Download to read offline
Uploaded byChris Corriere
Value chain maps for open source ecosystems
The document discusses value chain maps for open source ecosystems, emphasizing the integration of technology to augment human capabilities rather than replace them. It covers key themes such as the importance of collaboration, communication, and security in DevOps and open source software (OSS) environments. Additionally, it highlights fundamental human needs within sociotechnical systems and encourages diverse teamwork to minimize risks.
Value chain maps for open source ecosystems
- 1. Value Chain MapsFor Open Source Ecosystems Verizon | May 10th 2018 by C.A. Corriere | @cacorriere
- 2. About Me Sociotechnological Mathematicianat Large Senior Advocate, In tech for 20+ years Organizer for devopsdays Atlanta Organizer for devOps ATL Meetup Organizer for Map Camp (London)
- 3. KEY TAKEAWAYS ●Augment humanswith tech instead of replacing them. ●Spend time together. Communicate. Build Trust. ●Work in diverse teams with mutual goals. ●Minimize your threat surface.
- 4. WARNING Watch for DroppingKnowledge. Take notes. Look stuff up later. Try to have fun!
- 5. TODAY'S AGENDA ●Act 1Intro to devOps, Game Theory & Mapping ●Act 2 Security in OSS Ecosystems ●Act 3 What We Can Do
- 6. ACT 1 Introto devOps, Game Theory & Mapping
- 7. The Three Waysof DevOps "The Phoenix Project" by Gene Kim
- 8. The Three Waysof DevOps "Continuous Delivery" by Jez Humble
- 9. The Three Waysof DevOps “Designing Delivery by Jeff Sussna
- 10.
- 11. What's Cooler thanBeing Cool? ICE CALMS!!!
- 12. The sec indevSecOps means the security folks are explicitly invited to the table. The Dilemma is the fact the invitation isn't implied. devOps means us, you, & them.
- 14. Stag Hunt isa cooperative Nash Game
- 15. Not deductive, notinductive, but abductive logic. What's most likely to happen?
- 16.
- 17.
- 18. We often seeksimple, linear, causal relationships (owasp top 10) despite being centered in a complex domain (ASVS). Cynefin Ontological Sensemaking Framework by Dave Snowden
- 19. Some Bad Newsabout Fat-Tailed Distributions By Skbkekas - Own work, CC BY 3.0, https://commons.wikimedia.org/w/index.php?curid=9649146
- 21. Thomas Thwaites &his Toaster Project
- 22. Traditional Value Chain fora technical need
- 23. Simon Wardley, KaimarKaru, & me at Lean Agile Scotland 2017
- 24. Wardley Map ofa technical need
- 25. Wardley Map ofdeveloper Feedback
- 26. Wardley Map ofdeveloper Feedback
- 27. ACT 2 Securityin OSS Ecosystems
- 31. "If a maliciousactor would have scanned and discovered these issues before Skovoroda, the attacker could have gained direct "publish access" to 66,876 npm packages, representing nearly 13% of the entire JavaScript npm ecosystem."
- 32. "While Skovoroda discoveredcredentials that granted him direct publish access to only 13% of npm packages, through dependencies, an attacker would have been able to spread his malicious code to about 52% of the entire npm ecosystem."
- 34. ACT 3 WhatWe Can Do
- 35. Sociotechnical systems depend On9 Fundamental Human Needs
- 36. 9 needs x4 existential catagories = 36 cell matrix Here's just the 1st row... Need Being (qualities) Having (things) Doing (actions) Interacting (settings) Subsistence physically & mentally healthy food, shelter, employment eat, drink, sleep, work home, place of employment
- 37. ERG Theory byClayton Alderfer
- 38. Fundamental Human Needs& ERG Theory have replaced Maslow's Heirarchy
- 39. Don’t separate peoplewith automation. Connect them. Eric Trist & K. Bamforth (1951). Some social and psychological consequences of the longwall method of coal getting
- 40. collaborative room &pillar team
- 41. Longwall fell intocompetition & amensalism
- 42.
- 43. KEY TAKEAWAYS ●Augment humanswith tech instead of replacing them. ●Spend time together. Communicate. Build Trust. ●Work in diverse teams with mutual goals. ●Minimize your threat surface.
- 44. Start with aMap
- 45. Automate as muchas possible so you can respond with agility!!!
- 46.
- 47. Thanks! Chris Corriere Sociotechnological Mathematician@ Large. @cacorriere