加速应用重构AI在DevSecOps中的应用 conv.docxVIP

AcceleratingApplicationRefactoring:

AIinDevSecOps

JoelKrooswykFederalCTO

SecureSoftwarebyDesignAugust7,2024

StateoftheUnioninDevSecOps

MemorySafety upplyChain

SBOM

OSS

ZeroTrust

AIAcceleration

SecurebyDesign

?2024GitLabInc.

AIisalreadyacceleratingtheSDLC

50%

ReportedefficiencygainsinwithinmonthsofAIimplementation

5-10x

TargetsforSDLCefficiencygains

81%Ofpublicsector

respondentsareusingAItodayorplantointhenext

2years

Source:2023DevSecOpssurvey

?2024GitLabInc.

WithAIacceleration,canwereconsiderlegacycode?

CloudMigrationModernization

PerformanceScalabilityMemorySafetyComplianceTechnicalDebtUnsecuredCode

VintageVulnerabilitiesEmergentThreats

DeveloperKnowledgeCostReduction

?2024GitLabInc.

Definingrefactoring

“Refactoringisacontrolledtechniqueforimprovingthedesignofanexistingcodebase,adisciplinedtechniqueforrestructuringanexistingbodyofcode,alteringitsinternalstructurewithoutchangingitsexternalbehavior.”

-MartinFowler

?2024GitLabInc.

Refactoringcandriveincredibleoutcomes

Python-C++ Many-Java Perl-ScalaNowRust?

?2024GitLabInc.

Prioritizingrefactoringistough

%spentg

Refactoringrequires

Sufficientdevelopertime

Deepdeveloperskills

Other

Stuff Coding

OtherStuff

Accuratetesting Other

Other StuffStuff

Other

75% StuffTimespenton

allothertasks

?2024GitLabInc. Source:2023DevSecOpssurvey

Howdowerefactor?

“Thesimplestwayistojustclone

thecodeandstarthackingaway Meimprovingthedesign.”

?2024GitLabInc.

Commonrefactoringtechniques

Red-Green

Refactorcodeuntilitpassesthetestscreatedatthestart

ExtractMethod

Addresscomplexity,clarity,andstructure

SimplifyingMethod

%@#!

Streamlinemethodcallsandexpressions

ComposingMethod

Largecodefunctionfragmentationandbreakdown

Abstraction

?2024GitLabInc. Scaledrefactoringofhugeprojects

AIaccelerationinavacuum-codeassistonly