Owning the Cloud Through SSRF
Explore cloud security vulnerabilities through SSRF attacks, focusing on metadata exploitation, CVE examples, and advanced techniques like DNS rebinding for comprehensive cloud protection.
The Self Healing Cloud - Protecting Applications and Infrastructure with Automated Virtual Patching
Explore automated virtual patching for cloud security, protecting apps and infrastructure through innovative techniques like web application firewalls and network intrusion detection.
Cloud Sec 12 Step
Explore cloud security essentials with Adrian Lane from Securosis, LLC. Learn key steps to protect your data and infrastructure in the cloud environment.
Threat Modeling for Linux Containers LXC, Docker and the Cloud
Explore threat modeling for complex cloud systems, focusing on Linux containers and OpenStack. Learn innovative approaches beyond traditional data flow diagrams for effective security analysis.
Scout Suite – A Multi-Cloud Security Auditing Tool
Explore Scout Suite, a multi-cloud security auditing tool, to enhance your cloud infrastructure's security posture and streamline compliance assessments across platforms.
Side Channel Attacks in the Cloud
Explore cloud security vulnerabilities, focusing on side channel attacks in virtualized environments. Learn about Bernstein's attack and deduplication exploits, with insights on improving isolation techniques.
GitOops! All Paths Lead To Clouds
Explore cloud security risks in Git repositories, focusing on common misconfigurations and best practices for protecting sensitive information in version control systems.
CyberRange - An Open-source Offensive Security Lab In AWS
Learn to create a private AWS security training lab using SecDevOps-Cuse/CyberRange. Explore automation, vulnerability management, and offensive security in a safe cloud environment.
AWS Vs Azure Security
Comparative analysis of AWS and Azure security features, exploring identity management, storage, encryption, network security, and monitoring capabilities in both cloud platforms.
How to Take Over a Production System in the Cloud
Explore real-world cloud security vulnerabilities, their root causes, and effective mitigation strategies through examples and demonstrations. Learn to protect your cloud systems from potential threats.
Design and Verification of the Arm Confidential Compute Architecture
Explores Realms, a new confidential computing abstraction protecting data privacy in virtual machines. Introduces novel verification techniques for secure firmware in complex, concurrent systems.
Justitia - Software Multi-Tenancy in Hardware Kernel-Bypass Networks
Explore software multi-tenancy in hardware kernel-bypass networks, addressing challenges in network sharing policies while preserving low latency and CPU efficiency in modern datacenters.
MiniBox - A Two-Way Sandbox for x86 Native Code
Explore MiniBox, a groundbreaking two-way sandbox for x86 native code, offering mutual protection between applications and operating systems in cloud computing environments.
Hyperprobe - Towards Virtual Machine Extrospection
Explores a novel framework for detecting host OS kernel versions from within guest operating systems, leveraging hypervisor features and bugs to enable virtual machine extrospection.
Grand National 2021 - Managing Extreme Online Demand at William Hill
Strategies for managing unprecedented online demand during a major sporting event, focusing on SRE preparation, lambda@edge logic, and queueing systems to handle traffic spikes.
TaoStore - Overcoming Asynchronicity in Oblivious Data Storage
Explores secure oblivious storage systems for untrusted cloud providers, introducing TaoStore to address asynchronicity issues in multi-user scenarios with overlapping data sets.
GitOps - An Elegant Tool for Hybrid Cloud Kubernetes
Explore GitOps for consistent application management across multiple Kubernetes clusters. Learn deployment, management, and migration techniques through live demonstrations.
Zero-Downtime Rebalancing and Data Migration of a Mature Multi-Shard Platform
Explore zero-downtime techniques for rebalancing and migrating data in multi-shard platforms, focusing on MySQL binlog-based tools for load distribution and tenant isolation.
From Laptop to Lambda - Outsourcing Everyday Jobs to Thousands of Transient Functional Containers
Explore gg, a framework enabling near-interactive execution of everyday tasks using thousands of parallel cloud functions, revolutionizing how we approach resource-intensive computing jobs.
Serverless Ops - What to Do When the Server Goes Away
Explore the impact of serverless architecture on operations, redefining roles and responsibilities. Learn to adapt, prove value, and navigate the changing landscape of cloud technology.
Apache Kafka and KSQL in Action - Let's Build a Streaming Data Pipeline
Build real-time streaming data pipelines using Apache Kafka and KSQL. Learn architectural benefits, data integration, filtering, enrichment, and anomaly detection through practical demonstrations.