Alex Oskotsky, Bill Donelly & Johnathan Constance - The impact of AI on DevSecOps organizations

AI is an amazingly powerful tool that has the potential to revolutionize DevSecOps workflows. Unfortunately, it also has the potential to take over much of the important work that we currently perform. Our DevOps and SecOps teams have started experimenting with AI in several areas:
- Creating an intentionally vulnerable Python program for a Capture-the-Flag class
- Using our existing FAQs to create a Tier 1 Support chatbot for our software engineers
- Using our incident response logs to create a predictive model to avoid future incidents
- Using our AWS usage metrics to automatically generate auto-scaling policies
- The use of AI log analytics to alert on security threats
Our talk will demonstrate these AI interactions and will discuss the tools and techniques that we used to create these AI models. The objective is to provide the audience with a great start so they can explore AI use cases in their own organizations.
We will conclude the talk with some examples of innovative use cases that we discovered while researching how AI is being used in other organizations.