Patrick Meenan (Google) @patmeenan http://www.slideshare.net/patrickmeenan/service-workers-for-performance  They are effectively a man in the middle for your page, hence HTTPS only  Most benefit for single Performance Best Practices Together to Create the Perfect SPA by Chris Love (Love2Dev) @ChrisLove http://www.slideshare.net/docluv/putting-performance-best-practices-together-for-a-spa  "We have created (but where the heck do you start?) by Tammy Everts & Cliff Crocker (SOASTA) @tameverts @cliffcrocker http://www.slideshare.net/CloudTest/metrics-metrics-everywhere-but-where-the-heck-do-you-start  The myth

北京快猫星云科技有限公司 Categraf 增强功能 INTERNAL OR RESTRICTED, ALL RIGHTS RESERVED © 北京快猫星云科技有限公司 Categraf 增强功能 多协议： HTTP、TCP、UDP、 ICMP、WSDL 多拨测点： 可选择安装了Categraf 的⼀个或多个设备 INTERNAL OR RESTRICTED, ALL RIGHTS RESERVED 北京快猫星云科技有限公司 INTERNAL OR RESTRICTED, ALL RIGHTS RESERVED © 北京快猫星云科技有限公司 六分科技——国内领先的⾼精定位服务产品专业提供商 http://flashcat.cloud/blog/liufen/ 痛点： 1. 监控⼯具太多，维护和使⽤都很麻烦 2. 缺少业务维度的监控 3. 缺乏统⼀的稳定性视图，缺乏故障定位的驾驶舱 效果： 北京快猫星云科技有限公司 北京快猫星云科技有限公司 INTERNAL OR RESTRICTED, ALL RIGHTS RESERVED © 北京快猫星云科技有限公司 某国内领先的医疗⼤健康产业集团 http://flashcat.cloud/blog/case-flashcat-in-medicine-company/ 痛点： 1. 故障发现慢，主要依赖⽤户保障 2. 缺乏基于业务视⻆的全链路监控，故障定位耗时较⻓

Attributions and References [1] The Pomodoro Technique, http://pomodorotechnique.com/ [2] Personal Productivity Using The Pomodoro Technique, Daniel Hinojosa, https://docs.google.com/presentation/d/1ufjcILARuo w/ present#slide=id.i0 [3] Flow: The Psychology of Optimal Experience, Mihaly Csikszentmihalyi, http://www.amazon.com/Flow-Psychology-Experience-Mihaly-Csikszentmihalyi/dp/0061339202/Walkthrough To

NDIA's Agile in Government Summit 6/6/2018-6/7/2018. Keynotes: Major General Sarah Zabel http://www.ndia.org/events/2018/6/6/agile-in-government/proceedings Agile and EVMS They Can Co-exist! ( per for Earned Value Management, PARCA, Office of the Assistant Secretary of Defense for Acquisition) https://www.acq.osd.mil/evm/ Incremental process, i.e. Rolling Wave Planning; Agile Release/Program Increment of EVM WBS elements to the Agile products hierarchy Agile Contracting – Dr. Stephen Mayner SAFe https://techfarhub.cio.gov/ Handbook for Procuring Digital Services Using Agile Processes All structures

此处不再赘述, 此项⾮防御重点, 因为压根也不好防 批量抓取当前机器上的 "各类基础服务配置⽂件中保存的各种账号密码" ⽐如,各种数据库连接配置⽂件,各类服务⾃身的配置⽂件(redis,http basic...)... 想办法 "控制⽬标 运维管理 / 技术⼈员 的单机,从这些机器上去搜集可能保存着各类敏感⽹络资产的账号密码表" ⽐如, *.ls,*.doc,*.docx, * 本机明⽂密码嗅探 [ http,ftp,pop3... ] 传统键盘记录 windows蓝屏技巧 [ 此操作主要为应对不时之需,⽐如,搞蓝屏,登管理员登录抓密码 ] Hash 爆破: Hashcat [ 完全拼GPU ] 0x08 内⽹安全 [内⽹常⽤ "隧道"" / "转发"" / "代理"" 穿透⼿法 提炼汇总 ， 防御重点] 出⽹流量刺探 ⽐如,http,dns,以及⼀些穿透性相对较好的tcp端⼝ 以及⼀些穿透性相对较好的tcp端⼝... 这种操作⼀般都会配合wmi,smb,ssh远程执⾏,在内⽹批量快速识别出能出⽹的机器 常规 HTTP脚本代理 abptts,Neo-reGeorg,reGeorg,tunna,reduh... 不得不说,公开脚本在实战中多多少少都会有些问题,还需要根据⾃⼰的实际⽬标环境深度改进才⾏ SSH 隧道 加密端⼝转发,socks 实战⽤途⾮常灵活,此处不细说

Attributions [1] Amazon, http://www.amazon.com/Phoenix-Project-DevOps-Helping-Business/dp/0988262509/[2] The Three Ways: The Principles Underpinning DevOps, Gene Kim, http://itrevolution.com/the-three-ways-

you missed last month, you can find the handout for Part 2 on the Agile4Defense GitHub page at: https://git.io/JeaO2 Risk The presence of uncertainty is the simple reason why Agile approaches work better post events and many of our table topics.  https://www.meetup.com/Agile-for-Defense/  https://www.facebook.com/groups/AgileForDefense/  https://github.com/Agile4Defense/AgileForDefense You can download this table handout directly at: https://git.io/Jejqb Share Your Feedback As we've come to learn on our agile journey, short cycle times and rapid feedback are the lifeblood of

DoD Enterprise DevSecOps Reference Design from the DoD CIO – A Summary Content referenced from: https://dodcio.defense.gov/Portals/0/Documents/DoD%20Enterprise%20DevSecOps%20Reference %20Design%20v1.0_Public%20Release LifecycleDevSecOps Pillars DevSecOps EcosystemDevSecOps Software Factory DevSecOps MVP Image from https://github.com/jondavid-black/DevOpsForDefense/raw/master/Meetup/2019/2019-10%20DO4D%20- %20DevSecO Chaillan presenting https://www.csiac.org/podcast/dod-enterprise-devsecops-initiative/ DoD Centralized Container Source Code Repository (DCCSCR) https://dcar.dsop.io/ DSOP Group Workspace https://dccscr.dsop

coding tactic. If you missed last month, you can find this on the Agile4Defense GitHub page at: https://git.io/JeaOu Enterprise Architecture Enterprise Architecture, the domain of the IT bureaucrats table topics? You can find this one and others at: https://github.com/Agile4Defense/AgileForDefense You can download this topic directly at: https://git.io/JeaO2

speed, data integrity, and support for distributed, non-linear workflows https://try.github.io/levels/1/challenges/1 https://www.atlassian.com/university From: www.atlassian.com Mapping out Agile