AgendaAdobe ColdFusion Summit East 2024

A new STIG for Adobe ColdFusion 2023 is in progress! STIG (Security Technical Information Guides) are security standards for the DOD that are issued and maintained by DISA. Just as the Federal Government looks to NIST (National Institute for Standards and Technology) for guidance and civilian agencies looks to FISMA, the Department of Defense (DOD) have yet another layer of requirements promulgated by the Defense Information Systems Agency (DISA). These Security Technical Information Guides (STIGs) are the configuration standards for DOD Information Assurance, or IA-enabled devices/systems. The STIGs contain technical guidance to 'lock down' information systems/software that might otherwise be vulnerable to a malicious computer attack. Join this session to review some of the ColdFusion 2023 settings that are key to STIG and learn how they help to secure and make your servers more resilient to cyber-attacks. In this session, we will dig into a sample of the settings within the ColdFusion Administrator, Tomcat, and the operating system that help with DOS prevention, securing your data in transit, and general security best practices.

Feeling lost in the trenches of complex SQL queries and manual database interaction? Join us for a beginner-friendly mission to conquer your data with ColdFusion ORM powered by Hibernate! Whether you're a fresh recruit in the coding field or a seasoned veteran navigating legacy ColdFusion applications, this session equips you with the tools and strategies to level up your development game. We will cover ORM session management, ORM settings, caching strategies, virtual service layers, dynamic finders, dynamic counters, and an enhanced Hibernate Criteria builder for ColdFusion to create easy and programmatic HQL queries. We will even see how to build automatic CRUD APIs using only your ORM definitions. Ready to win?

So you've looked at CF Components, and kind of understand the basics of how they work. Everyone says "frameworks are the way to go", but there's still a big knowledge gap between those two points. As each framework has its own terminology, how do you know where verbiage for one begins and the other one ends? Is "Controller" a ColdBox specific thing? What about a "Service Layer" or a "View"? There's very little documentation available about the "Model-View-Controller" pattern for ColdFusion that is not specific to a framework, and that's often what causes the confusion for people newer to OO development. In this talk we will go over a basic application that's built using the Model-View-Controller design pattern, but does not use any specific framework to get there. We'll also show when using the MVC pattern by itself may be enough for your app. We'll also look at when going to a full fledged framework may be better, and how easy it is to get there.

Throughout its evolution, ColdFusion has transcended traditional boundaries, catering not only to dynamic web development but also empowering the creation of sophisticated applications and services. As a steadfast choice for developers seeking versatility and efficiency in web-based solutions and business applications, ColdFusion has continually adapted to meet evolving industry demands. The modernization journey initiated by ColdFusion 2021 & 2023 marks a pivotal moment, catalysing a transformative shift towards cloud infrastructure, microservices, and distributed architecture. Responding adeptly, ColdFusion introduced dedicated CF runtimes and connectors tailored for cloud-native development, now accessible on leading cloud platforms such as AWS, Azure, and GCP. Furthermore, embracing containerization with seamless integration, ColdFusion enhances DevOps efficiency while elevating performance levels to unprecedented heights. Join us for an insightful discussion as we delve deeper into the benefits of adopting the latest ColdFusion releases and explore the promising future that lies ahead. Discover how ColdFusion continues to redefine the landscape of web development, offering unparalleled flexibility and innovation.

In this session, developers will learn how to leverage Continuous Integration (CI) to boost the quality of code delivered, as well as improve the security of their applications. We'll discuss how CI works, and more importantly how you can get started using it in your workflow.

This session aims to offer a comprehensive overview of the fundamental principles involved in securing cloud infrastructure, covering various options across Azure, AWS, and GCP. It's important to recognize that there is no one-size-fits-all security solution and understanding these underlying principles is crucial for identifying a security strategy that best suits your needs. Key concepts we will explore include: - What is Identity Management? - IAM (Identity and Access Management)/Access Control - Network Security - Application Layer Security - Data Encryption