Kind Engineering - How to Engineer Kindness
Explore practical strategies for fostering kindness in software engineering, covering code reviews, psychological safety, feedback, and workplace honesty to create happier teams and companies.
The Remote Working Security Conundrum - What Is Reasonably Secure Anyway?
Explore challenges and solutions for securing remote work environments, from physical security to application layer, with focus on novel technologies and practical approaches.
It's Time to Debloat the Cloud with Unikraft
Explore Unikraft, an open-source project for creating efficient cloud images tailored to specific applications, offering improved performance and reduced resource consumption compared to traditional cloud instances.
Disorganizing Your SRE Organization
Insights on reorganizing SRE practices for remote work, focusing on democratizing responsibility, empowering autonomy, and implementing declarative workflows to adapt to new challenges.
DNA Data Storage and Near-Molecule Processing for the Yottabyte Era
Explore DNA data storage and near-molecule processing for the yottabyte era, including encoding, decoding, random access, and potential for hybrid electronic/molecular computing systems.
FAST '21 Work-in-Progress Reports
Explore cutting-edge research in storage systems through short presentations on topics like persistent memory, I/O optimization, transaction handling, and data privacy in analytics.
Off the Beaten Path - Moving Observability Focus from Your Service to Your Customer
Exploring customer-centric observability beyond traditional metrics, emphasizing direct engagement, user experience capture, and rethinking performance to enhance SRE practices and improve overall service quality.
Jupyter as Incident Response Tool
Explore using Jupyter for incident response in SRE, showcasing its dynamic exploration and result-sharing capabilities through a simulated cache slowdown scenario and post-incident best practices.
Are We Getting Better Yet? - Progress Toward Safer Operations
Exploring progress in safer operations, this talk delves into effective incident analysis, organizational learning, and strategic investments for improved reliability and team well-being.
Attack on Titan M, Reloaded - Vulnerability Research on a Modern Security Chip
Explore vulnerability research on Google's Titan M security chip, including fuzzing techniques, impact analysis, and mitigation strategies for modern device protection.
Attacks From a New Front Door in 4G & 5G Mobile Networks
Unveils critical API vulnerabilities in 4G/5G networks, exposing risks for AI, MEC, and IoT applications. Explores attack vectors, security misconfigurations, and potential exploits in commercial providers' systems.
AAD Joined Machines - The New Lateral Movement
Explore new lateral movement techniques in Azure AD joined machines, including Pass-The-Certificate attacks and hunting solutions for enhanced network security.
Better Privacy Through Offense - How to Build a Privacy Red Team
Learn to build and operate a privacy red team, exploring its unique challenges and benefits for enhancing organizational privacy defenses through offensive techniques and real-world examples.
Whip the Whisperer - Simulating Side Channel Leakage
Explore pre-silicon power simulations to detect cryptographic side channel leakage in hardware designs, with case studies on identifying and mitigating vulnerabilities in software and hardware implementations.
Bug Bounty Evolution - Not Your Grandson's Bug Bounty
Explore the evolution of bug bounty programs, their impact on cybersecurity, and future directions. Gain insights into challenges, best practices, and alternative solutions for ethical hackers and organizations.
Taking Kernel Hardening to the Next Level
Explore advanced kernel hardening techniques, focusing on CFI and UAF defense. Learn about new approaches to enhance OS security against evolving exploitation methods.
Bypass CFG in Chrome
Explore advanced techniques for bypassing Control Flow Guard (CFG) in Chrome, including analysis of previous methods and examination of current vulnerabilities.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover critical Azure Cosmos DB vulnerability allowing unauthorized admin access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
TeamTNT - Explosive Cryptomining
Explore TeamTNT's cryptojacking tactics targeting Linux servers, including their attack methods, credential theft, and evolution from Docker instances to Windows systems.
Recertifying Active Directory Certificate Services
Explore AD CS vulnerabilities, attack vectors, and defense strategies for securing Microsoft's PKI implementation. Learn escalation scenarios, auditing techniques, and incident response.
Zen and the Art of Adversarial Machine Learning
Explore security concerns in machine learning integration, including data extraction, model evasion, and biased outcomes. Learn operational guidance and tools for addressing these challenges.