Delivering safe C++ Bjarne Stroustrup Columbia University www.stroustrup.comOverview • The challenges of safety • What is “safety”? • C++ Evolution • with a focus on safety • C++ Core Guidelines Government have begun initiatives to drive the culture of software development towards utilizing memory safe languages. • ... • NSA advises organizations to consider making a strategic shift from programming provide little or no inherent memory protection, such as C/C++, to a memory safe language when possible. Some examples of memory safe languages are C#, Go, Java, Ruby™, and Swift®. • NSA: https://www.open-std

A model tries to represent reality Framework is a way of looking at reality Not a modelCategorization Frameworks Categorization Frameworks - the framework proceeds the data • Put the data in exploitation; not for exploration & change Sense-making Frameworks Sense-making framework - the data proceeds the framework • Capture the data • Patterns emerge from the data • Provides context and

Coaching Agile Teams Nikitas KalantjakosCoaching Agile Teams • Coaching Agile Teams – Lyssa Adkins – A companion for Scrum Masters, Agile Coaches, and Project Managers in Transition • Coaching Agile JourneyCoaching“I don’t do anything!”Coach • Bulldozer – Remove impediments • Shepherd – Guide back to agile principles • Servant Leader – Serve the team, not you • Performance Guardian – Facilitate high performance Competencies Agile-Lean Practitioner Mentoring Facilitating Teaching Coaching Technical Mastery Business Mastery Transformation Mastery Content Authority Process Authority *Adopted from Agile Coaching

Agile for Defense Agile Coaching by Darin Plum Aug 6, 2014 1 My Take on Agile Coaching  The core to all Agile is maximizing each individuals potential through autonomy and mastery  Agile Agile is a journey, not a place and the Agile Coach is the guide  A coach must have a deep understanding of the Agile Principles and real world experience  Start with Servant Leadership; Command and the role of the Agile Coach: 1. Activity must have clear goals and process 2. Must have clear and immediate feedback 3. Confidence in ability to complete the task  The power of Agile frameworks (Scrum

behavior; Medical device operates correctly in response to inputs, including in failure scenarios (Fail-safe Design), to prevent harm or hazards to patient. Security: Protection of systems, networks, and data Lines of C++ CodeReminder to a simple, but often overlooked, question! Why C++? 23Can C++ usage be safe? Mitigate Safety and Security Vulnerabilities What can we do then? 24 Explore Tooling Processes decoupled architecture, Frequent tech debt reviews, Security/Compliance tracking, Established testing framework for upgrades, Proper dependency mgmt. (e.g., Conan), solid documentation, ...Safety Critical Path

NDIA's Agile in Government Summit 6/6/2018-6/7/2018. Keynotes: Major General Sarah Zabel http://www.ndia.org/events/2018/6/6/agile-in-government/proceedings Agile and EVMS They Can Co-exist! ( per mil/evm/ Incremental process, i.e. Rolling Wave Planning; Agile Release/Program Increment Planning. Scenario describes one method of how Agile can underpin EVM progress in support of tracking program cost an Agile development process • The scenario has defined a single product Release which is tracked using Earned Value • Shows alignment of EVM WBS elements to the Agile products hierarchy Agile Contracting

Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Institute, Deb Preuss, Agile Coaching InstitutePOWERFUL QUESTION POWERFUL QUESTION POWERFUL QUESTION POWERFUL QUESTION Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute What

acquisition framework for information technology (IT) that can keep pace with rapidly changing technologies and operations, including the challenges associated with information assurance. Agile development professionals with details on how to adopt Agile practices within each element of their programs, thus helping them to succeed in an increasingly complex environment. Agile has emerged as the leading industry development methodology, and has seen growing adoption across the DoD and other federal agencies. Agile practices enable the DoD to achieve reforms directed by Congress and DoD Acquisition Executives.

SPRING FRAMEWORK CHANGELOG =========================== http://www.spring.io Changes in version 3.2.11 (2014-09-04) ------------------------------------- fixed cachingConnectionFactory should catch exceptions shallowEtagHeaderFilter doesn't support Servlet 3.1 setContentLengthLong (SPR-12097) exclude spring-framework-bom artifacts from release distributions (SPR-12087) include all source artifacts in published sources ------------------------------------- * compatibility with OpenJDK 8 for target 1.5/1.6/1.7 compiled Spring Framework 3.2.x applications (SPR-9639) * compatibility with OSGI-style use of generics in source code that

SPRING FRAMEWORK CHANGELOG ========================== http://www.springsource.org Changes in version 3.0.2 (2010-04-02) ------------------------------------- * fixed cross-module version ranges in OSGi (TransactionalTestExecutionListener) * @Value processing works in test instances (using the test context framework) as well now * @DirtiesContext is now inherited for class-level usage * NativeWebRequest detects ---------------- * upgraded to JUnit 4.6, TestNG 5.9, and EasyMock 2.5.1 * updated all Spring Framework OSGI manifests to list unversioned imports explicitly * relaxed several OSGi bundle dependencies