security

Better routing security through concerted action

Better routing security through concerted action

February 25, 2020

There is nearly universal agreement that the Internet routing system is vulnerable to attack, but thoughts on how to address the problem vary from better technolog …
Four years of breaking HTTPS with BGP hijacking

Four years of breaking HTTPS with BGP hijacking

February 25, 2020

During the 2015 BlackHat conference, the authors presented an approach which makes it possible for an arbitrary attacker to use vulnerabilities in the Border Gatew …
RPKI: Legal Barriers and New Directions

RPKI: Legal Barriers and New Directions

February 25, 2020

2018 saw major growth in adoption of the Resource Public Key Infrastructure (RPKI) framework for routing security, with NANOG 74 marking an inflection point. Over …
Service Mesh in a Nutshell

Service Mesh in a Nutshell

February 25, 2020

Software applications have evolved from monoliths to microservices in a move towards becoming Cloud Native. The Cloud provides numerous benefits over traditional platforms. However, transitioning towa …
Using open source tools to validate network configuration

Using open source tools to validate network configuration

February 25, 2020

Bugs in network configuration can lead to security breaches and significant downtime, which in turn leads to monetary losses and damages the organizations reputat …
Creating a FOSS Study Group at my University

Creating a FOSS Study Group at my University

February 24, 2020

It's not uncommon to see students wanting to discuss or learn a topic that isn't in the course curriculum. Without the proper references, teachers or colleagues to engage in a different topic, student …
Deep Learning Toolkit for Splunk

Deep Learning Toolkit for Splunk

February 24, 2020

The Deep Learning Toolkit for Splunk allows you to integrate advanced custom machine learning systems with the Splunk platform using TensorFlow 2.0, PyTorch and NLP libraries. Jupyter Lab Notebooks are providing data scientists and machine learning developers with an integrated experience from rapid prototyping to operationalising models in production. The app is freely available on splunkbase.
Privacy, Consent and Security Within Modern Applications

Privacy, Consent and Security Within Modern Applications

February 24, 2020

Rapid application innovation is characterized in part using shared code from open source components. While open source development offers many benefits, when regulators change the rules our strengths …
An Agile Approach to Threat Modeling for Securing Open Source Project EdgeX Foundry

An Agile Approach to Threat Modeling for Securing Open Source Project EdgeX Foundry

February 23, 2020

Evaluating security risks and conducting threat modeling are challenging for open source project contributors and adopters. There are rarely enough people, or people with experience, to tackle these t …
Monsters, Ghosts, and Bugs: How to Choose a Kernel

Monsters, Ghosts, and Bugs: How to Choose a Kernel

February 23, 2020

Most users and developers dont think too closely about what kernel is running, yet the kernel is a vital piece of software. There are many choices of what kernel to run, from a well-tested enterprise …
Security Track: LE Collaboration

Security Track: LE Collaboration

February 23, 2020

Working with LE is something that many providers fear because of the unknown and and potentially some history. However, over the past decade the anti-abuse communi …
Comparison of Current Service Mesh Architectures

Comparison of Current Service Mesh Architectures

February 22, 2020

A service mesh provides visibility, traffic management, resiliency and security control for distributed application services. This presentation focuses on the differences between service meshes and se …
Lightning Talk: CaribNOG and Caribbean Networking

Lightning Talk: CaribNOG and Caribbean Networking

February 22, 2020

The Caribbean Network Operators Group (CaribNOG) is a volunteer community dedicated to exchanging technical information and experiences related to the management o …
Lightning Talk: Prefix Filter All the Peers

Lightning Talk: Prefix Filter All the Peers

February 22, 2020

I'd like to re-do (with updates) the presentation I did in Vancouver for the security track, except do it in the main session. Basically: 1) howdy! I'm going to st …
Anomaly detection in smart buildings using federated learning

Anomaly detection in smart buildings using federated learning

February 21, 2020

There's an exponential growth in the number of internet-enabled devices on modern smart buildings. IoT sensors measure temperature, lighting, IP camera, and more. Tuhin Sharma and Bargava Subramanian explain how they built anomaly-detection models using federated learningwhich is privacy preserving and doesn't require data to be moved to the cloudfor data quality and cybersecurity.
Getting a Good Nights Sleep After a Fresh Kubernetes Deployment

Getting a Good Nights Sleep After a Fresh Kubernetes Deployment

February 21, 2020

WIth constantly increasing number of security threats, no Kubernetes cluster should stay vulnerable. How easy it is to make sure yours follows all of the best practices? Having an automated assessment …
Finding the Best Way to Use Linux Kernel - Status Update

Finding the Best Way to Use Linux Kernel - Status Update

February 20, 2020

Linux is the default choice of modern IT system including IoT, Embedded and many others. For IT system, historically, commercial distros are providing distribution with security and bug fixes in Long …
CommunityBridge: A Quick Tour of the Cloud Platform and Tooling LF Engineers are Building to Serve its Projects

CommunityBridge: A Quick Tour of the Cloud Platform and Tooling LF Engineers are Building to Serve its Projects

February 19, 2020

Managing the legal IP, funding, IT operations, governance, security, training, events and growth of the 200+ big open source projects is no insignificant task. To provide deep engagement value to our …
Cutting Edge Toolchain (Latest Features in GCC/GLIBC)

Cutting Edge Toolchain (Latest Features in GCC/GLIBC)

February 19, 2020

Toolchain technology is a day to day tool used by Linux developers. The core system of this technology is released every year (GLIBC twice a year). However, what new technology is being implemented on …
How to deploy large-scale distributed data analytics and machine learning on containers (sponsored by HPE)

How to deploy large-scale distributed data analytics and machine learning on containers (sponsored by HPE)

February 19, 2020

Join Thomas Phelan to learn whether the combination of containers with large-scale distributed data analytics and machine learning applications is like combining oil and water or like peanut butter and chocolate.
Open Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm

Open Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm

February 19, 2020

A key aspect to maintaining device security is monitoring and addressing known vulnerabilities in open source software in a timely fashion. This presentation will help you get started with the process …
PacBot: Enabling Cloud Agility with Automated Compliance and Remediation

PacBot: Enabling Cloud Agility with Automated Compliance and Remediation

February 19, 2020

For T-Mobile, the purpose of public cloud is to accelerate time-to-value for customers, unlocking developer agility while protecting the business from critical security and compliance issues. This is …
To Boldly go Where Linux Cannot with Zephyr and Eclipse IoT

To Boldly go Where Linux Cannot with Zephyr and Eclipse IoT

February 19, 2020

Linux is a versatile operating system; it can power smart watches, mainframes and everything in between. However, if a constrained device only possesses a few megabytes of memory and a CPU running at …
Data security and privacy anti-patterns

Data security and privacy anti-patterns

February 15, 2020

Anti-patterns are behaviors that take bad problems and lead to even worse solutions. In the world of data security and privacy, theyre everywhere. Over the past four years, data security and privacy anti-patterns have emerged across hundreds of customers and industry verticalsthere's been an obvious trend. Steven Touw details five anti-patterns and, more importantly, the solutions for them.
Fine-grained Authorization in a Containerized World - Ashutosh Narkar, Styra Inc.*

Fine-grained Authorization in a Containerized World - Ashutosh Narkar, Styra Inc.*

February 15, 2020

Organizations use containerized workloads to build and deploy applications. Although diverse in nature these deployments must conform to company-wide constraints around cost, security, and performance …
Everything is connected and the clock is ticking: AI and big ag data for food security

Everything is connected and the clock is ticking: AI and big ag data for food security

February 14, 2020

Sara Menker, CEO, Gro Intelligence
Executive Briefing: Data catalogsConcepts, capabilities, and key platforms

Executive Briefing: Data catalogsConcepts, capabilities, and key platforms

February 14, 2020

Andrew Brust provides a primer on data catalogs and a review of the major vendors and platforms in the market. He examines the use of data catalogs with classic and newer data repositories, including data warehouses, data lakes, cloud object storage, and even software and applications. You'll learn about AI's role in the data catalog world and get an analysis of data catalog futures.
Fair, privacy-preserving, and secure ML

Fair, privacy-preserving, and secure ML

February 14, 2020

With ML becoming more mainstream, the side effects of machine learning and AI on our lives become more visible. You have to take extra measures to make machine learning models fair and unbiased. And awareness for preserving the privacy in ML models is rapidly growing. Mikio Braun explores techniques and concepts around fairness, privacy, and security when it comes to machine learning models.