The Traps of Using Hyper-V Features in KVM Environment
Explore pitfalls and optimizations when utilizing Hyper-V features in KVM environments, focusing on cloud gaming workloads and system timer configurations for improved virtualization efficiency.
Kubevirt and the Cost of Containerizing VMs
Explore KubeVirt's impact on VM containerization, examining performance improvements and benchmarks for efficient cloud-native virtualization.
Building a Cloud Infrastructure to Deploy Microservices as Microvm Guests
Explore deploying microservices as MicroVM guests in cloud infrastructure, covering concepts, challenges, technologies, and future developments.
The Practice Method to Speed Up 10x Boot-up Time for Guest in Alibaba Cloud
Discover techniques to dramatically accelerate guest boot-up times in Alibaba Cloud, focusing on DMA mapping optimization and virtio balloon communication for enhanced performance.
Cloud Computing
Explore cloud computing risks, certifications, and security considerations with insights on virtualization and the Cloud Security Alliance.
Securing Cloud Delivery Pipelines - Findings From A Blue-Red Team Security Simulation
Explore findings from a blue/red team security simulation focused on securing cloud delivery pipelines, with insights on tooling, advanced attackers, and best practices.
Developing a Rugged DevOps Approach to Cloud Security
Strategies for integrating continuous security into DevOps processes, emphasizing automation, monitoring, and agile security practices for cloud environments.
Using Behavior to Protect Cloud Servers
Explore behavior-based analytics for cloud server security, focusing on dynamic privilege management to identify and prevent insider threats and privilege escalation attacks in real-time.
Fighting Email Phishing with a Custom Cloud IDS
Learn to build a custom cloud-based email IDS to combat phishing, enhancing security while improving operational efficiency. Explore real-time threat adaptation and AWS implementation.
Alexa, Hack My Serverless Please
Explore serverless security risks, focusing on event injection attacks across various platforms. Learn to identify and mitigate vulnerabilities in cloud-based applications.
Reverse Engineering and Exploiting Builds in the Cloud
Explore security vulnerabilities in cloud-based CI/CD and container build environments. Learn about potential attack scenarios, remediation strategies, and best practices for securing the software supply chain.
The State of State Machines
Explore mobile security threats, the evolving landscape, and Zero Trust principles in this insightful discussion on protecting mobile devices and data.
A Dive into Hyper-V Architecture and Vulnerabilities
Explore Hyper-V architecture, vulnerabilities, and security implications in virtualization technology. Gain insights into guest-to-host exploits and platform security challenges.
Lateral Movement and Privilege Escalation in GCP - Compromise Organizations without Dropping an Implant
Explore techniques for identity compromise, privilege escalation, and lateral movement in Google Cloud. Learn about GCP's unique security model and default permissions, with demonstrations and tool releases.
My Cloud is APT's Cloud - Investigating and Defending Office 365
Investigate and defend Office 365 against sophisticated attacks. Learn authentication types, attack lifecycle, and effective countermeasures for cloud-based enterprise security.
The Enemy Within - Modern Supply Chain Attacks
Practical guidance on defending against and responding to supply chain attacks, covering prevention strategies, risk assessment, and best practices for both SecOps and App Development professionals.
Preventing Authentication Bypass - A Tale of Two Researchers
Explore techniques for identifying authentication bypass vulnerabilities, learn effective researcher-company partnerships, and discover secure coding practices to prevent similar flaws in web applications.
Intercepting iCloud Keychain
Discover critical cryptographic flaws in iCloud Keychain's end-to-end encryption, potentially allowing attackers to access plaintext secrets through man-in-the-middle attacks on iCloud communications.
Managing Access Entitlements and Their Lifecycle in a Multi-Cloud Environment
Explore strategies for managing access entitlements across multi-cloud environments, addressing security risks and improving governance practices for effective IAM controls.
Death to CIA! Long Live DIE! - How the DIE Triad Helps Us Achieve Resiliency
Explore the DIE Triad (Distributed, Immutable, Ephemeral) as an alternative to CIA, reducing security burden and enabling true resiliency. Learn to apply DIE principles for tackling security, resiliency, and privacy challenges.
Remember When We Used to Call It "Information Security"? Let's Go Back to That
Experts discuss shifting focus back to information security, exploring advancements in identity management and encryption to better protect data in an interconnected world.