[TALK]@Telematika

Talks & Presentations Collection

Data Center Track - How Good is Your Data Center?
December 25, 2019

Data Center Track - How Good is Your Data Center?

The Data Center Track at NANOG 66, led by Gabe Cole strives to outline structures and tools to help organizations develop a framework for evaluating data center p …

Developing a secure and scalable frontend

Developing a secure and scalable frontend

December 25, 2019

As traffic to websites and web applications increases, infrastructure must be put in place to handle scalingbut with that comes an increased risk for security breaches. James Baker and Mira Thambireddy dive into specific client-side vulnerabilities, discussing design patterns that scale an application securely and which frameworks currently in the market already employ these practices.
Innovation versus invasion: Inserting privacy controls and due process into semi-autonomous algorithms

Innovation versus invasion: Inserting privacy controls and due process into semi-autonomous algorithms

December 25, 2019

Algorithms influence our everyday decision making, but at what point does innovation turn into invasion? Matthew Carroll discusses how regulators and consumers can take back control by inserting legal checks and balances into the data science process.
Keynote: Internet Measurement

Keynote: Internet Measurement

December 25, 2019

David Clark (MIT) and kc claffy (CAIDA) provide perspective, historical and currently, on Internet Measurement Research and Evolving Industry Structure. Geoff Hust …
Lessons learned from running big bug bounty programs

Lessons learned from running big bug bounty programs

December 25, 2019

Katie Moussouris, Founder & CEO, Luta Security
Macaroons: More cookie than cookie

Macaroons: More cookie than cookie

December 25, 2019

Brian Sletten introduces Google Macaroons, a fine-grained, decentralized authorization mechanism that is web friendly and suitable for cloud and microservices.
Mapping adversary infrastructure using DNS

Mapping adversary infrastructure using DNS

December 25, 2019

Nothing good or bad can happen on the Internet without involving the Domain Name System (DNS), which provides visibility of the global Internet and unparalleled intelligence on cybercriminals and attack methods. Merike Ko discusses the value of DNS to cyber investigations and explores how real-time DNS observations can improve accuracy and response time to cyberattacks.
NetOps Coding 101 - Python Intro and Regular Expression Deep Dive

NetOps Coding 101 - Python Intro and Regular Expression Deep Dive

December 25, 2019

(This is a repeat of the tutorial that was presented at NANOG 64 in San Francisco) Do you find yourself wanting to write a robot but not quite sure where to start …
NetOps Coding 101 - Python Intro and Regular Expression Deep Dive (Part 2 of 2)

NetOps Coding 101 - Python Intro and Regular Expression Deep Dive (Part 2 of 2)

December 25, 2019

(Continuation of the first session of this introductory Tutorial.) Do you find yourself wanting to write a robot but not quite sure where to start? Ever find your …
Rethinking BGP Path Validation

Rethinking BGP Path Validation

December 25, 2019

BGP Route Origin Authentication is getting traction – but while origin authentication solves a number of problems, it doesn't resolve path insertion attacks, and …
Security Track: At the Intersection of Anti-Abuse and Infrastructure

Security Track: At the Intersection of Anti-Abuse and Infrastructure

December 25, 2019

The objectives of this security track are to provide: 1. a primer on the shared goals and incentives of operator groups and anti-abuse groups, 2. a review contempo …
Segment Routing in Datacenter

Segment Routing in Datacenter

December 25, 2019

Segment Routing is a network technology that proposes to solve many of the limitations of traditional IP & MPLS networks. It's proposes to be the bridge between th …
AMP: Does it really make your site faster?

AMP: Does it really make your site faster?

December 24, 2019

Accelerated mobile pages (AMP) deliver a fast user experience for mobile devices by placing restrictions on the AMP markup and its ability to run code. Without code, how can we gather analytics or validate that our AMP pages are fast? Nic Jansma and Nigel Heron demonstrate how to gather RUM for AMP.
Engineer Versus Complexity

Engineer Versus Complexity

December 24, 2019

Network engineers are awash in complexity – but what can we do about it? One approach is to reduce complexity, but often the complexity we face is just a matter o …
Latest Trends in Optical Interconnects

Latest Trends in Optical Interconnects

December 24, 2019

The optical interconnect ecosystem is going through unprecedented growth and innovation as new players, new business models and new technologies converge. One of t …
NetOps Coding 201 - Building Facebook's FBAR for Network Devices

NetOps Coding 201 - Building Facebook's FBAR for Network Devices

December 24, 2019

Continuing with our theme of automating day-to-day operations, we'll dive into building your very own FBAR! FBAR is a system used by Facebook to handle server and …
Office Hour with Marcelle Lee and Lisa Jiggetts

Office Hour with Marcelle Lee and Lisa Jiggetts

December 24, 2019

.
Peering Track

Peering Track

December 24, 2019

Current topics related to interconnection likely including short presentations and/or a panel discussion. …
Scalable threat modeling with risk patterns

Scalable threat modeling with risk patterns

December 24, 2019

Current approaches to threat modeling emphasize manual analysis by trained teams, which can result in a bottleneck in the development process, reducing the appeal of performing this activity. Stephen de Vries presents a technique that uses reusable risk patterns to open the door to automated and scalable threat modeling.
Security by consent

Security by consent

December 24, 2019

Security people are "only members of the public who are paid to give full-time attention to duties which are incumbent on every citizen in the intent of the community welfare," but often the relationship between security and everyone else is fraught. Brendan O'Connor explores how another group charged with protecting everyone handled this problem with humor, kindness, and a commitment to service.
Security through design: Making security better by designing for people

Security through design: Making security better by designing for people

December 24, 2019

Why do certain devices, programs, or companies lead to utter frustration while others consistently delight us? What can we learn from these insights when dealing with human behavior related to security? Jelle Niemantsverdriet explores user-centered design methods in other disciplines like economy, psychology and marketing that can help us build security in a truly usable way.
The case for HTTPS everywhere

The case for HTTPS everywhere

December 24, 2019

HTTPS is no longer only for sensitive sites; its a critical piece of the web user experience and necessary for the long-term health of the Web. Google is methodically hunting and tackling major hurdles for TLS adoption to guide the Web toward HTTPS everywhere. Emily Schechter shares lessons learned on the road to ubiquitous HTTPS, focusing on the benefits of HTTPS.
The industrial age of website bots: How to detect and block automated attacks

The industrial age of website bots: How to detect and block automated attacks

December 24, 2019

Bots are a reality, and its hard to separate your users and good bots (e.g., search) from the bad ones (brute force, fraud, scrapers, etc.). Ido Safruti and Ariel Sirota review how bots work, explain how to operate a few common bots, and, most importantly, show what you can do to detect and block malicious activity while enabling your users and good bots to work uninterrupted.
The world will see (and just saw) an Internet zombie apocalypse

The world will see (and just saw) an Internet zombie apocalypse

December 24, 2019

Dyn was recently the subject of a major DDoS attack, its first significant disruption in over 15 years of operation. Phil Stanhope shares Dyn's experience before exploring the rapid evolution of multilayer attacks happening on the Internet and outlining the steps to take to deal with them from an ops perspective.
Update on the IANA Stewardship Transition

Update on the IANA Stewardship Transition

December 24, 2019

The IANA Stewardship Transition proposal development process is now in its final stretches. Thus it seems timely to reconvene a panel of individuals who have been …
Building an appier web

Building an appier web

December 23, 2019

For too long, the Web has been seen as a poor relation to native apps, but no longer! Weve been able to add websites to our home screens for a while, but with better offline support and notifications and richer metadata, we can finally build web experiences that rival or exceed native apps. Andy Davies explains how these technologies can be combined to deliver great web experiences.
Building security into your workflow with InSpec

Building security into your workflow with InSpec

December 23, 2019

When we're looking for improved velocity and speeding up the process of delivering value to customers, incorporating security and compliance requirements is important. Mandi Walls offers an overview of InSpec, a tool that can help bridge the gap between security needs and operational realities in continuous delivery workflows.
Choose your own coach

Choose your own coach

December 23, 2019

Schuberg Philis is an innovative business technology company focused on the mission-critical applications that its customers and society rely on 24/7. As Schuberg Philis was growing, the company had to figure out how to keep its coaching model sustainable. Lotta Croiset van Uchelen explores the solution it landed on: every colleague can choose their own boss.