Speaker:
Kelly Shortridge
Fastly

Abstract:
Organizations across industries are investing more in software delivery to achieve their goals, with the most modern engineering teams seeking to deploy software on-demand to continuously create value.

Intuitively, this intensified importance and acceleration should result in intensified impact when software fails. In practice, software engineering teams successfully sustain adaptation to adverse scenarios -- attacks or otherwise -- precisely because they adopt modern software delivery approaches like open source software (OSS), DevOps practices, and automation.

These practices make it easier, cheaper, and more reliable to produce secure software. So, why is the cybersecurity community resisting? Why does the cyber industrial complex view OSS as more of a friend than a foe? In this lecture, we will dismantle cyber status quo's pervasive misconceptions of modern software delivery and discover the bountiful security benefits these practices can gift us.

About:
Kelly Shortridge is a resilience and cybersecurity expert who works with organizational leadership to modernize their technology programs. Best known as an international keynote speaker and lead author on the book Security Chaos Engineering: Sustaining Resilience in Software and Systems, she helps organizations of all sizes around the world improve their resilience and software security strategy to deliver real value and support growth through a sociotechnological transformation of their systems — their people, processes, tech, and architecture.

In her spare time, she also publishes research papers, writes essays on her blog, and provides her expertise to top global technology publications.

The weekly security seminar has been held every semester since spring of 1992. We invite personnel at Purdue and visitors from outside to present on topics of particular interest to them in the areas of computer and network security, computer crime investigation, information warfare, information ethics, public policy for computing and security, the computing "underground," and other related topics. More info