Name: 2023 DevSecOps Info Day: Tales From the Front Lines – Delivering on The Promise
Start: 2023-04-11T22:57:00Z
End: 2023-04-11T22:57:13.000Z
Location: BrightTALK
Rating: 0

The Object Management Group® (OMG®) is an international, open membership, not-for-profit technology standards consortium. Founded in 1989, OMG standards are driven by vendors, end-users, academic institutions, and government agencies.

25 years ago, the Object Management Group's (OMG) Unified Modeling Language enhanced modeling efficiency in software intensive systems and continues to be used by engineers worldwide today. It is now considered by many, that OMG's Essence standard will have an even greater global impact because it can be integrated into every facet of the software engineering process. 

This webinar provides an overview of Essence, a demo of how it is used today, various use cases, and a preview of future implementations.

Essence – Redefining Software Engineering

25 years ago, the Object Management Group's (OMG) Unified Modeling Language enhanced modeling efficiency in software intensive systems and continues to be used by engineers worldwide today. It is now considered by many, that OMG's Essence standard along with its updated 2.0 version will have an even greater global impact because it can be integrated into every facet of the engineering process. Going beyond software engineering to include all engineering processes.

This webinar provides an overview of the intent of Essence v2.0 and how to get involved in this latest version.

Towards Essence 2.0: Removing Engineering Limitations

Governments, social scientists, technologists, and even the heads of AI organizations are expressing concerns about the potential misuse of the power unleashed by Foundation Models and Generative AI. Many nations and organizations have already started taking steps to regulate this powerful technology to prevent possible misuse and disruption of the societal fabric. Fear and concerns are synonymous with the approach toward nuclear technology worldwide. 

The teams of the Object Management Group (OMG) Responsible Computing Initiative launched a Tiger team to study and evaluate the potential concerns regarding Generative AI Techniques (GAIT) and recommend ways to channel the capabilities of GAIT responsibly to benefit society. 

Specific objectives include investigations on how to:

- Instill trust and reduce bias in the data used to build GAI models.
- Recommend proper and ethical use of AI models whilst protecting the intellectual rights of authors, artists, and other professionals.
- Regulate the proliferation of AI models to ensure no disruptive effects on employment, society, and the environment.
- Educate the consumers, administrators, and governmental bodies on the dangers and limitations of excessive use of AI models.

The different tracks of this initiative are:

• Ensure trustworthy Generative AI Models, which must be based on accurate and unbiased data.
• Impact on the Labor market, especially many white-collar jobs like copywriters, interpreters, and even professionals like investment advisors, editors, lawyers, customer support professionals, creative writers, doctors, etc.
• Issues related to IP, copyright violation, ownership, royalty, etc.
• Impact on the environment with the power-hungry deep learning process to build(train) GAI models.

Michael Linehan (OMG) and Cheranellore Vasudevan (IBM) will present their thoughts as they start their work on this initiative.

Responsible Generative AI

Systems Modeling Language™ v2 (SysML® v2), whose beta version was just adopted by our Board of Directors and is currently in its finalization phase, will enable modeling of increasingly complex systems as part of the evolving practice of model-based systems engineering, and provide improved precision, expressiveness, consistency, usability, interoperability, and extensibility over SysML v1.

The collection of SysML v2 specifications were submitted to the OMG Board of Directors for approval as beta specifications and have entered their finalization phase. The SysML v2 submission concluded five years of development with representation from over 80 organizations, resulting in three specifications and an open-source pilot implementation to validate them. It is anticipated that the final adopted specifications will be approved by the OMG in 2024 and that some of the tool vendors will have commercial SysML v2 implementations available at that time.

This webinar includes two parts presented by the co-leaders of the SysML v2 Submission Team. The first part includes an overview of SysML v2 capabilities and a comparison of SysML v2 with SysML v1, while the second part addresses some of the key language design decisions that led to the current specifications and the rationale for those decisions.

Systems Modeling Language™ v2 (SysML® v2) Overview

Cloud users are constantly subjected to a confusing barrage of claims and counterclaims. Myths about cloud computing abound, from exaggerated promises from vendors to the FUD (fear, uncertainty, and doubt) that is sometimes no more than resistance to change.

There are websites and publications that address cloud computing myths and some of these sources are useful, but many are derivative, repetitive, simplistic, or poorly reasoned. The OMG Cloud Working Group has captured the collective knowledge of its members to publish a neutral analysis of thirteen prevalent myths entitled Cloud Myths & Realities, which covers such hotly debated topics as cost, security, ease of management, and more. This webinar briefly addresses those myths and most will find this discussion paper a useful companion to our other 37 Publications, such as the Practical Guide to Cloud Computing, and will help cloud customers make better decisions about cloud services.

Cloud Computing Myths & Realities

Lucile and Stephane motivate you to see IT differently in this thought-provoking presentation. Starting by introducing responsible computing and green IT, they move on to show what makes a typical web page, what happens with the processing, and why many parts can be removed, saving energy, costs, and improving user retention, which is linked together.

How to Spot the Waste in IT and Web Development

Software now powers everything from smartphones and cars to medical devices and critical infrastructure. However, with the rise of cyber threats and recent government orders, it is crucial to clearly understand what components are in the system, where they came from, who has had access to them, whether they are subject to licenses, and whether they harbor known vulnerabilities. This is where Software Bill of Materials (SBOM) comes in.
 
Join us for an informative webinar on SBOM. In this webinar, you will learn how Software Component Analysis (SCA) is key to having an up-to-date SBOM and get answers to these critical questions:

1. Why are SBOMs critical for software development, security, and compliance?
2. How are SBOMs implemented and used to control software supply chain risks?
3. What are the contents of an effective SBOM?
4. What are the challenges and risks associated with SBOM implementation?
5. What are tools and best practices for creating and maintaining an effective SBOM?
 
This webinar is ideal for software developers, security professionals, compliance officers, IT managers, and anyone interested in learning about SBOM and its impact on software supply chain management. Don't miss this opportunity to gain valuable insights and ask questions to our expert speaker. Register now!

SBOM 101: How to Control Software Supply Chain Risks Like a Pro

Join us for a tour of the Responsible Computing Self-Assessment. The self-assessment charts a journey and provides recommendations based on responses to achieving sustainable practices in ICT environments for technology vendors and their clients, assessing six domains: Code, Data Center, Data Usage, Impact, Infrastructure, and Systems. 

The self-assessment is available to the public on our website: https://responsiblecomputing.net/responsible-computing-self-assessment/

Our members are working on a maturity model and deeper assessment, which will be available to our member organizations to provide a more profound framework of how to be a responsible computing leader.

Introducing the Responsible Computing Self-Assessment

The UAF is the latest modeling specification for systems of systems (SoS) modeling. It is designed to cover all the viewpoints from the latest defense architecture frameworks, namely DoDAF, MoDAF, NAF and others. The UAF is a very rich specification with several layers (domains) and aspects (“model kinds”) and while it is very rich and expressive, how to apply it in a real-life context can be quite challenging. One challenge is how to translate concepts of operation, existing and future capabilities, planning and acquisition strategy into a concrete UAF model. Another challenge is how to properly use the various levels of abstractions across its domains to enable reuse across different concrete realizations. Yet another challenge is that UAF does not exist in isolation and needs to be integrated with a broader set of lifecycle tools, such as requirement tools, system models in SysML, planning tools, simulation tools and others.  

In this demo, we describe how we transform conops documents and requirements into an actual UAF model using an emergency response system, which is a SoS. We demonstrate how the various UAF aspects are modeled, how the UAF modeling environment is integrated with a requirements management system, how the UAF technical views are integrated and transformed into SysML system models, and how roadmaps and plans are integrated with planning tools. We will also show how behavioral aspects of the SoS UAF models are simulated to validate them and reason about the behavior of the overall SoS. The overview will include demonstrations using an actual set of tools typically used in engineering environments.

UAF Tool Vendor Roadshow (Dec 2022) - IBM Rhapsody

Jason Hunter, Digital Transformation PM (US Navy - NAVSEA, PEO IWS)
https://www.linkedin.com/in/jason-hunter-b4b33213

https://www.omg.org/devsecops/
c4i-chair@omg.org

2023 DevSecOps Info Day: Achieving Rapid Capability Creation to USN Deployment

Nicholas Gallo, Senior Specialist Solutions Architect (RedHat)
https://www.linkedin.com/in/nicholas-gallo-57b14278

https://www.omg.org/devsecops/
c4i-chair@omg.org

2023 DevSecOps Info Day: An Open Approach to DevSecOps Standards

Rob Cameron, Principal SDE Lead (Microsoft)
https://www.linkedin.com/in/robcamer

In this session, the presenter will discuss lessons learned and approach in three years of coding-with / building-with the Department of Defense using Azure DevOps, GitHub, and GitLab implementing DevOps and DevSecOps pipelines as part of build-low / deploy-high as well as disconnected deployments.

https://www.omg.org/devsecops/
c4i-chair@omg.org

2023 DevSecOps Info Day: Building DevOps/DevSecOps Pipelines to Meet DoD Op Reqs

Matt Wilson, Group VP (SimVentions)
https://www.linkedin.com/in/mattwilsonsimv

Although the concept of DevOps / DevSecOps is generally understood and widely adopted across the software development landscape there is limited opportunity for innovative third-party tools to work in or across implementations. This session will explore how standards have enabled
past innovation and competition in other domains and how they could open up opportunity for enhanced value, simplification, scalability, adaptation, and integration of the DevSecOps landscape.

2023 DevSecOps Info Day: Enabling Value Added Capabilities To A DevSecOps World

Anil Karmel, Co-Founder & CEO (RegScale)
https://www.linkedin.com/in/anilkarmel

There's been a push in our industry to make security real-time, continuous, and complete. As such, many tools have emerged, including Cloud Security Posture Management (CSPM) solutions, Vulnerability and Code Scanners, etc., to try and find issues before they occur. However, we're still managing compliance in Word documents and Excel spreadsheets that are instantly out of date the moment they are created. With the rise of the API economy, cloud, and modern development tools, the time has come for compliance to be reimagined leveraging a cultural transformation coupled with standards and tooling. During this session to learn how we can bring the principles of DevOps to Compliance in a new discipline called Regulatory Operations (RegOps).

https://www.omg.org/devsecops/
c4i-chair@omg.org

2023 DevSecOps Info Day: RegOps Bringing the Principles of DevOps to Compliance

Bill Beckwith, CEO (Objective Interface Systems)

DevOps is frequently defined as "a set of practices intended to reduce the time between committing a change to a system and the change being placed into normal production, while ensuring high quality". The tools that became commonly used in DevOps to automate the system configuration required pervasive privileged system access. Unfortunately these tools did not have
the requisite security robustness to support the broad responsibilities of pervasive privileged system access. Initially, DevSecOps was an attempt to configure these tools so that the system security was not dramatically weakened by their use. Over time, many organizations redefined DEVSECOPS as the processes to ensure that the system is born with and maintains a secure configuration.

https://www.omg.org/devsecops/
c4i-chair@omg.org

2023 DevSecOps Info Day: DevSecOps for Agile System Construction, Op, & Sustain

Christine Judd, Vice President of Unmanned Systems Division (Metron)
https://www.linkedin.com/in/juddchristine
Matthew Judd, Autonomy Software Architect & Developer of Unmanned Systems Division (Metron)
https://www.linkedin.com/in/mjudd220

Metron delivers multi-mission performance across a wide range of mission parameters and commercial applications. Through multi-agent system integration and control, we can reduce real-time decision making processes to save time, resources and achieve mission objective results. Deep water applications require a robust AUV solution designed with modularity and fault tolerance, guided by a dynamic world model. When you can efficiently obtain modularity through the loose coupling of typical AUV tasks such as navigation, sensor processing, and interaction with platform specific hardware, then you can achieve the maximum impact for your operations. Metron has spent the past 12 years as a leader in UUV development, and DDS has enabled rapid development and deployment of our technology for underwater applications.

Commercial Resilient Underwater Autonomy Solutions Utilizing The DDS Standard

The DDS® standard is for data-centric distributed systems that enables developers to build distributed applications with real-time, highly available, secure, low latency data access and exchange. Its architecture is based on the publish/subscribe messaging paradigm, allowing applications to send and receive data without having to establish direct connections with each other. Applications can subscribe to topics published by other applications and vice versa, allowing for a wide range of data exchange scenarios, data delivery reliability and scalability. It is often used in industries such as automotive, aerospace, industrial automation, healthcare, and finance. Its distributed data communication capabilities make it well-suited for use cases such as autonomous vehicles, industrial automation, smart grids, logistics systems, and more.

Join the DDS Foundation for an informative and interactive mini-forum on the DDS® standard. Whether you're new to DDS or an experienced user, this event will provide you with updates on the DDS protocol, interoperability with other standards, use cases and more. The session concludes with a panel discussion and audience Q&A. Learn why the DDS standard has been adopted by companies such as Intel, IBM, Microsoft, Bosch, and Siemens.

Get involved today by visiting https://www.dds-foundation.org/ or contacting DDSF-info@omg.org.

2023 DDS Forum

David Overeem, Systems & Software Engineer (Boeing Space Systems)

Bio: David is currently the Product Owner for Boeing's next generation of spacecraft command and control software. In that role, he brings more than 20 years of experience operating, maintaining, integrating, and developing spacecraft ground communications software across a spectrum of programs, flight platforms, and supporting vendors.

https://www.omg.org/devsecops/
c4i-chair@omg.org

2023 DevSecOps Info Day: Tales From the Front Lines – Delivering on The Promise

Development Operations

DevOps

Development Security Operations

DevSecOps

Automation

Security

IT Lifecycle

Security Automation

Continuous Integration

Continuous Deployment

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The IT project management community on BrightTALK includes thousands of IT project and portfolio management professionals. Find relevant webinars and videos on agile methodologies, scrum strategy, project management processes and more. Attend live webinars or view on demand content presented by recognized thought leaders in the IT project management industry.

IT Project Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

2023 DevSecOps Info Day: Tales From the Front Lines – Delivering on The Promise

Presented by

About this talk

More from this channel