Writing, Talks & Podcasts

Things I've written & said

Articles, conference talks, podcasts, and research on security, cloud, and building teams and products.

Been a few years since I've written anything. I'm writing again, mostly on security and AI.

Articles

VentureBeat · 2023

How Generative AI Is Creating New Classes of Security Threats

 The New Stack · Jun 2023

Security as Code Protects Rapidly Developing Cloud Native Architectures

 DZone · Jan 2023

Why Platform Engineering Is Not at Odds With DevOps

 Security Magazine · Oct 2022

The Path Forward Through the Security Talent Shortage

 DevOps.com · Aug 2022

The Everything-as-Code Revolution and the OWASP Top 10

 VentureBeat · 2022

Don't Forget Open Source Software (OSS) When Assessing Cloud App Security

 Medium · Jul 2020

Security at the Speed of Modern Development

Talks

RSA Conference · 2023

A Journey in Building an Open Source Security-as-Code Framework

 DevOpsDays Chicago · 2022

Stories from the Trenches – Democratizing Security with Modern Development

 Secure360 · 2022

Why All Speed and No Security Make Infrastructure as Code a Risky Business

 ONUG · Fall 2021

Shift Left and Its Role in Driving DevOps Adoption

 ONUG · Spring 2021

Cloud Native DevOps and Digital Transformation: Today and Tomorrow

 DCOSS · 2008

SAKE: Software Attestation for Key Establishment in Sensor Networks

Podcasts

Secure Ventures · Apr 2023

On Modern Security Architecture Design and Security as Code

Research

Shah, Perrig, Sinopoli · 2008

Mechanisms to Provide Integrity in SCADA and PCS Devices