security

Lightning Talk: BGP Transport Security - Do You Care?

Lightning Talk: BGP Transport Security - Do You Care?

February 7, 2020

How many of you use MD5 for BGP sessions? And for what purpose? Isnt MD5 authentication really just a longer form of peer identifier to avoid accidentally estab …
Lightning Talk: Legal Barriers to Securing the Routing Architecture

Lightning Talk: Legal Barriers to Securing the Routing Architecture

February 7, 2020

This short presentation is meant to solicit NANOG community feedback on one aspect of Internet routing: the adoption of the Resource Public Key Infrastructure fram …
Packet-Level Network Analytics without Compromises

Packet-Level Network Analytics without Compromises

February 7, 2020

Network analytics has been a key component of network management for decades. As we look to integrate more intelligence, whether for increased security or to bette …
"Multicloud" - the next generation cloud infrastructure

"Multicloud" - the next generation cloud infrastructure

February 6, 2020

So, what are data center networks really built for? Short answer "applications". Whether it is a public cloud provider, private enterprise, FSI or telco cloud - th …
OTA-On-Demand (OOD) Services with AGL

OTA-On-Demand (OOD) Services with AGL

February 6, 2020

The automotive industry demands better in-car services for their customers and to keep software security up do date over a long product life-cycle. Because there have been security accidents reported …
Putting microservices on a diet with Istio

Putting microservices on a diet with Istio

February 6, 2020

Building microservice architectures is complex. Handling the involved complexities is usually left up to the development teams to implement. Using open source components to address these challenges is an option, but this quickly leads to excessive library bloat in your microservices. So let's put them on a dietwith Istio. Join Mario-Leander Reimer to learn how.
Securing APIs in a microservice architecture

Securing APIs in a microservice architecture

February 6, 2020

Microservices have quickly become a popular way to develop software systems. But as organizations implement production systems based on microservices, they are recognizing the importance and complexity of securing microservices. Rob Wilson shares techniques for securing microservice APIs and details a practical multiplatform model that you can use for securing your own microservice environments.
Workshop: Cloud-native Network Functions (CNF) Seminar

Workshop: Cloud-native Network Functions (CNF) Seminar

February 6, 2020

Two of the fastest-growing Linux Foundation projects ONAP (part of LF Networking) and Kubernetes (part of CNCF) are coming together in the next generation telecom architecture.Telcos are engaging …
An Empirical Study of an Advanced Kernel Tailoring Framework

An Empirical Study of an Advanced Kernel Tailoring Framework

February 5, 2020

Tailoring the Linux kernel may improve the security of a Linux distro by reducing the attack surface. Junghwan Kang introduced a kernel tailoring framework at OSSummit North America in 2017. The frame …
Disclosure Policies in the World of Cloud: A Look Behind the Scenes

Disclosure Policies in the World of Cloud: A Look Behind the Scenes

February 5, 2020

The tech world does not live in silos: security vulnerabilities can impact an entire ecosystem (case in point Meltdown and Spectre). How do open source projects and companies alike ensure that their s …
Lightning Talk: Securing Physical Access to Systems, Networks and Data

Lightning Talk: Securing Physical Access to Systems, Networks and Data

February 5, 2020

Information Security is a complicated and well discussed topic. InfoSec is vitally important and one weak link can break the chain. Less popular these days is disc …
Xen: The Way of the Panda

Xen: The Way of the Panda

February 4, 2020

The Xen Project supports some of the biggest clouds in production today and is moving into new industries, like security and automotive. Usually, you will use Xen indirectly as part of a commercial pr …
How CLEVER is your neural network? Robustness evaluation against adversarial examples

How CLEVER is your neural network? Robustness evaluation against adversarial examples

February 3, 2020

Neural networks are particularly vulnerable to adversarial inputs. Carefully designed perturbations can lead a well-trained model to misbehave, raising new concerns about safety-critical and security-critical applications. Pin-Yu Chen offers an overview of CLEVER, a comprehensive robustness measure that can be used to assess the robustness of any neural network classifiers.
KRACK Simplified

KRACK Simplified

February 3, 2020

WiFi devices have been using a security protocol called WPA2 without any known issues for over a decade. But in October 2017, two security researchers from Univers …
TL;DR NIST Container Security Standards

TL;DR NIST Container Security Standards

February 3, 2020

In September 2017, the National Institute of Standards and Technology issued a 63 page paper detailing their recommendations for container security. While its chock-full of recommendations all cloud …
Unikraft: An Easy Way of Crafting Unikernels on Arm

Unikraft: An Easy Way of Crafting Unikernels on Arm

February 3, 2020

Unikernels have good performance and a very tiny footprint. Thus, would benefit cloud, IoT, Edge computing and other performance and security sensitive area. But the process of converting an applicati …
Using ARIN WHOIS data in BGP prefix filters

Using ARIN WHOIS data in BGP prefix filters

February 3, 2020

I'd like to share a brief update on some routing security activities that ARIN, NTT, YYCIX, NLNOG, and the arouteserver project have been collaborating on. We work …
A programmer's guide to secure connections

A programmer's guide to secure connections

February 2, 2020

Beyond looking out for a little green padlock in the browser bar, what do you need to know about secure connections as a programmer? What do people mean by terms like authentication, verifying a certificate, or signing a message? Join Liz Rice as she demystifies HTTPS, TLS, X.509, and more.
OSS Review Toolkit: Automating FOSS Reviews within CI/CD

OSS Review Toolkit: Automating FOSS Reviews within CI/CD

February 2, 2020

In an ideal world, a FOSS review is highly automated and done often and early so that any FOSS issues - whether technical, licenses or security - can be caught and resolved as they appear. The OSS com …
Attack trees: Security modeling for Agile teams

Attack trees: Security modeling for Agile teams

February 1, 2020

Traditional security approaches to threat and risk management are highly optimized to work within a traditional software development lifecycle. Michael Brunton-Spall shares a new approach to reviewing systems along with real-life examples to help you prioritize where to focus security efforts and what sorts of security threats you should worry about.
Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security

Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security

February 1, 2020

BPF is one of the fastest emerging technologies of the Linux kernel. The talk provides an introduction to Cilium which brings the powers of BPF to Kubernetes and other orchestration systems to provide …
The 'S' in 'IoT' Stands for 'Security'

The 'S' in 'IoT' Stands for 'Security'

February 1, 2020

Along with the proliferation of IoT devices in our homes and lives has come string of laughable breaches to the extent that IoT has become synonymous with botnets. Many, if not most, of these breaches …
The State of Rootless Containers

The State of Rootless Containers

February 1, 2020

Running containers without the need for root privileges is fairly attractive, as it can protect the system from potential security bugs in the runtime through principle-of-least-privilege. Also, the a …
Between the Millstones: Lessons of Self-Funded Participation in Kernel Self Protection Project

Between the Millstones: Lessons of Self-Funded Participation in Kernel Self Protection Project

January 31, 2020

Security is not an easy topic for the Linux kernel community. Upstreaming security features usually provokes hot discussions in the Linux Kernel Mailing List and in social networks. Grsecurity/PaX, Ke …
Faster is safer: Security in the enterprise

Faster is safer: Security in the enterprise

January 31, 2020

Molly Crowther demonstrates how the enterprise can use cloud platforms to make security move at the pace of businessnot the other way around.
Device Security in IoT

Device Security in IoT

January 29, 2020

Device security is becoming increasingly complex and expensive with exponential growth in connected devices. E.g. Devices must support secure boot to prevent malicious software installationCommunicati …
Open Source Software at European Commission's IT Department

Open Source Software at European Commission's IT Department

January 29, 2020

DIGIT has a long history of recognising the value of open source software solutions. The first Open Source Software Strategy was formulated in 2000 and has been regularly updated since then. During …
Smart networking with service meshes

Smart networking with service meshes

January 29, 2020

Over the past year, service meshes have gained significant interest. Most service meshes have two components: a control plane and a data plane. Anubhav Mishra explains what it takes to build a scalable control and data plane. Anubhav also discusses how HashiCorp Consul provides many features like a distributed key-value store and service discovery that make it ideal for a control plane.