Automated security testing tools are becoming more and more popular, generating even more vulnerability reports. But where does one start to mitigate the sheer amount of vulnerabilities? It's simply impossible to fix everything at once. The session will explain the problems that development teams face when confronted with so many security vulnerabilities. Whether they're found by automated tools, penetration testers, or of course the team itself, it's necessary to triage all those vulnerabilities, in order to mitigate the biggest risks first. We'll give an overview of popular risk rating methodologies and techniques and the advantages and disadvantages of each. Then, we'll demonstrate a practical approach that can be applied by anyone working with vulnerabilities.

Join us in this interactive discussion on the current state of Web development. We'll talk about frameworks, tools, processes, and best practices. Bring your questions and jump in to the conversation!

Hear from the head of hardware at Oculus, Caitlin Kalinowski, who leads the teams responsible for the mechanical architecture and product design engineering of the Oculus Rift, Touch controller, and forthcoming standalone products. In this session, you'll learn the secrets behind building and shipping innovative products your customers will love.

Power BI is Microsoft's latest and greatest BI tool. But is it a good for your organization? In this talk we are going to take a look at the whole data pipeline: Power BI Desktop, M, DAX, Data Gateways, Power BI Service and custom visuals. By the end of this session, you'll know if Power BI makes sense for your toolkit.

When startups first launch, they can make the news with application of cutting edge artificial intelligence (AI) - but convincing users to trust the AI is often another story. There's often also no process for integrating future AI development into product roadmaps. This session covers three key principles for how design and data science teams can work together better to build greater trust among users. Additionally, a case study on how a design and data science team partnered to redesign predictive analytics scores powered by machine learning will illustrate those principles in practice.

How do you build systems that allow teams to work autonomously with minimal coupling while working in the same larger system? In this session, Jim Cooper will share the technical details and people processes that has allowed Pluralsight to accomplish this while growing from 2 to 100+ developers in just 5 years. We'll discuss the pain points we had along the way, what worked, and what didn't. And we'll dive into some technical details about how we moved away from our monolithic architecture using Bounded Contexts, Microservices and Lean software principles to accomplish over 400 monthly releases to production across more than 25 small, autonomous teams.

Minority Report was a 2002 American science fiction film based in 2054 where police officers apprehended criminals based on predictions and foreknowledge. We are not in 2054 but fast-forward to 2017, we are now closer than ever before to the world imagined in Minority Report. Computer Vision (CV) is a form of Artificial Intelligence (AI) that allows machines to analyze images to determine location, facial expressions, human action and even identity! Machine Learning (ML) is a type of AI that provides computers with the ability to learn and make predictions based on a given data set. ML for all intents and purposes is foreknowledge! When vision is combined with foreknowledge, a machine exists that goes far beyond what was imagined in Minority Report. During this talk, we will discuss CV, ML, and dive deep with technical examples that show how to combine the two to generate predictions. The session also discusses the moral and ethical obligations of developers today when building AI systems.

Today we see many new and innovate Machine Learning solutions changing our lives. From unlocking our phones with our face, to detecting heart disease by examining our eyes, and letting our cars drive themselves. These advances are in wide ranging areas but have one thing in common. At their core they are based on Deep Learning. In this talk we go over what makes Deep Learning so special. And see how you can architect Deep Learning solutions that allow you to solve problems you might have thought were unsolvable. Which will let you take your products and ideas in new and exciting directions.

Being an effective software developer requires so much more than coding ability. Whether you're rallying support for a new tool, negotiating tradeoffs with a designer, or providing feedback in a code review, effective communication is key. Even in the actual code, activities like choosing variable names and designing APIs require empathy for other developers. Motivating ourselves and managing stress are also important skills for a developer. Sadly, skills like communication, empathy, and introspection are too often dismissed as "soft skills," which makes them seem weaker and less important than "hard" technical skills. It's time to change that. These skills actually help us to acquire new technical skills more efficiently, to decide which tools to use, and to share our technical expertise with others. In other words, they help us catalyze the development and application of our technical skills. In this session, you'll learn about catalytic skills and leave with a practical framework for growing them and applying them to become a more effective—and happier—developer.

It seems like there is a new technology trend, development methodology, or deployment tool coming out every day and if you aren’t using it you are labeled as deprecated, legacy, or a technology dinosaur. Come hear straight talk about the latest trends such as blockchain, chatbots, serverless, CD pipelines, AI, and machine learning. In 45 minutes you will know more than your average redditor, and you can shut down tweet-driven development in your workplace once and for all.

Kotlin is a rich, modern programming language that greatly improves developer efficiency and productivity while maintaining compatibility with existing environments and libraries. No where is the power of Kotlin more evident than on the Android platform. In this session, we will dig into some of the most significant features and capabilities of the Kotlin language and we’ll demonstrate how these features improve the overall developer experience. As part of our discussion, we’ll examine some of the details of how Kotlin makes such an improved developer experience possible. You do not have to be an Android developer to attend this session. This session is intended for anyone interested in understanding how the power and capabilities of a modern programming language like Kotlin improve the developer experience. You don’t want to miss it!

We all use HTTPs every day, to encrypt important conversations online. HTTPs uses Secure Sockets Layer(SSL), also known as Transport Layer Security(TLS), to encrypt the data before it gets transmitted, regardless of the device you are using. Learn how SSL/TLS works to encrypt traffic in this easy to understand breakdown of the process used to secure your sensitive information when surfing the web or using apps.

As a developer, what does it mean to go pro? Is it about achieving the senior title? A certain salary? Leading a team? I'd argue it's none of that. Going pro is a system. It's as much about what you do, as what you don't. In this session, I'll map out what it means to be a professional, the systems for getting there, and the benefits of growing from amateur, to pro.

The Azure Architecture Center (AAC) is a collection of solutions guidance that helps customers build more successfully in the cloud. We research, validate and publish artifacts such as best practices, design patterns and reference architectures that are grounded in real customer implementations and learnings. Our content aims to be inclusive for everyone, and we create guidance that is bite-sized and practical, all the way through deep, thought-leadership guidance that teaches people how to think about designing in the cloud. Come learn how to get the right guidance, for the right situation, at the right time.

Are you good at software? How can you tell? Leading companies use measurable outcomes to demonstrate progress. In this lightning talk, Richard reviews the most important metrics to track, and what "good" looks like.

You've likely watched a few Pluralsight courses by this point, perhaps even more than a few. In doing so, you've spent some quality hours with one or more of our Pluralsight authors. During that time, though, have you ever wondered what goes on backstage? Are you curious about the play-by-play of how any average Pluralsight course gets made? How do we perfect the audio? What magic tricks don't you see that makes for a professionally-produced presentation? What lengths do Pluralsight authors REALLY go through to make the learning happen? Greg Shields has produced over seventy courses for Pluralsight in the past four years and over a hundred courses for other organizations in years gone past. As one of our most prolific authors, he's seen -- and tried -- just about everything in making the perfect course. Join him in this backstage tour of How Pluralsight Courses Get Made. You might just leave with a greater appreciation of the hard work and sometimes impossible challenges your Pluralsight authors go through to bring you the IT learning you've come to know and love.

Animate CC not only supports a variety of publish platforms - but often does so by offering design, motion, and interactive capabilities across the supported platforms. This session will provide an overview of the primary platforms supported, the differences between them, and even how to work across platforms using this engaging and capable tool!

Sometimes building web-scale apps feels like rocket science. But imagine being asked to actually build and launch something that would travel farther than anything in human history. Oh, and you also have six weeks to pump out an audio recording that accurately represents all of humanity to space aliens. No big deal. Your distributed system may not have the requirements of NASA’s Voyager program, but we can learn a lot from their (ongoing!) mission. In this talk, we review this fascinating endeavor, and how they approached redundancy, improvisation, building for change, documentation, and chaos engineering. By the end of this talk, you’ll have a strong sense of the practices that matter most to your own complex software projects. And, you just might walk away with a fresh sense of awe about what humans are capable of.

Looking around us, we can see questions in our everyday work. How we get answers are driving the experiments we run. That can be as simple as asking someone and learning whether they are a subject expert or modifying behaviors to see what happens. We continuously run experiments that impact our cognitive maps, more importantly, in technology we seek to improve our products. It's important to understand the cycle of experimentation. If we aren't asking questions or the right ones we could end up drawing incorrect conclusions that have a detrimental impact on broader goals. We will focus on the foundations of experimentation, starting with an idea and see it through to the action on the results. This session is for people who want to make sure they have a foundation in experimentation and walk away with steps to incorporate the next time they have an idea.

Salesforce is the hottest industry you've never heard about. Job opportunities are rampant and the supply of professionals is non-existent - skyrocketing salaries worldwide. Join us to learn more about the Salesforce industry and how you can make the switch in as little as 6 months - no prior experience required!

Much of the web is inaccessible or difficult to use. This hurts your user base, your market reach, and—most crucially—the people who use your products. Learn about the history and the basics of digital and web accessibility, as well as some ways to get started improving your products and services to be universally approachable and usable.

Data science is revolutionizing the world around us. We’re incorporating artificial intelligence, machine learning, and data-driven decision making in all aspects of business. However, many software developers have yet to learn how to leverage these practices to create better software. In this presentation, we’ll learn how expert developers are using data science to create better software. We’ll learn about A/B testing, code-quality metrics, machine learning, and hypothesis-driven development. Finally, we’ll learn how to use data exhaust from our dev-ops pipeline to drive improvements in our software development process.

Big data is a big problem for spreadsheet platforms, and the tools that once made data manageable are no longer the optimal standalone solution. In this lighting talk, Chris Cardillo will speak to his experience integrating programming languages like R and Python into a spreadsheet workflow, and illustrate how both spreadsheets and scripting can work together to create an end result that's more accurate and takes less time. Plus, he'll share how easy it can be to learn!

Code is now running on just about everything. Threats from around the world would like to damage our data, reputation, finances and more. As such, we need to be as secure as possible. There are lots of arrows to that quiver! One of them is AppSec or code security. But more broadly we need to look at the whole product and ecosystem. We need to find security bugs in the products we depend on -- before bad actors do. In this presentation, renowned cyber expert, Dr. DeMott, will walk us through the process of how developers and security pros should be conducting such examinations. The steps, the wars stories, the experience: we hope to see you there.

In the age of information overload, you have to make people stop in their tracks to pay attention. Data are not just 1s and 0s, sometimes the data points are people. To make an impact with data, it takes careful consideration and a balance of technical skill and design to resonate with an audience. See some real-life examples that were selected by UNICEF and the United Nations.

This break out session will help you speed up your creative process by taking advantage of the apps, services, and assets that you probably don’t know you already have. In this session, you will learn the new tools and techniques that are available to you through Adobe’s Creative Cloud. You will learn modern and up-to-date workflows that will help you stay ahead of the curve and help you create faster and collaborate more efficiently with your teams.

GitHub has been around for ten years, as such, we have ten years worth of computational data mostly around code. We are now in the process of turning our vasts amount of data into insights that can support and transform the software development life-cycle. In this session, you will learn about the challenges of going from an engineering product development company to a data-products development company. Further, you will learn how GitHub is building the 21st century Augmented Computational Knowledge worker.

In this session we will look at the landscape of Spring tools and discuss how they help you get to market faster. We will discuss what has changed in Spring 5 and a sort of "State of the Union" of Java development.

"Knowing is Half the Battle" - GI Joe. Yep, it's a valid statement. Most organizations have no idea what is being exposed about them on the internet. Maybe you had a pen-test done last year; unfortunately, the amount of data that's being created and stored on the internet changes by the second. Join Dale as he takes you through how easy it is to see what would-be attackers are discovering about your organization (without breaking any laws), how they choose their targets and the very minimum that your organization should be doing to protect itself.

To celebrate innovators and change makers everywhere, Pluralsight is hosting the first-ever Create the Future Awards at LIVE 2018. We’re looking for technology’s best kept secrets: companies that are pushing the boundaries of what’s possible, disrupting their industries and driving change. Be part of the excitement as five breakout startups pitch their tech products to our expert panel for a chance to win $50,000.

Every Red & Blue Team member needs a dedicated workstation when engaging a network via a pen-test or even if you want to test your security skills. While other training companies charge up to $749, for this exact system, Dale will show you how he reversed engineered (are you surprised he hacked it?) using $250 in parts off Amazon and open source software to build the BatPi, a complete mobile security workstation. The BatPi is powerful enough to run Kali Linux or The Parrot Project (the two premiere security OS), both of which contains over 300 tools, from scanning wireless networks, run Wireshark, to even document your engagement...oh and did I mention it has a touchscreen?!

Now that we’ve created our mobile hacking workstation (BatPi), let’s put this baby through it’s steps and see if what we can accomplish. How about hacking some WiFi? Didn’t hit the first Lightning Talk, don’t worry you’ll still learn about how much wireless is compromising your data.

Does your career as an IT professional cause you stress? What are you currently doing to manage the negative health effects of this stress? IT professionals are uniquely predisposed to certain stress-related mental-health issues. The key problem is that we evolved to survive in a wilderness context; however, these same survival adaptations are now in direct conflict with our modern high-tech world. In this session, we will learn about the science of mindfulness for stress management. We’ll discuss practices like meditation, biofeedback, and neurofeedback. In addition, we will learn how we, as IT professionals, can use these practices to reduce stress, improve our mental health, and increase our focus.

In this session I will take you along a journey where we have an existing legacy application that we will enable to be released multiple times a day. You will learn you how to apply modern release techniques that enable you to move from long and tiresome release cycles to releasing multiple times a day. I will cover the fundamental concepts of DevOps that will enable multiple releases a day. think of concepts like: Feature Toggles, Red/Green Deployments, Telemetry, Cloud technologies, deployment automation, etc. This session will learn you how to release quality software any moment you want.

OAuth is well established as the go-to protocol for API Security, but there are still a few application types which struggle to securely fit into the OAuth story. This includes devices where input is tricky, such as inputting a 20-character password using your TV remote on an A to Z keyboard. Or devices where there is no browser, where the dreaded Resource Owner Password Credential grant type still reigns king. Finally, there is a solution, with the all-new Device flow for OAuth, specially designed for these pesky browserless platforms or devices with limited input methods. In this talk, we'll see the device flow in action and look at how it is an improvement on existing solutions using real-world scenarios where it should be used.

Running Hadoop clusters requires strong IT expertise… until now! Cloudera Altus provides Big Data as Platform-as-a-Service in the cloud. Forget about cluster management. Focus on what counts: running Spark/Hive/MR2 jobs, analyze insights & trends!

Interactive Content is a new frontier on the Pluralsight platform. In this session, we'll discuss how interactive coding challenges compare to skill assessments, and the very different purpose they serve. We'll implement a coding challenge together — taking a dive into the technical challenges we face — and see what makes this a great way to practice and learn. By the end, we'll catch a glimpse of the potential of the platform and why it represents the future of learning.

We know that ability is equally distributed among humans, but opportunity is not. As the need for skilled technologists grows, so must our ability to empower individuals with accessible tech training. The data that can be gathered about an individual’s learning patterns can help inform the ultimate personalized educational experience, accelerating the cycle from novice to master, or it could be weaponized - used to judge an individual and block opportunities for jobs and advancement. As we design experiences and systems, we become the ethical stewards of the impact we could have on millions of lives. It’s up to us to make the right, and often hard decisions. Hear from Mariah Hay, VP of Product at Pluralsight about her experience designing product for tech education, the choices her teams have made to avoid weaponization, and how human-centered design can inform the ethical underpinnings of our missions, our companies, and our bottom lines.

If you’re a creative who uses just a few Adobe applications or a technology leader in your organization, find out what the Adobe Creative Cloud is in this high-level overview. You’ll discover what it is, what products it includes, what you can make with it, and how it benefits both you and your organization.

Blockchain is a technology that will impact every aspect of technology and change the world. Blockchain is just the latest overhyped technology that everyone is jumping on because there’s so much money chasing it. The future of blockchain is in cryptocurrencies, smart contracts, private distributed blockchains, private read only blockchains, all of the above and none of the above. In this session you’ll learn about the true nature and future of blockchain. Or maybe you won’t. Either way, it’s going to be interesting.

With 12 millions developers world wide, Java is by far the most used language for large business applications. So when things change in the Java space, it may impact very large portions of the software industry. And things have been changing a lot in the last year. Java 9 has been released in September 2017, but the long time support version is announced for September 2018. In the meantime, Java will have a release cycle of 6 months, to be compared with the 4 years since the release of the previous major version. Java EE, which saw 8 major versions in 18 years has been terminated as such. The project has been donated to the Eclipse foundation and is now called EE4J. What is going on with Java? Is the support still there? Is Java going to evolve as the industry needs it? Those are the topics this presentation covers, with both a technical point of view and a business point of view to answer this question: is Java still a language of choice for the next years to come?

Have you heard the buzz around quantum computing? Find out about this exciting new intersection of programming, physics, and mathematics. Learn about the basics of quantum behaviors and watch as we untangle the mysteries in how they can be used to more efficiently solve computing problems. See first-hand how to get started with a free simulator and explore the algorithms that are changing the way we look at computing.

Whether in tech, healthcare, retail, finance, or another industry, today’s IT professional must master the balancing act of empowering their organization with the data it needs to be successful, while maintaining proper access and control. Join us to learn how some of the largest companies use Domo to leverage their data to run all aspects of their business.

If you see the term "Machine Learning", and think: I-should-really-know-more-about-that-but-every-time-I-try-my-eyes-glaze-over, this session is for you. Sure, there's a lot of hype. But if you're involved in software development, DevOps, or do knowledge work of any kind, let's face it—you already know this will affect your life in the coming years. It's time to make it part of your skillset. Knowing little (or even nothing) about Machine Learning might be acceptable now, but it won't be for long. But there’s a problem: the world of Machine Learning has a long history, and if you're not from a mathematical or computer science background, taking one step into it will immediately surround you with jargon that can feel impenetrable: from terms like Decision Trees and Support Vectors, to Genetic Algorithms and Depth-Wise Separable Convolutions. And when you encounter these terms, it’s easy to dismiss some of this as academic, theoretical, or “ivory tower” - but it isn't. These are already implemented in every major platform and available to you right now. This is a practical, pragmatic introduction to implementing Machine and Deep Learning in real-world projects, using the latest tools, platforms and techniques: from agents and bots to voice and vision interfaces. Using specific, real-world examples — and minimal jargon — we'll cover the most important ideas and concepts — and shift your thinking away from a "vague theoretical understanding" into how you can actually use this in your own career.

Containers are the next model of compute, after VMs and bare metal. And you all know containers are here to stay. They're the leaner, faster and more portable alternative, and one day every app will run in a container. Containers will be ubiquitous because of the wide range of problems they solve, and the huge ecosystem that's making the solutions. The core concepts in container platforms are all open - the image and runtime specifications, the registry, the engines and the orchestrators. The promise of portability makes containers a safe choice for the next generation of software delivery. Companies are making that choice and investing in containers for everything from legacy apps to new cloud-native projects. In this session I'll demonstrate two of the main uses cases for containers - moving existing apps to the cloud, and building apps in lean, modern technology stacks. I'll take an existing ASP.NET 3.5 WebForms app from a Windows Server 2003 VM, migrate it to Docker with no code changes, and then run it in Azure. Then I'll deploy a brand-new .NET Core Web API running on Nano Server in a container alongside the WebForms app.