Redefining the next decade of cybersecurity: AI-powered security built to empower developers - SEC2732M

[jricciardi]

Wednesday, Nov 811:15 AM - 11:45 AM PST
AI is ushering in a new era for security, presenting some of the most promising opportunities to secure code from the start. Join us as we explore GitHub Advanced Security’s mission in this new paradigm, and how AI-powered security solutions will position developers as leaders in a global security strategy. We’ll reflect on how GitHub helped make a positive impact in application security over the last year, shed light on what’s next, and explore the intricate dynamics at play as AI becomes a cornerstone feature in the industry. Together, we'll redefine the concept of shifting security left and shape the security landscape for the next decade.

We're getting started now with @mph4! Watch along on the Universe portal

Read more about GitHub's latest Security features in our blog post Introducing AI-powered application security testing with GitHub Advanced Security

Mike Hanley
Chief Security Officer and SVP of Engineering, GitHub

Mike Hanley is the Chief Security Officer and SVP of Engineering at GitHub. Prior to GitHub, Mike was the Vice President of Security at Duo Security, where he built and led the security research, development, and operations functions. After Duo’s acquisition by Cisco for $2.35 billion in 2018, Mike led the transformation of Cisco’s cloud security framework and later served as CISO for the company. Mike also spent several years at CERT/CC as a Senior Member of the Technical Staff and security researcher focused on applied R&D programs for the US Department of Defense and the Intelligence Community. When he’s not talking about security and engineering at GitHub, Mike can be found enjoying Ann Arbor, MI with his wife and eight kids.

[jricciardi]

[jricciardi]

Currently on-stage: Asha Chakrabarty!
VP, Product Management, GitHub

Asha Chakrabarty is the Vice President of Product Management for Security & Compute products at GitHub. Prior to joining GitHub, Asha was at Amazon Web Services (AWS) for 9+ years and wore multiple hats. Most recently at AWS, she led a global team of GTM and Product Specialists for AWS’ Container Services portfolio. Over the past 16+ years, her experience spans cloud computing, software development, modern application architectures, infrastructure design, and developer tools. Asha is based out of Austin, Texas where she spends her spare time with family, attempting to become a wine and dark chocolate connoisseur, and honing her novice photography skills.

[jricciardi]

Announcing 📢 AI-generated remediation auto fixes to security issues right in your pull requests: "Review, edit, and merge fixes to vulnerabilities in real time"

[jricciardi]

Read more about the Security Overview dashboard beta in this announcement: https://github.com/orgs/community/discussions/74687

Learn more about the new overview dashboard and send us your feedback

[jricciardi]

70 improvements to GitHub's security products in 2023! That's a lot of 🚢 s!

And what does that mean? 32 MILLION security issues resolved 🤯

[jricciardi]

Welcome to the stage Robert (Chief Security Officer, Sierra Nevada Corporation (SNC)) and Brittany (Director PMM, GitHub)!

Robert Daugherty
Chief Security Officer, Sierra Nevada Corporation (SNC)

As Chief Security Officer for Sierra Nevada Corporation (SNC), Robert Daugherty leads a holistic Security Program that includes Classified Networks and Programs, Classified Facilities, Counterintelligence, Cybersecurity, Insider Risk, Personnel Security, Operational Security, Business Continuity, Crisis Management, and Safety. SNC’s Security Program is recognized by the USG as being one of the top performing in all of industry with multiple DCSA Cogswell Awards for program excellence. Armed with an MBA, BCompSc, and CISSP, CISM certifications, Robert’s extensive background includes 25+ years of moving organizations toward excellence by leveraging technology to improve mission in rapidly evolving high-growth startup business units, highly matrixed enterprises, critical infrastructure, and the Defense and Intelligence sectors. Robert’s security mantra is “assume breach”; organizations must adopt a proactive counterintelligence, data-driven and risk-based mindset, constantly hunting for and quickly detecting anomalous internal and external activity.

[jricciardi]

Awesome shot of the interview from the front row!

[jricciardi]

Loads of great quotes in this interview! But gotta love "Security is a full contact team sport"

[jricciardi]

And rounding us out with this great slide! Thanks for joining the session (or just checking out these highlights 😄 )

[Demoniker]

Well, as we embark on this journey into the next decade of cybersecurity, it's crucial to consider all our options. While GitHub's offerings are undoubtedly impressive, I believe it's wise to explore a variety of cyber security solutions to ensure comprehensive protection against ever-evolving threats.
In addition to GitHub Advanced Security, I'd recommend looking into other cyber security platforms and tools. Diversifying our approach to security not only strengthens our defenses but also ensures resilience in the face of diverse attack vectors.