Enhancing Supply Chain Security with Xin Qiu at JFrog swampUP 2024

This is Textron tv. Hi everyone, it's Alan Shimmel and we're back day one Swamp up in Austin. Uh, our next guest is Ms.

Sh Chu, and I think I got that right. Perfect, perfect. Shing is with a company called CommScope.

She's speaking here today. We're gonna talk about what she's speaking about and a few other things. But before we get to that Shing Yes.

Share with our audience a little bit of your own personal story. What's your role at CommScope? How'd you get there?

And maybe not everyone here knows CommScope. What, what's CommScope about? CommScope is a device manufacturer.

Uh, we making different, uh, electronic devices for service providers and make people to connect to the infrastructure and getting their services. So for that kind of equipment security is, is the very important part. Otherwise, you are not only mess up your consumer side, you're also mess up your network side.

So my role and my background, so my background is in security. I've been in security field for more than 25 years. Me too.

Oh great. Yeah, We didn't call it Cyber Z In sec. So what I'm talking about here that you understand.

So, um, my, um, I, we start a background, I've been doing security for 25 years and I'm leading a product marketing and a product security solutions within CommScope. So my team is developed security, uh, services platform for our product team, also their customers and our customers. So you are responsible for internal security as well as External Security, external for customer security Because they're buying our equipment, they're putting their equipment in the network.

So any problem they are problem. It's our problem too. It's your problem too.

And you know, I mean talk about, you know, a hot topic in security these days, supply chain security. Absolutely. A lot of people talk about software, supply chain security, but hardware, supply chain security is a whole nother problem.

So there are two security supply chain here. So one is a software supply chain. You're absolutely correct.

The other one is manufacturing supply chain. So both are so critical in a way, you know, because it's manufacturing supply chains more like a high volume environment, the hackers will focus on those high volume environment because with a single attack they can breach the all lot of devices. So that's one thing that's important.

Software supply chain is also important because the hardware become commodity and the software become differentiator today. So a lot of people putting a lot of functionality inside the software, how do you protect those? Become very important aspect of the ecosystem.

Got it. Yeah. Got it, got it.

So one thing before we jump into what you're talking about. Yes. For people who want to get more information about CommScope Yes.

com. Com. Com.

Absolutely. So CommScope com com if you're interested. Yes.

Alright, Shing, let's move over. Now you are actually a JFR partner slash customer, correct? You're Speaking here at swap up.

Uh, yes. The people, you know, the people watching this are not here. Yes, yes.

So give them an idea. What are you, what are you presenting on? Okay, so for everybody was in, um, you know, in this field probably they know what we are talking about, but a lot of people, they are not in this field.

And maybe like audience, like today they uh, they being in the morning keynote section and, uh, you hear so many things about the security, you wanna talk about productivity or talk about the accountability. So what I'm going to talk about the tomorrow is the trustworthiness. How do we bring the trust, the worseness to a next level, to a higher level to enhance the level in the software supply chain?

And I'm going to review our collaborative work with, uh, um, JFR, how do we, uh, talking, you know, to uh, bring this amazing platform to next level to facing the most aggressive attacks we see every day now. So I hope everybody will be coming to my session. I'm going to show you how do you bring that in?

Software integrity to a different level against the most aggressive attacks. Love it. I love that.

Yeah. Alright, I've got a few questions for you. Absolutely.

From our friends at jfr. Yes. I wanted to Yes.

Go over a bit. Um, so let's talk specifically, how do you and your team interact with the jfr platform? Okay.

CommScope is a bigger company. We have many different product solutions. They're using different platform manage the software.

For my team, we are focused on the security side. Our collaboration with the JFR is how do we provide a solution that is easy to plug into the jfr, uh, platform, make that seamless, uh, workflow with enhanced the security. That's what my group does.

So we are going to demo what we have this, you know, proof of concept tomorrow. And then two, like not only are we internal team who will using the Jfr platform, all your customers, JFR customers today and the future, they will be taking advantage of our capability. Got it.

Um, so when you first adopted Jfr Yes. What were some of the, like what were the drivers, what were the problems that you were facing that said we need to use Jfr? Well, I have to say, you know, JFR today, even though I had an even deeper understanding through the today's keynote, I think it is a promise.

A promise of different capabilities and consolidated in this one platform. A lot of organizations you may not have all the expertise you have even for mostly elite companies, but there are so many different product teams. They're living in their silos.

You know, we talking about the silos in the keynotes, they're living in their silos. They will not have all the skills they have, so they don't have a consistency in terms of deal with the software supply chain. So I think even this platform, especially for some medium size or small size company, they don't have the expertise we're talking about here.

You can kind of consolidate the most, you know, the latest the technology and the machine learning in the security and to, you know, uh, a lot of core technologies, you know, a, a company cannot afford to have. So I think that's the thing values I see that can bring people to next level. Got it.

Yes. Let me, uh, let me ask you, in your use of the Jfr platform Yeah. What KPI, how do you know it's working, right?

What are the KPIs you point to, to say, oh, we're seeing value here? Yeah, I would see one is a productivity. Mm-Hmm.

You know, the other one you have to, you know, we, what we see is the visibility every step of way. You have the evidence now with the government mandates and some in mostly, you know, industries, uh, initiatives that become very important. And you have to have a visibility.

You have to be able to provide the evidence, you have to show how you do security and do it right to not just go through the flow. Right. So I think that that's important aspect though.

KPII am looking for. I I agree with you. And look, we're seeing more and more come out here in the US with like seaside stuff like that.

Yeah. But in the EU as well. Yeah.

Around the world. Yeah. Around the world.

Yeah. Where do you think j the Jfr platform has delivered the, the biggest bang for the buck? The biggest impact?

The biggest impact, I have to say the collection of the capability is the overall, um, capability. Also the forward thinking. You know, JFR already in the latest, the technology, right.

The, for the, uh, generative ai. So you need to count on somebody, be able to keep you up to the, the, the, the most front end of the technology. So I think today, especially with all the keynotes I learned and for the future things to come, I think that this is the company with a lot of features.

Agreed. I agree with you. Is this your first swamp up?

It's my first uh, uh, swamp up. It's my staff is the second swamp up. Oh, they come you.

I haven't but this time It's only day one. But what your impression been so far? It's A lot of energy here.

A lot of energy. A lot of energy you have to say is a lot of cool stuff here. And I hear a lot of people talking about the latest, the technology.

Yeah. So, which make people excited. Yes.

Gets your passion going, right? Yes. Yes.

Shane, thank you so much for coming on. I talked Thank you. This goes very quickly.

Thank you So much. Good Your time. Good luck with your presentation.

Thank you. Chu here at Swamp Up. That's gonna wrap up our day one coverage.

Stay tuned. ai, text drunk dot itsm, and of course here on Text Drunk tv. But for now, I'm Alan Shimmel and we're out.