incident

Your AS is Mine: BGP/IP Hijacking, the ICBM of the Cyber World

Your AS is Mine: BGP/IP Hijacking, the ICBM of the Cyber World

March 4, 2020

An interactive discussion on BGP/IP hijacking and AS spoofing. The presentation will cover misnomers related to "Industry Standard Squat Space" and how BGP/IP hija …
Designing a workflow to respond to BGP Incidents

Designing a workflow to respond to BGP Incidents

March 2, 2020

What do you do when someone calls you and tells you your company is part of a BGP hijack? None of us want to be part of or contribute to route leaks, misconfigurat …
OSS Vulnerability Trends 2017-2019

OSS Vulnerability Trends 2017-2019

March 1, 2020

Nowadays security incident is increasing more and more. Then lots of vendor/community/institute are making efforts to find vulnerability on software. Not only commercial software, but also OSS is havi …
Measuring chaos: Chaos engineering and team health

Measuring chaos: Chaos engineering and team health

February 26, 2020

Once restricted to companies like Netflix, chaos engineering is becoming a common practice in organizations of all sizes. Paul Osman outlines techniques Under Armour uses to measure service health with chaos engineering. He details its operational maturity model and how the company uses it to blamelessly identify teams that need additional help and action items to improve resiliency and happiness.
Prioritizing trust while creating applications

Prioritizing trust while creating applications

February 26, 2020

Time and money are generally the resources we focus on when building applications. Yet we cant buy trust; it builds slowly and can be broken quickly when we dont factor it in to our development process. Jennifer Davis examines how to leverage security practices to enable an all-team approach to security.
Better routing security through concerted action

Better routing security through concerted action

February 25, 2020

There is nearly universal agreement that the Internet routing system is vulnerable to attack, but thoughts on how to address the problem vary from better technolog …
Lessons Learned Implementing ChatOps (DevOps + Messaging)

Lessons Learned Implementing ChatOps (DevOps + Messaging)

February 25, 2020

Email overload, distributed teams and excessive meetings have caused many organizations to move their DevOps teams to messaging platforms and thus adopt ChatOps workflows. With thousands of open sourc …
The Observatorium: Combining Machine Learning and Observability to Improve Incident Response

The Observatorium: Combining Machine Learning and Observability to Improve Incident Response

January 29, 2020

At DigitalOcean, a global hosting company predicated on providing building blocks for developers, the proliferation of microservices necessary to support a worldwide cloud creates a unique-yet-univers …
BoF: Securing Open-source: Dependencies, Incident Response, Vulnerabilities, and Bug Bounties

BoF: Securing Open-source: Dependencies, Incident Response, Vulnerabilities, and Bug Bounties

January 26, 2020

Open-source projects have a more nebulous operating model, and that also means it's harder to figure out who's on the hook when something goes wrong.In security, if you're running an open-source proje …
How did things go right: Learning more from incidents

How did things go right: Learning more from incidents

January 21, 2020

Join Ryan Kitchens for an introduction to Safety-II concepts that will help move the industry forward, increasing the opportunity for learning from success with some fundamental and practical ways that get us from "Why did things go wrong?" to "How did things go right?"
Kick-starting a culture of observability and data-driven DevOps (sponsored by SignalFx)

Kick-starting a culture of observability and data-driven DevOps (sponsored by SignalFx)

January 20, 2020

Rajesh Raman dives deep into the practice of observability, demonstrating how a more analytics-driven approach to metrics, traces, and other monitoring signals improves observability. You'll learn a framework for kick-starting a culture of observability in your organization, informed by Rajesh's experience building and deploying observability tools at SignalFx.
Learning from failure: Why a total site outage can be a good thing

Learning from failure: Why a total site outage can be a good thing

January 19, 2020

Alex Elman explains how Indeed used a site-wide outage as an opportunity to build resilience, improve reliability, and make lasting improvements to the engineering culture.
Security precognition: A look at chaos engineering in security incident response

Security precognition: A look at chaos engineering in security incident response

January 19, 2020

Chaos engineering allows security incident response teams to proactively experiment on recurring incident patterns to derive new information about underlying factors that were previously unknown. Join Aaron Rinehart to explore the hidden costs of security incidents, learn a new technique for uncovering system weaknesses in systems security, and more.
Security engineering 101: When good design and security work together

Security engineering 101: When good design and security work together

January 15, 2020

Is security always a bolt-on in your software process? Is your secure development lifecycle "build, then duct-tape on some security"? Wendy Knox Everette explains why good design principles go hand in hand with a strong security stance and highlights the importance of designing in security from the very start of your development process.
Lightning Talk: How the Observability Team at Spotify Radically Decreased On-Call Alerts

Lightning Talk: How the Observability Team at Spotify Radically Decreased On-Call Alerts

December 23, 2019

The Reliability team at Spotify took over the monitoring stack and decreased incident pages by 42% within 6 months. At first, they were devoting all their time to managing on-call alerts and tech debt …
Lightning Talk: Oh Sh*t! The Config Changed!

Lightning Talk: Oh Sh*t! The Config Changed!

November 17, 2019

The majority of production incidents for Pusher's platform team during 2018 had the same root cause… a broken config! Kubernetes doesn't have a sense of versioning for configmaps and secrets and, i …
Kubernetes Failure Stories and How to Crash Your Clusters

Kubernetes Failure Stories and How to Crash Your Clusters

November 13, 2019

Bootstrapping a Kubernetes cluster is easy, rolling it out to nearly 200 engineering teams and operating it at scale is a challenge. In this talk, we are presenting our approach to Kubernetes provisio …
Container Forensics: What to Do When Your Cluster is a Cluster

Container Forensics: What to Do When Your Cluster is a Cluster

October 30, 2019

When responding to an incident in your containers, you dont necessarily have the same tools at your disposal that you do with VMs - and so your incident investigation process and forensics are differ …
Keynote: Metrics, Logs & Traces; What Does the Future Hold for Observability?

Keynote: Metrics, Logs & Traces; What Does the Future Hold for Observability?

October 26, 2019

The the three pillars of observability - monitoring, logging and tracing - were so 2018. A growing consensus is questioning the efficacy of this approach. So whats the next step?Without dwelling …
Grafana Loki: Like Prometheus, but for Logs

Grafana Loki: Like Prometheus, but for Logs

October 23, 2019

Loki is a horizontally-scalable, highly-available log aggregation system inspired by Prometheus. It is designed to be cost effective and easy to operate, as it does not index the contents of the logs, …
Network Observability with IPFIX, Prometheus and Elastic Stack

Network Observability with IPFIX, Prometheus and Elastic Stack

October 19, 2019

In traditional networks, protocols such as Netflow or IPFIX are used to export packet flow records from networking devices. In k8s, each node effectively becomes a switch/router of the traffic passing …
Network Flow Monitoring in Kubernetes with Contiv/VPP CNI and Elastic Stack

Network Flow Monitoring in Kubernetes with Contiv/VPP CNI and Elastic Stack

September 28, 2019

Although most of the Kubernetes cluster administrators do not care about the network traffic in their clusters while everything works, visibility into the network flows in the cluster (both in real ti …