[TALK]@Telematika

Talks & Presentations Collection

January 21, 2020

Live Patching, Virtual Machine Introspection and Vulnerability Management: A Primer and Practical Guide

The talk covers several technologies and best practices to managing Security Vulnerabilities, which are told as interconnected stories. We will cover how the largest clouds in production came togeth …

Onto Petaflops with Kubernetes

January 21, 2020

Kubernetes is becoming the sought after platform for managing Deep Learning Applications at scale. In this talk, the speaker will present the internals of how Kubernetes manages GPUs. The talk will th …

Overview of ICANN Identifier Technologies Health Indicator (ITHI) Project

January 21, 2020

This talk could be either in the General Session or the DNS track. We would like to a submit a presentation on the ITHI project at ICANN. See details at http://www …

Seattle Internet Exchange

January 21, 2020

The Seattle Internet Exchange was inspired by a 111ms RTT between two networks on the same floor of the Westin Building carrier hotel. Direct connection of those n …

Securing Your DNS Infrastructure in 5 Minutes

January 21, 2020

DNS is critical to the operation of just about every organization operating today, but too many organizations overlook DNS as part of their security plan. This talk provides a practical step by step guide to ensuring an organization's DNS is secure.

Security + design * data science: A bot story

January 21, 2020

The security industry continues to struggle with alert fatigue as the talent shortage grows. Security has yet to fully embrace the power of UX to help security workers do more with less. Bobby Filar and Rich Seymour explain how they developed a chatbot, combining machine learning within an intuitive UI to expedite data search and discovery and enhance detection and response to security threats.

Security and UX: Making the digital world safer, one experience at a time

January 21, 2020

User experience is often a forgotten piece in the broader information security puzzle. Security is difficult, especially for the average user, and many believe its already baked into the day-to-day software products they use, which isnt always the case. Gwen Betts explains how a design-driven approach to security products and measures can drive greater adoption and acceptance.

Shifting to security awareness 2.0

January 21, 2020

Jason Hoenich explores the risks related to delivering poor awareness programs rather than adapting to changing needs and demands of the attack surface and learning behaviors of humans. Incorporating the key fundamental behavioral psychology nodes for establishing true culture change, and making the experience of the end user will move our programs to Security Awareness 2.0.

Testing at Scale

January 21, 2020

The OpenStack CI system processes hundreds of patches a day. All the test jobs generate considerable amounts of logs and test results. The OpenStack community has developed tools and infrastructure to …

The critical role of Maximum SID Depth (MSD) hardware limitations in Segment Routing ecosystem and how to work around those

January 21, 2020

The presentation talks about the problem space and possible workarounds: MSD Maximum SID Depth Generic concept defining number of SIDs, HW/SW are capable of imp …

The Dao of defense: Choosing battles based on the seven chakras of security

January 21, 2020

Computing has infiltrated society faster than we have been able to secure it. Defenders struggle with quantifying risk so that it translates into supported organizational changes and budget. Katie Moussouris explains how to transmute our suffering into kinetic and organizational changes and how to turn the forces that resist our defense activities into our biggest supporters in our organizations.

The razor's edge: Cutting your TLS baggage

January 21, 2020

Jan Schaumann shares insights into TLS cipher specs and protocols and threat analysis of dozens of vulnerabilities and attacks and explains how to effect change across a diverse legacy stack, how to collaborate with a significant number of teams on goals that may not be directly in line with their roadmaps, and how to get buy-in from your executives.

Virtualized service-chained security controls within a layer 2 SDN

January 21, 2020

John Studarus and Cynthia Thomas demonstrate how to service-chain traffic through multiple security functions using virtualization and software-defined networking (SDN). John and Cynthia walk you through configuring and modifying layer 2 service chains with open source cloud security tools to monitor and block malicious traffic originating from a network of virtual machines.

Web security analysis toolbox

January 21, 2020

Ido Safruti and Amir Shaked offer an overview of the data analysis tools that every web security analyst should be familiar with in their daily work, including ELK, BigQuery, and Python as well as other helpful online services. These tools will help you analyze incidents on your web application and network and alert you when an attack starts.

Why cloud-native enterprise security matters (sponsored by Pivotal)

January 21, 2020

Matt Stine offers an overview of the three principles of cloud-native securityrotate user credentials frequently, so they are only useful for a short time; repave servers and applications from a known good state often; and repair vulnerable software as soon as updates are availableand explains how this approach helps you deal with the exponentially increasing volume and velocity of threats.

Advances in CPU Performance Scaling

January 20, 2020

Quite significant and radical changes were made in the kernel's CPU performance scaling subsystem (CPUFreq) in 2016. Most importantly, it was switched over from using deferrable timers to a new contro …

Aim to Be an Open Source Zero

January 20, 2020

Getting started in open source communities can be daunting, which can lead to people (and companies) over-compensating to try to prove their inherent value to a project. This talk applies lessons in s …

Blockchain and the future of distributed computing

January 20, 2020

Although the blockchain is technically a distributed system, there has been a surprising lack interest from the distributed systems community. Catherine Mulligan explores the implications of the blockchain to distributed systems and explains what needs to be addressed in order to build and maintain them effectively.

Bootstrapping IX-Denver: A Cooperative IX Case Study

January 20, 2020

What does it take to build an IX? How could we as an industry make this process easier? Through the narrative of our first year at IX-Denver, this talk will answer …

Building next-gen edge architecture at Expedia

January 20, 2020

As Expedia refactors its backend services into a finer-grained microservice architecture, frontend applications have begun to be split into smaller applications serving a small number of pages or content on the website. Rick Fast details how Expedia is creating an extremely configurable, self-service edge architecture for routing between frontend applications and managing bot traffic.

Can we make developers care about operations?

January 20, 2020

Can we make developers care about operations? Jrgen Cito shares real-world experience of developers struggling with operations and details a journey to incorporate runtime performance aspects into the developer's daily workflow and reduce performance problems reaching production.

Changing Diversity Constructs, My Journey As A Women In DevOps

January 20, 2020

Soo shares her experiences as a woman in tech. Even though she worked for NASA and co-founded her own successful company, rampant sexism in IT and bad experiences speaking in public nearly destroyed her career. She will examine common constructs about diversity and propose ideas to bring productive change to continue to build upon the solid foundation of inclusion we have created.

Cloud native: Security threat or opportunity?

January 20, 2020

Your organization wants to go cloud native, but you don't want to hit the headlines as the victim of the latest hacking scandal. Liz Rice addresses the questions you need answers to: Will your deployments be less secure or more? How do DevOps processes like CI/CD and cluster orchestration affect your security profile? And what can we all do to minimize the risk of exploits?

Consul as a monitoring service

January 20, 2020

There are two sides to monitoring: exposing problems and taking action to resolve them. Most monitoring systems handle the first, but Consul handles both. Seth Vargo explains how Consul enables self-healing infrastructure. By coupling service discovery with monitoring, Consul is able to intelligently route traffic away from unhealthy hosts or fail over to geographically different data centers.

Consumer-driven contract testing with Pact and Docker

January 20, 2020

Harry Winser explains how to leverage consumer-driven contracts to achieve fully independent releases of microservices across teams and how to handle a service rollback while still serving over 47 million requests a day. Harry also demonstrates how to use the Pact framework to continuously deliver services that depend on one another and Docker to make developer testing easier.

Continuous performance engineering: Moving fast without breaking things

January 20, 2020

With ever-increasing demands for fast business change, how can we ensure our digital channels reflect the exacting standards of performance our customers (and business owners) expect? What does this look like in an age of DevOps and continuous delivery? Thomas Barns and John Pillar share a strategy for shifting left and automating performance analysis.

CRIU: CRazI StUff for the Mainframe?

January 20, 2020

2012, January 12, 20:42: Linus Torvalds merges Andrew's "patch-bomb" with the first CRIU kernel patches including the comment "… a project by various mad Russians to perform c/r mainly from userspac …

DDoS war games: Strengthen your team and systems by attacking them

January 20, 2020

DDoS mitigation is an ever-evolving art. Architectures change, attackers get more creative, and keeping your team and tools ahead of the curve is a constant battle. So why not make DDoS preparedness fun as well as practical? Shannon Weyrick explains why you should use DDoS war games to keep your teams skillset polished, their tools in top shape, and their spirits and confidence high.