security

Security Track: At the Intersection of Anti-Abuse and Infrastructure

Security Track: At the Intersection of Anti-Abuse and Infrastructure

December 25, 2019

The objectives of this security track are to provide: 1. a primer on the shared goals and incentives of operator groups and anti-abuse groups, 2. a review contempo …
Scalable threat modeling with risk patterns

Scalable threat modeling with risk patterns

December 24, 2019

Current approaches to threat modeling emphasize manual analysis by trained teams, which can result in a bottleneck in the development process, reducing the appeal of performing this activity. Stephen de Vries presents a technique that uses reusable risk patterns to open the door to automated and scalable threat modeling.
Security by consent

Security by consent

December 24, 2019

Security people are "only members of the public who are paid to give full-time attention to duties which are incumbent on every citizen in the intent of the community welfare," but often the relationship between security and everyone else is fraught. Brendan O'Connor explores how another group charged with protecting everyone handled this problem with humor, kindness, and a commitment to service.
Security through design: Making security better by designing for people

Security through design: Making security better by designing for people

December 24, 2019

Why do certain devices, programs, or companies lead to utter frustration while others consistently delight us? What can we learn from these insights when dealing with human behavior related to security? Jelle Niemantsverdriet explores user-centered design methods in other disciplines like economy, psychology and marketing that can help us build security in a truly usable way.
Building security into your workflow with InSpec

Building security into your workflow with InSpec

December 23, 2019

When we're looking for improved velocity and speeding up the process of delivering value to customers, incorporating security and compliance requirements is important. Mandi Walls offers an overview of InSpec, a tool that can help bridge the gap between security needs and operational realities in continuous delivery workflows.
Continuous integration, delivery, and deployment with Docker and DC/OS

Continuous integration, delivery, and deployment with Docker and DC/OS

December 23, 2019

Michael Hausenblas demonstrates how to build and roll out containerized applications in an automated fashion and outlines best practices around Docker image builds, taking footprint and security aspects into consideration.
Learning microservices in the open with GameOn!

Learning microservices in the open with GameOn!

December 17, 2019

There are plenty of talks out there about how to get started with microservices, but in reality you learn by doing. Erin Schnabel and Katherine Stanley explore lessons learned while creating GameOn!, an interactive text-based adventure game that allows you to get hands-on with a microservice architecture to find out what works and what doesn't, and how we as a community can learn from each other.
A practitioners guide to securing your Hadoop cluster

A practitioners guide to securing your Hadoop cluster

December 16, 2019

Many Hadoop clusters lack even basic security controls. Michael Yoder, Ben Spivey, Mark Donsky, and Mubashir Kazia walk you through securing a Hadoop cluster. You'll start with a cluster with no security and then add security features related to authentication, authorization, encryption of data at rest, encryption of data in transit, and complete data governance.
Hadoop and Spark at ING: An overview of the architecture, security, and business cases at a large international bank

Hadoop and Spark at ING: An overview of the architecture, security, and business cases at a large international bank

December 12, 2019

Bas Geerdink offers an overview of the evolution that the Hadoop ecosystem has taken at ING. Since 2013, ING has invested heavily in a central data lake and data management practice. Bas shares historical lessons and best practices for enterprises that are incorporating Hadoop into their infrastructure landscape.
Hadoop in the cloud: A Nielsen use case

Hadoop in the cloud: A Nielsen use case

December 12, 2019

Cloudera CEO Tom Reilly and James Powell, global CTO of Nielsen, discuss the dynamics of Hadoop in the cloud, what to consider at the start of the journey, and how to implement a solution that delivers flexibility while meeting key enterprise requirements.
Lessons learned running Hadoop and Spark in Docker

Lessons learned running Hadoop and Spark in Docker

December 11, 2019

Many initiatives for running applications inside containers have been scoped to run on a single host. Using Docker containers for large-scale environments poses new challenges, especially for big data applications like Hadoop. Thomas Phelan shares lessons learned and some tips and tricks on how to Dockerize your big data applications in a reliable, scalable, and high-performance environment.
Securing Apache Kafka

Securing Apache Kafka

December 10, 2019

With Apache Kakfa 0.9, the community has introduced a number of features to make data streams secure. Jun Rao explains the motivation for making these changes, discusses the design of Kafka security, and demonstrates how to secure a Kafka cluster. Jun also covers common pitfalls in securing Kafka and talks about ongoing security work.
AI is not a matter of strength but of intelligence

AI is not a matter of strength but of intelligence

December 7, 2019

Francisco Webber offers a critical overview of current approaches to artificial intelligence using "brute force" (aka big data machine learning) as well as a practical demonstration of semantic folding, an alternative approach based on computational principles found in the human neocortex. Semantic folding is not just a research prototypeit's a production-grade enterprise technology.
A programmer's guide to secure connections

A programmer's guide to secure connections

December 3, 2019

Beyond looking out for a little green padlock in the browser bar, what do you need to know about secure connections as a programmer? What do people mean by terms like authentication, verifying a certificate, or signing a message? Join Liz Rice as she demystifies HTTPS, TLS, X.509, and more.
Attack trees: Security modeling for Agile teams

Attack trees: Security modeling for Agile teams

December 3, 2019

Traditional security approaches to threat and risk management are highly optimized to work within a traditional software development lifecycle. Michael Brunton-Spall shares a new approach to reviewing systems along with real-life examples to help you prioritize where to focus security efforts and what sorts of security threats you should worry about.
Faster is safer: Security in the enterprise

Faster is safer: Security in the enterprise

December 2, 2019

Molly Crowther demonstrates how the enterprise can use cloud platforms to make security move at the pace of businessnot the other way around.
Smart networking with service meshes

Smart networking with service meshes

November 29, 2019

Over the past year, service meshes have gained significant interest. Most service meshes have two components: a control plane and a data plane. Anubhav Mishra explains what it takes to build a scalable control and data plane. Anubhav also discusses how HashiCorp Consul provides many features like a distributed key-value store and service discovery that make it ideal for a control plane.
Building an open platform for government innovation

Building an open platform for government innovation

November 27, 2019

There's a software culture revolution inside the government. User-centric design, lean, and agile are first citizens, but the increased velocity in development and testing requires a change in the way the government does deployment, security, and compliance. Diego Lapiduz shows how the cloud.gov team is building tools to achieve faster deployments and continuous compliance in a secure environment.
Security and performance: Breaking the conundrum. . .again

Security and performance: Breaking the conundrum. . .again

November 23, 2019

Security techniques have generally focused on protecting users by blocking requests going to the origin, but security is also a concern at the browser. Sonia Burney and Sabrina Burney explore how security can be enforced at the browser level through a combination of optimization techniques and security enhancements, which overall provide an optimal end-user experience.
Tackling consumption chaos in microservice architectures

Tackling consumption chaos in microservice architectures

November 22, 2019

Service consumption chaos is currently one of the biggest challenges in microservice environments. Mike Dvorkin discusses how tackling the complexity of exploding service dependencies and their control through a consistent consumption abstraction can significantly simplify how teams develop, test, deploy, and control applications.
Apache Eagle: Secure Hadoop in real time

Apache Eagle: Secure Hadoop in real time

November 21, 2019

Apache Eagle is an open source monitoring solution to instantly identify access to sensitive data, recognize malicious activities, and take action. Arun Karthick Manoharan, Edward Zhang, and Chaitali Gupta explain how Eagle helps secure a Hadoop cluster using policy-based and machine-learning user-profile-based detection and alerting.
You got your design team in my security team!

You got your design team in my security team!

November 21, 2019

What if the answer to managing security issues starts with the product and design teams? Thinking about security design can drive everything from business decisions through operations, but it means rethinking what security is and building different kinds of relationships between teams. It's a long journey, but Eleanor Saitta outlines three steps to a safer future.
Apache Hadoop meets cybersecurity

Apache Hadoop meets cybersecurity

November 20, 2019

The cybersecurity landscape is quickly changing, and Apache Hadoop is becoming the analytics and data management platform of choice for cybersecurity practitioners. Tom Reilly explains why organizations are turning toward the open source ecosystem to break down traditional cybersecurity analytics and data constraints in order to detect a new breed of sophisticated attacks.
How to date (a film)

How to date (a film)

November 18, 2019

Using data science to help make better business decisions in the film industry.
The Internet of Things: Its the (sensor) data, stupid

The Internet of Things: Its the (sensor) data, stupid

November 16, 2019

Martin Willcox shares the lessons he's learned from successful Teradata IoT projects about about how to manage and leverage sensor data and explains why data management, data integration, and multigenre analytics are foundational to driving business value from IoT initiatives.
What does your smart car know about you?

What does your smart car know about you?

November 16, 2019

In the last few years, auto makers and others have introduced devices to connect cars to the Internet and gather data about the vehicles activity, and auto insurers and local governments are just starting to require these devices. Charles Givre gives an overview of the security risks as well as the potential privacy invasions associated with this unique type of data collection.
Civic data: Using open source data to create socially impactful data-driven products

Civic data: Using open source data to create socially impactful data-driven products

November 14, 2019

A plethora of data has been made freely available on the Web. A large chunk of this data is civic data: on education, social welfare, demographics, and the like. Vida Williams explains how this data can be assembled into open source products that can help states, cities, municipalities, nonprofit organizations, and citizens make decisions that will positively impact their immediate neighborhoods.
Containers at scale thanks to Kubernetes

Containers at scale thanks to Kubernetes

November 13, 2019

Security, easy scaling, and high availability are essential needs for real-world application infrastructure. Brandon Philips offers a how-to talk and tutorial demonstrating how to set up a production-ready cluster with full TLS, manage the cluster through scaling and upgrade, and build the cluster for high availability. Brandon also addresses upgrading Kubernetes while keeping availability.