[TALK]@Telematika

Talks & Presentations Collection

2017 O'Reilly Defender Awards
January 23, 2020

2017 O'Reilly Defender Awards

The second annual OReilly Defender Awards acknowledge and celebrate our security heroes and heroines who have demonstrated exceptional leadership, creativity, and collaboration in the defensive security field. These honors will be presented during keynotes.

An infinite set of security tools

An infinite set of security tools

January 23, 2020

You can spend your entire security budget on signal-based technologies (such as endpoint security, antimalware, and vulnerability detection) and incrementally improve the security of your environment. But the real value is in people. Join Window Snyder to learn why the basics are hard to implement consistently but will get you a lot further than yet another set of signal-based tools.
As on a Darkling Plain: Network Survival in an Age of Pervasive DDoS

As on a Darkling Plain: Network Survival in an Age of Pervasive DDoS

January 23, 2020

In this presentation, we will discuss a significant new evolution of the standard DDoS attack model which presents unique challenges for network operators and end- …
BeyondCorp: Beyond fortress security

BeyondCorp: Beyond fortress security

January 23, 2020

Most companies today use some variation of the firewall or fortress model for perimeter security. This model assumes everything on the outside is dangerous and everything in the inside is safe and worked well when employees worked on desktop computers at the company HQ. Neal Mueller and Max Saltonstall offer an overview of Googles BeyondCorp, a new model for today's dispersed BYOD workforce.
Building a culture of security at the New York Times

Building a culture of security at the New York Times

January 23, 2020

The New York Times has staked its future on being a destination for readers. As a result, the company is working to incrementally improve the security of its environment. Drawing on this work, Runa Sandvik shares practical lessons on how to build and foster a culture of security across an organization.
Consensual software: Prioritizing user trust and safety

Consensual software: Prioritizing user trust and safety

January 23, 2020

Online safety has become a huge problem in the world of oversharing. Real-name policies, automatic geolocation tracking, and photo tagging increase user adoption rates, but these features can be quickly abused by bad actors. Danielle Leong explains how to apply a "consent filter" to product decisions to create a safer user experience and help protect your most vulnerable users from harm.
Contextualizing your Splunk logs

Contextualizing your Splunk logs

January 23, 2020

In a daily fight to secure organizations, security analysts are inundated with a massive log set (if one is so fortunate), but with it comes a high signal-to-noise ratio. Increase your signal by adding context to your logs. Join Quiessence Phillips to learn about the type of context that could be added and the value of its addition.
Developing and evolving your own control plane

Developing and evolving your own control plane

January 23, 2020

At Fastly we run our own control plane built on top of open-source software, this fact enables us to do things you can't do with traditional protocols. However, wi …
Doing DropBox the Cloud Native Way

Doing DropBox the Cloud Native Way

January 23, 2020

Cloud Native architecture has slowly become the default way to build robust, scalable applications. How would you rebuild a large scale storage service such as Dropbox (please note Dropbox is just an …
Enhance Fuego Test Efficiency by Applying Additional Software & Hardware Solutions

Enhance Fuego Test Efficiency by Applying Additional Software & Hardware Solutions

January 23, 2020

Applying Fuego (Jenkins-based test automation) into open-source software verification is widely adopted recently. To enhance Fuego efficiency, Renesas is applying additional software solutions (like L …
IPv6, the DNS and Big Packets

IPv6, the DNS and Big Packets

January 23, 2020

We are now at that point in the transition to IPv6 when we are hearing some ISPs talk about an IPv6-only service in the near future. But are we really ready? This …
Keynote: Why the Internet is the only network that matters

Keynote: Why the Internet is the only network that matters

January 23, 2020

Dave Schaeffer founder of Cogent Communications will provide his perspective on the trends and challenges facing the IP industry drawing on his experience founding …
Network Automation: past, present, and future

Network Automation: past, present, and future

January 23, 2020

Moderator - Jesse Sowell, Cybersecurity Postdoctoral Fellow, Stanford University Speaker: Mircea Ulinic - Cloudflare, Network Systems Engineer, NAPALM maintainer, …
Noah: Hypervisor-Based Darwin Subsystem for Linux

Noah: Hypervisor-Based Darwin Subsystem for Linux

January 23, 2020

In this talk, we present Noah, a Linux binary compatibility layer for macOS based on hypervisor technology. Noah executes Linux ELF binaries by loading it into a hypervisor in which no kernel code is …
Open Build Service in Debian

Open Build Service in Debian

January 23, 2020

It is impressive how much time and resources a team can save by using the OBS to manages their packages creation and distribution. OBS is a generic system to build and distribute packages from sources …
Optical Illusions: Content Providers and the Impending Transformation of International Transport

Optical Illusions: Content Providers and the Impending Transformation of International Transport

January 23, 2020

In just the past four years, large content providers such as Google, Facebook, and Microsoft have directly invested in 14 submarine cables The market's largest ban …
A Flowspec API for easier packet filtering during incidents

A Flowspec API for easier packet filtering during incidents

January 22, 2020

With the inclusion of Flowspec support in routers came the opportunity to better respond to malicious traffic events. In the case of Oracle + Dyn, we wanted to int …
BGP Large Community for Route Leak Detection

BGP Large Community for Route Leak Detection

January 22, 2020

In general, BGP autonomous system (AS) relationships are either customer-transit or peer-peer. A route received from a transit or a peer can only be sent to a cust …
Cloud Foundry GrootFS: A Daemonless Container Image Manager that You Can Use with RunC for Fun and Profit

Cloud Foundry GrootFS: A Daemonless Container Image Manager that You Can Use with RunC for Fun and Profit

January 22, 2020

runC, OCIs implementation of the runtime spec, has been very successful since the initiative was launched back in 2015. Cloud Foundry and others have been running with runC in production for a while …
Empowering through security

Empowering through security

January 22, 2020

Traditionally we security professionals have been viewed as gate keepers, rule enforcers, and the people who say "no." Fredrick Lee shines a light on the ways security has allowed the world to do more and encourages security professionals to solve the difficult problems that will allow us to say "yes." Our profession needs to reach beyond being gatekeepers and move toward being gate openers.
Enterprise SaaS startups: The business case for security

Enterprise SaaS startups: The business case for security

January 22, 2020

It's a huge act of trust for an established company to allow a startup access to its data and infrastructure. Kyle Randolph shares lessons learned building an enterprise SaaS startup, where security went from zero to paramount as the company scaled, and explains how to meet customers' needs, how to sell security to management, and how to build security into engineering.
Enterprise security: A new hope

Enterprise security: A new hope

January 22, 2020

The frequency and impact of recent high-profile breaches has been positively depressing. However, a new type of security engineering is taking root, which suggests hope for effective corporate security at enterprise scale. Haroon Meer highlights these hopeful examples in a bid to encourage more people to plot a course toward achievable security.
Fast Releasing and Testing of Gentoo Kernel Packages and Future Plans of the Gentoo Kernel Project

Fast Releasing and Testing of Gentoo Kernel Packages and Future Plans of the Gentoo Kernel Project

January 22, 2020

When I joined the Gentoo Kernel Team, my initial focus has been on taking a closer look at the kernel releasing process and documenting it. My investigations revealed that there was a discrepancy bet …
Fluentd 101: Unified Logging Bootstrapping

Fluentd 101: Unified Logging Bootstrapping

January 22, 2020

Fluentd is now a project under CNCF, and its users & applications are growing more and more. But, what is Fluentd? What is the benefit of Fluentd application? What do we need to take care about using …
Further Dispatches from the DNS Frontier

Further Dispatches from the DNS Frontier

January 22, 2020

DNS-OARC regularly co-locates its Domain Name Systems Operations Workshops with NANOG, and is doing so again in San Jose immediately before NANOG71. The impact of …
Getting started with OpenConfig

Getting started with OpenConfig

January 22, 2020

This session provides a practical introduction to vendor neutral operations using OpenConfig. It provides an overview of model design principles and a close look …
Going serverless: Security outside the box

Going serverless: Security outside the box

January 22, 2020

The advent of serverless technologies and infrastructure as code has changed how we build and deploy security services, empowering teams to create low-cost, scalable, and secure services to protect organizations. Drawing on their real-world experiences, Jack Naglieri and Austin Byers explore tools and techniques for successfully building, deploying, and debugging serverless security applications.
Great software is secure software

Great software is secure software

January 22, 2020

If great software is secure software, why are there still so many vulnerabilities? Dont architects and developers want to build great systems? Chris Wysopal details how defenders can enable developers to create secure software through coaching, shared code, and services.