Ir al contenido principal

Spotlight on GitHub Advanced Security

Únase a Microsoft Reactor e interactúe con startups y desarrolladores en directo.

¿Todo listo para empezar a usar la IA? Microsoft Reactor proporciona eventos, formación y recursos de la comunidad para ayudar a startups, emprendedores y desarrolladores a crear su próximo negocio con tecnología basada en IA. ¡Acompáñenos!

Spotlight on GitHub Advanced Security

Únase a Microsoft Reactor e interactúe con startups y desarrolladores en directo.

¿Todo listo para empezar a usar la IA? Microsoft Reactor proporciona eventos, formación y recursos de la comunidad para ayudar a startups, emprendedores y desarrolladores a crear su próximo negocio con tecnología basada en IA. ¡Acompáñenos!

Volver

Spotlight on GitHub Advanced Security

  • Formato:
  • alt##LivestreamLivestream
  • alt##In personEn persona (Multiple locations)

Tema del evento: Seguridad, Seguridad de la IA y gobierno de datos, IA básica

Idioma: Inglés

  • Eventos de esta serie:
  • 13

Welcome to the GitHub Advanced Security series – enabling you to deliver native, developer-first application security on both GitHub and Azure DevOps. Whether you’re new to GitHub Advanced Security or looking to expand your knowledge, we’ll help you learn how to scale and optimize security in your development pipelines, while also diving deeper into specific features. This content is geared towards anyone who wants to improve their code security, from developers and security engineers to DevSecOps managers and CISOs.

Próximos eventos

Haga clic en un evento a continuación para obtener más información y registrarse en eventos individuales.

A todas las horas en - Hora universal coordinada

nov.

18

lunes

2024

KPMG & GitHub Partner for Auto-Fix with Copilot to Remediate Vulnerabilities at Scale

9:00 p. m. - 10:00 p. m. (UTC)

Found Means Fixed - How KPMG is Partnering with GitHub for Auto-Fix Powered by Copilot for Remediation of Vulnerabilities At-Scale Your application security program will either succeed or fail based on developer adoption of your security tools. Once these security tools are enabled and adopted across your enterprise, the next biggest challenge is remediation (or fixing) these found vulnerabilities at-scale. Enter "Found Means Fixed", GitHub's latest tagline for leveraging industry leading Artificial Intelligence (powered by Copilot) to help fix thousands of vulnerabilities at the click of button. This session will cover how KPMG is providing a world-class services offering centered around "Campaigns" for enterprises leveraging GitHub's Advanced Security auto-fix solution. Campaigns will revolutionize how enterprises think about, plan for, and eliminate application security debt at-scale. Viewers will receive a behind-the-scenes look at the underlying technology and and the people and processes that will change the way DevSecOps practitioners think about managing significant security debt. Did we mention that we can eliminate security debt at-scale? Please join us for what is sure to be an exciting discussion around this game changing technology!

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: IA básica

Idioma: Inglés

Detalles

Oradores

Eventos anteriores de esta serie

A todas las horas en - Hora universal coordinada

abr.

10

miércoles

2024

Introduction to GitHub Advanced Security

5:00 p. m. - 6:00 p. m. (UTC)

In this session Ray Kao will share an overview of GitHub Advanced Security key features including code scanning, secret scanning, and supply chain security.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

abr.

24

miércoles

2024

GitHub’s AI + Security Story

5:00 p. m. - 6:00 p. m. (UTC)

Join us as Lindsey Bocatto and Dan Shanahan highlight the latest AI-powered features in GitHub Advanced Security.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

may.

08

miércoles

2024

Integrating Security into CI/CD Pipelines

5:00 p. m. - 6:00 p. m. (UTC)

In this session, learn how to set up GitHub Advanced Security into your GitHub and Azure DevOps pipelines to keep your developers engaged and ensure security throughout your development cycles.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

may.

17

viernes

2024

Accelerate Application Security with GitHub AI

2:00 p. m. - 6:00 p. m. (UTC)

This session will showcase GitHub's new AI-powered application security testing capabilities and cover how Microsoft views the code to cloud security synergy between GitHub Advanced Security and Defender for Cloud. The event will include educational sessions and hands-on labs. Participants will have the opportunity to connect with each other, elevate their expertise, and enhance their development capabilities. Agenda: GitHub AI-powered application security testing Code to cloud security with GitHub and Microsoft Hands on lab: strategically roll out your security program with GHAS and Defender for Cloud.

  • Formato:
  • alt##In personEn persona (New York)

Tema del evento: Seguridad de la IA y gobierno de datos

Detalles

jun.

05

miércoles

2024

Investigating code security with Copilot

5:00 p. m. - 6:00 p. m. (UTC)

In this talk we provide a brief walk-through using Copilot to aid in detecting and fixing security vulnerabilities in source code. Topics covered include: A basic introduction to improving SDLC security using IDE and local environment tools Detecting OWASP Top 10 style vulnerabilities in an example application Remediating detected issues Creating .gitignore files to prevent environment files being committed Looking at how GHAS can be combined with Copilot to improve security further.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

jun.

19

miércoles

2024

Automated Governance: Making the Right Thing the Easy Thing

5:00 p. m. - 6:00 p. m. (UTC)

Developers deserve the chance to do the right thing. Leadership doesn’t always make it so easy. But in the face of mounting regulations and an ever-changing landscape of application security risks, the opportunity to turn obstacles into opportunities has never been more evident. This week’s guests are industry leaders in the field of software governance. Caleb Queern is the Managing Director of Cybersecurity at KPMG. Michael Edenzon is the Co-Founder and CEO of Fianu, and previously served as the Director of DevOps at PNC Bank. In 2022, Michael and Caleb co-authored the business novel Investments Unlimited, a fictional story about a bank’s journey toward automated governance. What began in 2019 as an industry-led whitepaper has become a movement encompassing AppSec, DevOps, and software supply chain security. At the heart of this movement are platforms like GitHub Advanced Security and Fianu. Caleb and Michael will tell the story of automated governance, the successes and pitfalls of large enterprises that aim to implement it, and how the principles of flow, fast feedback, and continuous improvement can be preserved so that you and your organization can thrive amidst an ever-growing landscape of rules and regulations. Learn more about the series!

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

jul.

10

miércoles

2024

Navigating the depths of API security testing with 42Crunch and Microsoft

5:00 p. m. - 6:00 p. m. (UTC)

In this session, we’ll explore the hidden risks that threaten APIs and delve into vulnerabilities within your codebase. From scanning OpenAPI specs to dynamic testing, we’ll equip you with practical strategies to harden your APIs against attacks. Discover how to seamlessly integrate security practices into your DevOps pipelines. Let’s build a robust shield together! Don’t miss this opportunity to enhance your API security expertise.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

jul.

24

miércoles

2024

Application Security Where Developers Live - GitHub and Endor Labs

5:00 p. m. - 6:00 p. m. (UTC)

Developers invest a lot of time and effort into their code, making sure it safely delivers innovation and value to users. Unfortunately, a lot of that effort is wasted investigating security findings that ultimately represent no risk to the application. With the GitHub Advanced Security integration, Endor Labs enables development teams to establish efficient, automated processes to deliver software while eliminating 80% of the security noise that wastes developer time.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

ago.

21

miércoles

2024

Scaling AppSec in the world of AI generated code - GitHub and Endor Labs

5:00 p. m. - 6:00 p. m. (UTC)

Find vulnerabilities earlier, ship software faster. These are the good intentions behind the drive to shift application security workflows from security teams to developers: a “shift left” move in the software development lifecycle. But does it really work? Hear from leading experts on how AI can help automate security work and make it more developer-centric, topics will include: Secure open source and LLM selection Prioritize risk based on what is reachable and exploitable Remediate at scale without context switching

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

sept.

25

miércoles

2024

How GenAI is making Application Security harder... and easier!

5:00 p. m. - 6:00 p. m. (UTC)

Description: The rapid adoption of frameworks, DevOps, CI/CD, and agile processes has increased the velocity at which development teams can iterate and deliver, outpacing security teams' ability to address issues. The introduction of GenAI has exacerbated this problem by further increasing delivery velocity and requiring more APIs to interact with AI. In this session, Scott Gerlach will discuss how to ensure your code is protected in a GenAI-driven software development environment.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

oct.

23

miércoles

2024

Accelerating Innovation: Improving Application Security in the Age of AI

5:00 p. m. - 6:00 p. m. (UTC)

As AI has taken the world by storm, we are seeing tremendous productivity gains and increased development speed across the public sector. However, while GitHub Copilot is a fantastic productivity tool and can help write secure code more efficiently, it is not a replacement for proper code review and application security practices. GitHub disrupted the industry by bringing our industry leading application security capabilities to the GitHub Enterprise Cloud. Today, we deliver application scanning, secret scanning, and software supply chain security and allow developers to find and fix vulnerabilities as they code, removing the need for context switching and helping to reduce noise with our high true positive rate. Additionally, with the introduction of GitHub Copilot, we've taken this a giant step further by releasing auto-remediation capabilities. "Found means fixed". Join us for this highly interactive discussion where we'll be diving into GitHub Advanced Security, addressing frequently asked questions around everything from feature functionality, security, roadmap and providing resources so that you can get started today!

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

Registrarse para esta serie

Inicie sesión con su cuenta de Microsoft

Iniciar sesión

O escriba su dirección de correo electrónico para registrarse

*

Al registrarse para este evento, acepta cumplir con el código de conducta de Microsoft Reactor.

Eventos anteriores de esta serie

A todas las horas en - Hora universal coordinada

abr.

10

miércoles

2024

Introduction to GitHub Advanced Security

5:00 p. m. - 6:00 p. m. (UTC)

In this session Ray Kao will share an overview of GitHub Advanced Security key features including code scanning, secret scanning, and supply chain security.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

abr.

24

miércoles

2024

GitHub’s AI + Security Story

5:00 p. m. - 6:00 p. m. (UTC)

Join us as Lindsey Bocatto and Dan Shanahan highlight the latest AI-powered features in GitHub Advanced Security.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

may.

08

miércoles

2024

Integrating Security into CI/CD Pipelines

5:00 p. m. - 6:00 p. m. (UTC)

In this session, learn how to set up GitHub Advanced Security into your GitHub and Azure DevOps pipelines to keep your developers engaged and ensure security throughout your development cycles.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

may.

17

viernes

2024

Accelerate Application Security with GitHub AI

2:00 p. m. - 6:00 p. m. (UTC)

This session will showcase GitHub's new AI-powered application security testing capabilities and cover how Microsoft views the code to cloud security synergy between GitHub Advanced Security and Defender for Cloud. The event will include educational sessions and hands-on labs. Participants will have the opportunity to connect with each other, elevate their expertise, and enhance their development capabilities. Agenda: GitHub AI-powered application security testing Code to cloud security with GitHub and Microsoft Hands on lab: strategically roll out your security program with GHAS and Defender for Cloud.

  • Formato:
  • alt##In personEn persona (New York)

Tema del evento: Seguridad de la IA y gobierno de datos

Detalles

jun.

05

miércoles

2024

Investigating code security with Copilot

5:00 p. m. - 6:00 p. m. (UTC)

In this talk we provide a brief walk-through using Copilot to aid in detecting and fixing security vulnerabilities in source code. Topics covered include: A basic introduction to improving SDLC security using IDE and local environment tools Detecting OWASP Top 10 style vulnerabilities in an example application Remediating detected issues Creating .gitignore files to prevent environment files being committed Looking at how GHAS can be combined with Copilot to improve security further.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

jun.

19

miércoles

2024

Automated Governance: Making the Right Thing the Easy Thing

5:00 p. m. - 6:00 p. m. (UTC)

Developers deserve the chance to do the right thing. Leadership doesn’t always make it so easy. But in the face of mounting regulations and an ever-changing landscape of application security risks, the opportunity to turn obstacles into opportunities has never been more evident. This week’s guests are industry leaders in the field of software governance. Caleb Queern is the Managing Director of Cybersecurity at KPMG. Michael Edenzon is the Co-Founder and CEO of Fianu, and previously served as the Director of DevOps at PNC Bank. In 2022, Michael and Caleb co-authored the business novel Investments Unlimited, a fictional story about a bank’s journey toward automated governance. What began in 2019 as an industry-led whitepaper has become a movement encompassing AppSec, DevOps, and software supply chain security. At the heart of this movement are platforms like GitHub Advanced Security and Fianu. Caleb and Michael will tell the story of automated governance, the successes and pitfalls of large enterprises that aim to implement it, and how the principles of flow, fast feedback, and continuous improvement can be preserved so that you and your organization can thrive amidst an ever-growing landscape of rules and regulations. Learn more about the series!

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

jul.

10

miércoles

2024

Navigating the depths of API security testing with 42Crunch and Microsoft

5:00 p. m. - 6:00 p. m. (UTC)

In this session, we’ll explore the hidden risks that threaten APIs and delve into vulnerabilities within your codebase. From scanning OpenAPI specs to dynamic testing, we’ll equip you with practical strategies to harden your APIs against attacks. Discover how to seamlessly integrate security practices into your DevOps pipelines. Let’s build a robust shield together! Don’t miss this opportunity to enhance your API security expertise.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

jul.

24

miércoles

2024

Application Security Where Developers Live - GitHub and Endor Labs

5:00 p. m. - 6:00 p. m. (UTC)

Developers invest a lot of time and effort into their code, making sure it safely delivers innovation and value to users. Unfortunately, a lot of that effort is wasted investigating security findings that ultimately represent no risk to the application. With the GitHub Advanced Security integration, Endor Labs enables development teams to establish efficient, automated processes to deliver software while eliminating 80% of the security noise that wastes developer time.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

ago.

21

miércoles

2024

Scaling AppSec in the world of AI generated code - GitHub and Endor Labs

5:00 p. m. - 6:00 p. m. (UTC)

Find vulnerabilities earlier, ship software faster. These are the good intentions behind the drive to shift application security workflows from security teams to developers: a “shift left” move in the software development lifecycle. But does it really work? Hear from leading experts on how AI can help automate security work and make it more developer-centric, topics will include: Secure open source and LLM selection Prioritize risk based on what is reachable and exploitable Remediate at scale without context switching

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

sept.

25

miércoles

2024

How GenAI is making Application Security harder... and easier!

5:00 p. m. - 6:00 p. m. (UTC)

Description: The rapid adoption of frameworks, DevOps, CI/CD, and agile processes has increased the velocity at which development teams can iterate and deliver, outpacing security teams' ability to address issues. The introduction of GenAI has exacerbated this problem by further increasing delivery velocity and requiring more APIs to interact with AI. In this session, Scott Gerlach will discuss how to ensure your code is protected in a GenAI-driven software development environment.

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

oct.

23

miércoles

2024

Accelerating Innovation: Improving Application Security in the Age of AI

5:00 p. m. - 6:00 p. m. (UTC)

As AI has taken the world by storm, we are seeing tremendous productivity gains and increased development speed across the public sector. However, while GitHub Copilot is a fantastic productivity tool and can help write secure code more efficiently, it is not a replacement for proper code review and application security practices. GitHub disrupted the industry by bringing our industry leading application security capabilities to the GitHub Enterprise Cloud. Today, we deliver application scanning, secret scanning, and software supply chain security and allow developers to find and fix vulnerabilities as they code, removing the need for context switching and helping to reduce noise with our high true positive rate. Additionally, with the introduction of GitHub Copilot, we've taken this a giant step further by releasing auto-remediation capabilities. "Found means fixed". Join us for this highly interactive discussion where we'll be diving into GitHub Advanced Security, addressing frequently asked questions around everything from feature functionality, security, roadmap and providing resources so that you can get started today!

  • Formato:
  • alt##LivestreamLivestream

Tema del evento: Seguridad

Idioma: Inglés

Ver a petición

Si tiene preguntas, póngase en contacto con nosotros a través de reactor@microsoft.com