Boomerang - Metadata-Private Messaging under Hardware Trust
Innovative messaging system leveraging secure enclaves to protect communication metadata while balancing security, performance, and trust. Offers low latency and scalability for large-scale deployment.
Disaggregating Stateful Network Functions
Innovative approach to network function processing in public clouds, offering improved reliability and performance at lower costs through disaggregation and shared resource pools.
Launch Control - Automating a Security Baseline in the Cloud at Scale
Learn to deploy cloud-native security controls at scale, using declarative configuration for an automated, self-healing security baseline across multiple cloud environments.
Intro to Storage Security, Looking Past the Server
Explore storage security beyond servers, focusing on protecting data at rest and in transit. Learn key concepts and best practices for safeguarding critical information assets.
Securing Hybrid Cloud Environments
Explore strategies for securing hybrid cloud environments, focusing on efficiency, visibility, and AI-driven solutions to enhance overall security posture and response capabilities.
Penetration Testing in the Cloud
Exploring challenges and methods for secure cloud penetration testing, including targeted approaches using Docker instances and internal network interfaces for ethical hacking.
Breaking Managed Data Services in the Cloud
Exploring vulnerabilities in core cloud infrastructure, revealing cross-tenant boundary breaches in major cloud vendors' services and their potential impact on customer security.
Multicloud and the Chamber of Secrets
Exploring strategies for secure secret management in multicloud environments, balancing availability and security while meeting auditor requirements and engineer needs.
Architecting a Secure Cloud Framework
Explore key principles for architecting a secure cloud framework, covering threat landscapes, shared responsibility, DevSecOps, best practices, and essential security capabilities.
Architecting for the Cloud - Lessons Learned from 100 CloudStack Deployments
Insights from 100 CloudStack deployments: Implementing on-premise infrastructure for legacy and cloud apps, balancing traditional controls with cloud flexibility for phased adoption.
Architecting Security for Regulated Workloads in Hybrid Cloud
Explore architectural practices for integrating security and compliance into regulated workloads on hybrid cloud, focusing on zero trust principles and transparent assurance.
Destroying Long-Lived Cloud Credentials with Workload Identity Federation
Explore Workload Identity Federation to replace long-lived cloud credentials with short-lived tokens, enhancing security against cloud breaches and improving authentication workflows for external identity providers.
Secret Management with Hashicorp's Vault
Overview of HashiCorp's Vault for secure secret management, covering features like dynamic secrets, authentication methods, and integration options for enhanced security and access control.
When Should You Use a Serverless Approach
Explore serverless computing: benefits, challenges, and best practices. Learn when to adopt this approach for efficient cloud-based development and infrastructure management.
Flirting with the Public Cloud - Challenges of Regulated, Large Enterprises in Moving to the Public Cloud
Explore challenges faced by large enterprises in public cloud adoption, including regulatory concerns, stakeholder alignment, architectural decisions, and technical considerations for successful implementation.
Crypto for the Public Cloud
Innovative encryption techniques for cloud data security, enabling operations on fully-encrypted data. Learn approaches, tradeoffs, and best practices to maximize security, functionality, and performance in public cloud environments.
Hardware Side Channels in Virtualized Environments
Explore hardware side channel vulnerabilities in virtualized environments, focusing on cloud-based attacks. Learn about attack surfaces, demonstrations, and potential mitigations for these security risks.
Simulating Execution in Malicious Text Detection
Innovative approach to malicious text detection using simulated execution, combining static and dynamic analysis techniques for improved accuracy and efficiency in identifying obfuscated threats.
Hello From the Other Side - SSH Over Robust Cache Covert Channels in the Cloud
Explore practical cache covert channels in cloud environments for secret data exfiltration between isolated virtual machines, presented by security researchers at Black Hat Asia.
The Adventures of AV and the Leaky Sandbox
Explore a novel data exfiltration technique exploiting cloud-enhanced antivirus sandboxes in highly secure enterprises, demonstrating vulnerabilities in seemingly protected systems.
Internet-Scale Analysis of AWS Cognito Security
Reveals findings from large-scale AWS Cognito security analysis, exposing vulnerabilities in identity pools granting access to thousands of S3 buckets, DynamoDB tables, and Lambda functions.