeev Sharma

AWS TechConnect 2018 - Container AdoptionAlex Rhea

Docker Azure Friday OSS March 2017 - Developing and deploying Java & Linux on...Patrick Chanezon

What's New in Docker - February 2017Patrick Chanezon

Azure 101: Shared responsibility in the Azure CloudPaulo Renato

Microservices and containers for the unitiatedKevin Lee

Let's banish "it works on my machine"Stephanie Locke

ResumeMd Zahir Uddin

Docker Enterprise Edition Overview by Steven Thwaites, Technical Solutions En...Ashnikbiz

Cncf checkov and bridgecrewLibbySchulze

Resume_AppajiAppaji K

More from Docker, Inc. (20)

Containerize Your Game Server for the Best Multiplayer Experience Docker, Inc.

Raymond Arifianto, AccelByte and Mark Mandel, Google - We have been deploying containerized micro-services for our Game Backend Services for a while. Now we are tackling the challenge to scale up fleets of game dedicated servers in multiple regions, multiple data centers and multiple providers - some in bare metal, some in Cloud. So we leverage docker containerization to deploy Game Servers to achieve Portability, Fast Deployment and Predictability, enabling us to scale up to thousands of servers, on demand, without a sweat.

How to Improve Your Image Builds Using Advance Docker BuildDocker, Inc.

Nicholas Dille, Haufe-Lexware + Docker Captain - Docker continues to be the standard tool for building container images. For more than a year Docker ships with BuildKit as an alternative image builder, providing advanced features for secret and cache management. These features help to make image builds faster and more secure. In this session, Docker Captain Nicholas Dille will teach you how to use Buildkit features to your advantage.

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

Lukonde Mwila, Entelect - As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

Securing Your Containerized Applications with NGINXDocker, Inc.

How To Build and Run Node Apps with Docker and ComposeDocker, Inc.

Kathleen Juell, Digital Ocean - Containers are an essential part of today's microservice ecosystem, as they allow developers and operators to maintain standards of reliability and reproducibility in fast-paced deployment scenarios. And while there are best practices that extend across stacks in containerized environments, there are also things that make each stack distinct, starting with the application image itself. This talk will dive into some of these particularities, both at the image and service level, while also covering general best practices for building and running Node applications with database backends using Docker and Compose.

Hands-on Helm Docker, Inc.

Distributed Deep Learning with Docker at SalesforceDocker, Inc.

Jeff Hajewski, Salesforce - There is a wealth of information on building deep learning models with PyTorch or TensorFlow. Anyone interested in building a deep learning model is only a quick search away from a number of clear and well written tutorials that will take them from zero knowledge to having a working image classifier. But what happens when you need to deploy these models in a production setting? At Salesforce, we use TensorFlow models to help us provide customers with insights into their data, and we do this as close to real-time as possible. Designing these systems in a scalable manner requires overcoming a number of design challenges, but the core component is Docker. Docker enables us to design highly scalable systems by allowing us to focus on service interactions, rather than how our services will interact with the hardware. Docker is also at the core of our test infrastructure, allowing developers and data scientists to build and test the system in an end to end manner on their local machines. While some of this may sound complex, the core message is simplicity - Docker allows us to focus on the aspects of the system that matter, greatly simplifying our lives.

The First 10M Pulls: Building The Official Curl Image for Docker HubDocker, Inc.

James Fuller, webcomposite s.r.o. - Curl is the venerable (yet very modern) 'swiss army knife' command line tool and library for transferring data with URLs. Recently we (the Curl team) decided to build a release for Docker Hub. This talk will outline our current development workflow with respect to the docker image and provide insights on what it takes to build a docker image for mass public consumption. We are also keen to learn from users and other developers how we might improve and enhance the official curl docker image.

Monitoring in a Microservices WorldDocker, Inc.

Fabian Stäber, Instana - In recent years, we saw a great paradigm shift in software engineering away from static monolithic applications towards dynamic distributed horizontally scalable architectures. Docker is one of the key technologies enabling this development. This shift poses a lot of new challenges for application monitoring, ranging from practical issues (need for automation) to technical challenges (Docker networking) to organizational topics (blurring line between software engineers and operations) to fundamental questions (define what is an application). In this talk we show how Docker changed the way we do monitoring, how modern application monitoring systems work, and what future developments we expect.

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...Docker, Inc.

Clemente Biondo, Engineering Ingegneria Informatica - When the COVID 19 pandemic started, Engineering Ingegneria Informatica Group (1.25 billion euros of revenues, 65 offices around the world, 12.000 employees) was forced to put their digital transformation to the test in order to maintain operational continuity. In this session, Clemente Biondo, the Tech Lead of the Information Systems Department, will share how his company is reacting to this unforeseeable scenario and how Docker-driven digital transformation had paved the path for work to continue remotely. Clemente will discuss learnings moving from colocated teams, manual approaches, email based-business processes, and a monolithic application to a mature DevOps culture characterized by a distributed autonomous workforce and a continuous deployment process that deploys backward-compatible Docker containerized microservices into hybrid multi cloud datacenters an average of twice a day with zero-downtime. He will detail how they use Docker to unify dev, test and production environments, and as an efficient and automated mechanism for deploying applications. Lastly, Clemente shares how, in our darkest hour, he and others are working to shine their brightest light.

Predicting Space Weather with DockerDocker, Inc.

The document discusses how NOAA's Space Weather Prediction Center transitioned from a monolithic architecture to microservices using Docker. It describes how they started with a small verification project, then replaced their critical GOES satellite data source. This improved developers' morale and delivery speed. They encountered some security issues initially but learned from them. The transition was very successful and allowed them to quickly expand their mission to forecast aviation impacts using scientists' models packaged as Docker services.

Become a Docker Power User With Microsoft Visual Studio CodeDocker, Inc.

Brian Christner, 56k + Docker Captain - In this session, we will unlock the full potential of using Microsoft Visual Studio Code (VS Code) and Docker Desktop to turn you into a Docker Power User. When we expand and utilize the VS Code Docker plugin, we can take our projects and Docker skills to the next level. In addition to using VS Code, we streamline our Docker Desktop development workflow with less context switching and built-in shortcuts. You will learn how to bootstrap new projects, quickly write Dockerfiles utilizing templates, build, run, and interact with containers all from VS Code.

How to Use Mirroring and Caching to Optimize your Container RegistryDocker, Inc.

Monolithic to Microservices + Docker = SDLC on Steroids!Docker, Inc.

Ashish Sharma, SS&C Eze - SS&C Eze provides various products in the stock market domain. We spent the last couple of years building Eclipse which is an investment suite born in cloud. The journey so far has been very interesting. The very first version of the product were a bunch of monolithic windows services and deployed using Octopus tool. We successfully managed to bring all the monolithic problem to the cloud and created a nightmare for ourselves. We then started applying microservices architecture principles and started breaking the monolithic into small services. Very soon we realized that we need a better packaging/deployment tool. Docker looked like a magical solution to our problem. Since its adoption, It has not only solved the deployment problem for us but has made a deep impact on different aspects of SDLC. It allowed us to use heterogeneous technology stacks, simplified development environment setup, simplified our testing strategy, improved our speed of delivery, and made our developers more productive. In this talk I would like to share our experience of using Docker and its positive impact on our SDLC.

Kubernetes at Datadog ScaleDocker, Inc.

Kubernetes networking can be complex to scale due to issues like growing iptables rules, but newer solutions are helping. Pod networking uses CNI plugins like flannel or Calico to assign each pod an IP and allow communication. Service networking uses kube-proxy and iptables or IPVS for load balancing to pods. DNS is used to resolve service names to IPs. While Kubernetes networking brings flexibility, operators must learn the nuances of their specific CNI plugin and issues can arise, but the ecosystem adapts quickly to new needs and changes don't impact all workloads.

Labels, Labels, Labels Docker, Inc.

Andy Clemenko, StackRox - One underutilized, and amazing, thing about the docker image scheme is labels. Labels are a built in way to document all aspects about the image itself. Think about all the information that the tags inside your clothing carry. If you care to look you can find out everything about the garment. All that information can be very valuable. Now think about how we can leverage labels to carry similar information. We can even use the labels to contain Docker Compose or even Kubernetes Yaml. We can even include labels into the CI/CD process making things more secure and smoother. Come find out some fun techniques on how to leverage labels to do some fun and amazing things.

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment ModelDocker, Inc.

Micro Focus uses Docker Hub at scale to support its software delivery and deployment model. Some key points: - Docker Hub is used as the registry service for Micro Focus container images - It allows for optimized, secure, reliable and cost-effective software delivery through deployments and updates of container images to customers and partners - Micro Focus leverages features like private repositories, offline/online access, signing and scanning of images, and integration with CI/CD pipelines - Over 1,650 organizations, 450 repositories, and 18 teams are used on Docker Hub to manage access and deliver software from Micro Focus

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

Lukonde Mwila, Entelect As the cloud-native approach to development and deployment becomes more prevalent, it's an exciting time for software engineers to be equipped on how to dockerize multi-container applications and deploy them to the cloud. In this talk, Lukonde Mwila, Software Engineer at Entelect, will cover the following topics: - Docker Compose - Containerizing an Nginx Server - Containerizing an React App - Containerizing an Node.JS App - Containerizing anMongoDB App - Runing Multi-Container App Locally - Creating a CI/CD Pipeline - Adding a build stage to test containers and push images to Docker Hub - Deploying Multi-Container App to AWS Elastic Beanstalk Lukonde will start by giving an overview of how Docker Compose works and how it makes it very easy and straightforward to startup multiple Docker containers at the same time and automatically connect them together with some form of networking. After that, Lukonde will take a hands on approach to containerize an Nginx server, a React app, a NodeJS app and a MongoDB instance to demonstrate the power of Docker Compose. He'll demonstrate usage of two Docker files for an application, one production grade and the other for local development and running of tests. Lastly, he'll demonstrate creating a CI/CD pipeline in AWS to build and test our Docker images before pushing them to Docker Hub or AWS ECR, and finally deploying our multi-container application AWS Elastic Beanstalk.

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...Docker, Inc.

Elton Stoneman, Docker Captain + Container Consultant and Trainer How do you provide a SaaS offering when your product is a 10-year old Fortran app, currently built to run on Windows 10? With Docker and Kubernetes of course - and you can do it in a week (... to prototype level at least). In this session I'll walk through the processes and practicalities of taking an older Windows app, making it run in containers with Kubernetes, and then building a simple API wrapper to host the whole stack as a cloud-based SaaS product. There's a lot of technology here from a real world case study, and I'll focus on: - running Windows apps in Docker containers - building a .NET Core API which can run in Linux or Windows containers - running the stack in Kubernetes with Docker Desktop locally and AKS in the cloud - configuring AKS workloads in Azure to burst out to Azure Container Instances And there's a core theme to this session: Docker and Kubernetes are complex technologies, but they're the key to modern development. If you invest time learning them, they make projects like this simple, portable, fast and fun.

Developing with Docker for the Arm ArchitectureDocker, Inc.

This virtual meetup introduces the concepts and best practices of using Docker containers for software development for the Arm architecture across a variety of hardware systems. Using Docker Desktop on Windows or Mac, Amazon Web Services (AWS) A1 instances, and embedded Linux, we will demonstrate the latest Docker features to build, share, and run multi-architecture images with transparent support for Arm.

Containerize Your Game Server for the Best Multiplayer Experience Docker, Inc.

How to Improve Your Image Builds Using Advance Docker BuildDocker, Inc.

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

Securing Your Containerized Applications with NGINXDocker, Inc.

How To Build and Run Node Apps with Docker and ComposeDocker, Inc.

Hands-on Helm Docker, Inc.

Distributed Deep Learning with Docker at SalesforceDocker, Inc.

The First 10M Pulls: Building The Official Curl Image for Docker HubDocker, Inc.

Monitoring in a Microservices WorldDocker, Inc.

COVID-19 in Italy: How Docker is Helping the Biggest Italian IT Company Conti...Docker, Inc.

Predicting Space Weather with DockerDocker, Inc.

Become a Docker Power User With Microsoft Visual Studio CodeDocker, Inc.

How to Use Mirroring and Caching to Optimize your Container RegistryDocker, Inc.

Monolithic to Microservices + Docker = SDLC on Steroids!Docker, Inc.

Kubernetes at Datadog ScaleDocker, Inc.

Labels, Labels, Labels Docker, Inc.

Using Docker Hub at Scale to Support Micro Focus' Delivery and Deployment ModelDocker, Inc.

Build & Deploy Multi-Container Applications to AWSDocker, Inc.

From Fortran on the Desktop to Kubernetes in the Cloud: A Windows Migration S...Docker, Inc.

Developing with Docker for the Arm ArchitectureDocker, Inc.

Recently uploaded (20)

Bidding World Conference 2027 - NSGF Mexico.pdfISGF - International Scout and Guide Fellowship

Key Elements of a Procurement Plan.docx.NeoRakodu

Bidding World Conference 2027 - Ghana.pptxISGF - International Scout and Guide Fellowship

cardiovascular outcome in trial of new antidiabetic drugsMohammed Ahmed Bamashmos

ICSE 2025 Keynote: Software Sustainability and its Engineering: How far have ...patricialago3459

Thanks to its digital transformation, society depends on software. This is expected to bring important benefits but at the same time is accompanied by worrisome constraints. The societal role of software and its engineering is not new. Nor is their need to be sustainable. But what does it mean, really? And how far have we come with our research? This talk wants to trigger reflection on the research being done, its impact and its true contribution to the complex and urgent problems posed by both society and our planet.

Profit Growth Drivers for Small Business.pdfTheodoreHawkins

NASIG ISSN 2025 updated for the_4-30meeting.pptxreine1

Updated treatment of hypothyroidism, causes and symptomsMohammed Ahmed Bamashmos

Setup & Implementation of OutSystems Cloud Connector ODCoutsystemspuneusergr

The Business Dynamics of Quick Commerce.pdfRDinuRao

This research explores the transformative rise of Quick Commerce (Q-Commerce)—an advanced evolution of e-commerce that emphasizes ultra-fast delivery, typically within 15–30 minutes, using hyperlocal micro-fulfillment centers. With the rapid pace of urbanization and digitalization, Q-commerce is reshaping consumer expectations, retail strategies, and supply chain models.The seminar Presentation Report has been completed by me under the guidance of Dr. Varun Agarwal. The report investigates the pivotal components of this disruption across marketing, operations, sustainability, and long-term viability. The study begins with a deep dive into consumer psychology, applying theories like Impulse Buying (Stern, 1962) and Maslow’s Hierarchy of Needs, highlighting how digital platforms exploit impulse-driven purchasing. Supported by Ajzen’s Theory of Planned Behavior, the research explains how attitudes, social norms, and perceived control influence the purchasing decisions in a fast-paced retail setting. A core component of the research is marketing strategy. Q-commerce companies deploy AI-driven personalization, geo-targeting, influencer marketing, and loyalty programs to attract and retain customers. For instance, influencer-driven campaigns achieve conversion rates of up to 65%, showcasing their significance in a digital-first market. Using secondary data from McKinsey, Deloitte, KPMG, Statista, and HBR, the paper presents compelling figures—Q-commerce grew from $0.5 billion in 2022 to $5.5 billion in 2025, with projections reaching $9.95 billion by 2029. The average order value has doubled, while CAGR stands at 4.5%, signifying rapid adoption. Despite the meteoric growth, the study critically assesses challenges to profitability, such as steep operational costs, steep discounts, and last-mile delivery expenses. A comparative analysis of platforms—Blinkit, Swiggy Instamart, Zepto, BigBasket, and JioMart—reveals how market leaders differentiate through delivery speed, inventory accuracy, app integrations, and urban focus. Moreover, the research stresses the environmental and labor challenges that must be addressed—like packaging waste, carbon emissions, and gig worker instability. The discussion extends into how Q-commerce forces traditional retailers to adapt, investing in EV logistics, dark stores, and sustainability measures. It underscores the AI-led shift in consumer behavior, and the need for balanced growth that prioritizes environmental responsibility and ethical labor practices. In conclusion, the paper recommends a future roadmap for Q-commerce: promoting eco-friendly logistics, subscription models, fair employment, and policy alignment. It calls for future research to explore Tier-2 and Tier-3 city expansion and to craft long-term profitability frameworks. Ultimately, this study positions Q-commerce not just as a convenience, but as a catalyst for redefining urban retail economics and digital lifestyle

Effects of physical activity, exercise and sedentary behaviors toDancanNyabuto

ICONX - Presentation - Mining RACE - english - internationalBitcoin Mining RACE

⭐️ Bitcoin - Mining Race ⭐️ The Fastest Driven Bitcoin Movement ⭐️ english ⭐️ Referral link - https://miningrace.com/wallet/invite-activate/edA6xDgWMVLBAfCClWJy ⭐️ Invite code - edA6xDgWMVLBAfCClWJy Mining Race - The fastest growing Bitcoin movement Join the Ultimate Bitcoin Community Challenge. Race to the Top in Mining Race. Cryptocurrencies are all about the community. And what better way to fully embrace the BTC community than a community-based mining program? By participating in the Mining Race, you will not only contribute to the support of the Bitcoin blockchain but also earn more rewards for being a part of the Mining Race community! Ready to join the Bitcoin Mining Race Challenge? ⭐️ Referral link - https://miningrace.com/wallet/invite-activate/edA6xDgWMVLBAfCClWJy ⭐️ Invite code - edA6xDgWMVLBAfCClWJy

Bidding World Conference 2027-NSGF Senegal.pdfISGF - International Scout and Guide Fellowship

kurtlewin theory of motivation -181226082203.pptxTayyabaSiddiqui12

Speech 2-Unity in Diversity, Strength in SolidarityNoraini Yunus

This SlideShare presentation celebrates Singapore's journey through SG60, emphasizing resilience, inclusivity, and the vision for a fair, just, and united nation. It encapsulates the Singapore United Party (SUP) manifesto principles—strong starts for children, accessible housing and healthcare, and opportunities for all—while showcasing Noraini Bte Yunus's commitment to bridging divides, supporting the silver generation, and empowering every Singaporean to pursue their dreams. Together, let's honor the past and secure a brighter future. Moving Forward, Together!

Reflections on an ngo peace conference in zimbabwejujuaw05

Basic.pptxsksdjsdjdvkfvfvfvfvfvfvfvfvfvvvvhkthmrz42n

Bloom Where You Are Planted 05.04.2025.pptxFamilyWorshipCenterD

Besu Shibpur Enquesta 2012 Intra College General Quiz Prelims.pptxRajdeep Chakraborty

Besu Shibpur Enquesta 2012 Intra College General Quiz Finals.pptxRajdeep Chakraborty

Bidding World Conference 2027 - NSGF Mexico.pdfISGF - International Scout and Guide Fellowship

Key Elements of a Procurement Plan.docx.NeoRakodu

Bidding World Conference 2027 - Ghana.pptxISGF - International Scout and Guide Fellowship

cardiovascular outcome in trial of new antidiabetic drugsMohammed Ahmed Bamashmos

ICSE 2025 Keynote: Software Sustainability and its Engineering: How far have ...patricialago3459

Profit Growth Drivers for Small Business.pdfTheodoreHawkins

NASIG ISSN 2025 updated for the_4-30meeting.pptxreine1

Updated treatment of hypothyroidism, causes and symptomsMohammed Ahmed Bamashmos

Setup & Implementation of OutSystems Cloud Connector ODCoutsystemspuneusergr

The Business Dynamics of Quick Commerce.pdfRDinuRao

Effects of physical activity, exercise and sedentary behaviors toDancanNyabuto

ICONX - Presentation - Mining RACE - english - internationalBitcoin Mining RACE

Bidding World Conference 2027-NSGF Senegal.pdfISGF - International Scout and Guide Fellowship

kurtlewin theory of motivation -181226082203.pptxTayyabaSiddiqui12

Speech 2-Unity in Diversity, Strength in SolidarityNoraini Yunus

Reflections on an ngo peace conference in zimbabwejujuaw05

Basic.pptxsksdjsdjdvkfvfvfvfvfvfvfvfvfvvvvhkthmrz42n

Bloom Where You Are Planted 05.04.2025.pptxFamilyWorshipCenterD

Besu Shibpur Enquesta 2012 Intra College General Quiz Prelims.pptxRajdeep Chakraborty

Besu Shibpur Enquesta 2012 Intra College General Quiz Finals.pptxRajdeep Chakraborty

Faster safer and 100 user centric application at equifax with docker

1. JAYA POLUMURU Sr. Director of Technology, Equifax Inc Faster, Safer and 100% User Centric Application at Equifax with Docker

2. JAYA POLUMURU Sr. Director of Technology, Equifax Inc Docker at Equifax Kartik Pisharodi Cloud Systems Developer, Cloudreach Docker Infrastructure

3. - Software Development Lifecycle Challenges - Track Inventory of Software Packages - Detect Vulnerabilities - Reduce Remediation Cycles - Improve Overall Security Process - Need for better transparency for all departments - Deliver a product to help protect our consumers - WebApp - Mobile Apps Facing the Challenge

4. - Security by Design - Exposing Vulnerabilities - Reduction of Attack Surface - Quicker Development Cycle - Supported on various infrastructure platforms Solution Hunting Criteria n nt

5. - Host Level Security - Infrastructure/Platform Level Security - Data Security - Process Security - Container Security Layers of Security

6. - Landing Zone / POC Execution Plan

7. - Consistency - Automation - Community - Reusability - Examples of tools: Sceptre/Terraform/Troposphere Infrastructure as Code

8. - Landing Zone / POC - Docker EE Swarm Execution Plan

9. - Learning Curve - Networking - Built into Docker EE Docker Swarm TEST STAGING • Signature verification • Native encryption Scanning SigningAutomated PoliciesDocker for Mac or Docker for Windows PRODUCTION

10. Docker Swarm Registry UCP

11. - Landing Zone / POC - Docker EE Swarm - Build & Deploy to Swarm - Enabling Gates Execution Plan

12. - Accountability - Enforcement Gates - Security - Automated CVE checks - Consistent Building - Quick Promotion CI/CD Pipeline

13. - Landing Zone / POC - Docker EE Swarm - Build & Deploy to Swarm (Jenkins) - Enabling Gates - Product Delivery Execution Plan

14. Lock and Alert Product

15. Dockerized Applications - API Services (Microservices) - Lock and Alert WebApp - CS Agent Portal - Batch/Offline Jobs Infrastructure Tools - New CI/CD Pipeline - Infrastructure as code Mobile Apps - iOS - Android What did we build

16. - Networking - Mobile App Integration - Logging - Scheduled/Offline jobs - DTR Image Building - Swarm Stack yaml Hurdles during Build

17. Networking Challenge 10.1.2.3/X10.1.2.3/X 10.1.2.21 10.1.2.2110.1.2.20

18. - Delivered a new product in 3 months - Greater Transparency at all levels - Faster deployment cycles - Quicker detection and remediation cycles - Rolling Update and Automated Rollback - Able to scale better - Built environments using infrastructure-through-code - Deeper and Wider Metrics capabilities What we accomplished

19. - Security is a constant activity - Improve not just toolset but process and thinking - Get buy-in from all IT groups - Faster and secure SDLC - Developers are more productive - Focus on product without compromising security Conclusion

20. Thank you for your attention! Q and A

Faster safer and 100 user centric application at equifax with docker

Recommended

More Related Content

What's hot (20)

Similar to Faster safer and 100 user centric application at equifax with docker (20)

More from Docker, Inc. (20)

Recently uploaded (20)

Faster safer and 100 user centric application at equifax with docker