GitLab PubSec & Regulated Industries, 25 Sep 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Commit Virtual 2020: Enabling the Tactical Edge through DevSecOps in a Box

Description

Speaker: Anshuman (Andy) Patel

The ability to have the most recent, updated information at the tactical edge—where there is no or intermittent network connectivity—can save lives or cause the loss of a battalion. Constantly updated evolutionary data in the form of “DevSecOps in a Box” can enable operations at the tactical edge and give the ability to modify any application to fit an environment, updating intermittently when a network is established. Warfighters, airmen, marines, sailors, and other sectors of the military rely heavily on this capability.

Learn how tactical applications like logistics, cyber, information gathering, and ISR are using offline capabilities for DevSecOps to meet field requirements securely and reliably.

Get in touch with Sales: http://bit.ly/2IygR7z

A

The ability to have the most recent updated information at the tactical edge where there's no or intermittent network connectivity, can save lives or can cause a loss of a battalion. Andy patel with jasper solutions is going to talk to us about enabling the tactical edge through devsecops in a box. That's where they've created a capability to enable operations at the tactical edge and give the the ability to modify any application to fit an.

B

B

Hey everyone- this is andy patel from jasper solutions, hope everybody's doing. Well, uh how familiar are you guys with mission requirements and field operations? Support supporting of our warfighters sailors, airmen and and marine personnel at the tactical edge, um takes a slightly different approach right than your traditional applications and what you guys do today, while working with customers um today, I'm here to talk about really the tactical edge in a box using devsecops and multi-cloud capability to support our warfighter needs and disconnected and disjoined in network here's.

B

The agenda for today, primarily talking about our journey through devsecops devsitcom's pipeline and some of the lessons learned, we'll provide some overview overview as to what we actually do and how we are actually doing some of the tactile tactical ad solutions. Today, a jasper strategy is based on two simple tenants uh mission impact where we weld technology from back office function to a core part of our capabilities and operating at mission, speed where we can quickly take ideas from lab to create competitive solutions.

B

What problems are we trying to solve today? So we primarily focus on u.s public sector. Deliver real solutions to our operations. Team provide timely security to all of osi layers, meet dod and u.s government compliance requirements enable enable developers to move fast to deliver code at the tactical edge near zero down time, enable development first mentality and support multi-cloud across go cloud as well as commercial cloud.

B

Our journey to devsecops an actionable plan uh pipeline focus software development and deployment uh enable application that utilizes artificial intelligence and machine learning at the edge and security and continuous authority to operate at all times.

B

Automation is everything so, as I'm sure, all of you guys are familiar infrastructure as a code primarily plays a key role in developing and deploying a policy as a code is something we have adapted to at jasper, where we actually enforce policies and a single policy that actually drives anything from on-premise uh tactical edge uh to any cloud in between that supports. The overall requirement.

B

uh Containerization kubernetes, sdos, rancher service, mesh and ami are primarily the tools that we utilize for platform deployment and scalability options and service, reliability and monitoring using gitlab, obviously across um regardless of where your application resides from on premise to multi-cloud and at tactical edge.

B

So we primarily focus on the problem scenario or a problem statement, understanding, government and customer requirements as first and foremost designing a specific software using gitlab and identifying infrastructure components that supports multi-cloud uh and obviously that moves into the development and build and unit test.

B

And then you primarily are focused on deploying code uh to itss production and monitoring the health. Obviously we do uh work on a lot of scenarios such as low to high cross-domain solutions and currently supporting high to low now to actually support the code moving from different in various classifications of networks.

B

There are many different ways, obviously, as you guys are familiar primarily to deploy and using containerization approach, as well as rancher sdos kubernetes.

B

So we focus on the software development as first and foremost, and make the flat the software flexible and enable that tactical edge, even without minimal to no network connectivity and then focus on the infrastructure as the end part of it disconnected network and sensors application development must support, disconnected and minimal network connective connectivity.

B

This really is primarily the biggest challenge for tactical edge today, and it has been for some time. Our team primarily is focused on supporting applications that enable artificial intelligence machine learning code cyber code, as well as existing applications at tactical edge and more than oftentimes. There is no network connectivity or minimal network connectivity, so we've tried to focus on building applications that can actually support, uh disjointed or disconnected networks and still maintain and provide the ability to operate.

B

Key mission sets container orches, orchestration infrastructure provision, prisoners, governors and enforcements across any cloud. Obviously, containerization is taking a center stage. uh Infrastructure provisioner is primarily supporting anything from on-prem to multi-cloud, gun cloud or commercial. In government enforcement um government plays a key role in how we actually set up the policies across the entire infrastructure as well as applications.

B

How do we maintain an ato across any cloud and to ensure that we provide a continuous ato to enable government agencies to operate at full speed? The mission, some of the lessons learned that we have done same code everywhere, is the principle and fundamental value that our team carries from the very beginning of when we start actually addressing to the customer needs and the requirements.

B

Automation and policy plays a key role to ensure all code and infrastructure components remains identical. What does that really mean? It's primarily automation and policy that drives pretty much the entire software life cycle delivery from beginning to the end, security first mentality? Again, I think I have addressed it that you know talking about the continuous ato.

B

We primarily use nist, pascal and machine learning processes and all related on top of the gitlab pipeline that primarily addresses to the security first mentality, where we can do checks and balances across continuous fashion, while the code is being developed and the code is being deployed and then build pipeline to fit customer needs um adaptive changes at all times and identify gaps.

B

What we have learned over the years is there are times that certain tools and certain infrastructure components may not support the requirements that every customer needs. So we are constantly adapting and making changes to ensure that the customer comes first and we deliver uh what what really our customer is asking and then test and then build testing is key components to make sure that anything that we actually deploy on the tactical edge.

B

If it's using a tactical fuel kit or a fly away kit, then ensuring that we test fully the connectivity uh to some other scenarios that may play out in disconnected or dis uh disjoint the network, and how do we support multiple enclaves and provide the security for a network across all outside layers is key components.

B

Thank you very much, really appreciate it. Any questions or.

B