BSides DC 2019 - Signing your code the easy way

Описание: Dive into code signing and learn why you want to be attaching signatures to your code and how to quickly and securely incorporate code signing into your CI/CD pipeline.

You'll learn

How code signing and Authenticode work
How to get a code signing service setup quickly and securely for your organization that supports any Authenticode-supported file type, Microsoft Store packages (for side-loading), ClickOnce, and NuGet packages.
How Azure Key Vault can protect your code signing certificates in its Hardware Security Module (HSM)

Oren Novotny
(Chief Architect, DevOps & Modern Software at Insight)

Oren is Chief Architect, DevOps & Modern Software at Insight, and a Microsoft Regional Director. He is passionate about reducing friction in the development process and creating modern software solutions to solve complex business challenges. Named a Microsoft MVP for Windows Platform Development in 2014, Microsoft MVP for Visual Studio and Development Technologies in 2016, Xamarin MVP in 2016, member of the .NET Foundation Advisory Council in 2017, and a .NET Foundation board member in 2018, he has been writing code on the Microsoft platform since the days a 2400 baud modem was considered cutting-edge. His prior experience ranges from building identity solutions for global organizations, developing real-time trading systems dealing with massive amounts of data to the complex data models of equity derivatives and the regulatory needs of Medicaid claims processing. He believes that technology is meaningless in a vacuum and strives to show how the bleeding-edge delivers superior value to the clients’ bottom line.