
Explore common pitfalls in Site Reliability Engineering and learn strategies to build successful SRE programs, drawing insights from industry leaders like Netflix and Google.

Demystifying system bootstrapping: explore PXE, multi-stage processes, and automation techniques for faster, simpler, and more reliable IT provisioning and day-two operations.

Explore secure pod-to-pod communication using Mutual TLS, focusing on certificate management, implementation in Golang and Java applications, and integration with Kubernetes for streamlined security.

Explores efficient mitigation of transient execution attacks using the unmapped speculation contract, presenting Ward kernel design for improved performance without compromising security.

Automated approach to detect ransomware through dynamic analysis, focusing on file tampering and desktop changes. Improves detection of evasive ransomware unnoticed by traditional antimalware solutions.

Explores model extraction attacks on machine learning systems, demonstrating vulnerabilities in publicly accessible ML interfaces and proposing potential countermeasures to protect confidential models.

Innovative approach to bypass face authentication using 3D models created from social media photos, exploiting virtual reality to simulate liveness and fool security systems.

Network-based LUKS volume decryption using Tang: a solution for secure, automated server disk encryption at scale. Enables unattended boot in secure environments while protecting data at rest from unauthorized access.

Introduction to NIST cryptographic standards, their applications in cybersecurity, and future challenges including quantum threats, transitions, and lightweight cryptography for constrained devices.

Comprehensive analysis of a real-world ransomware attack on a school district, covering timeline, damage, recovery, and preventive measures for future cybersecurity preparedness.

Explore challenges and solutions for securing remote work environments, from physical security to application layer, with focus on novel technologies and practical approaches.

Explore using Jupyter for incident response in SRE, showcasing its dynamic exploration and result-sharing capabilities through a simulated cache slowdown scenario and post-incident best practices.

Exploring progress in safer operations, this talk delves into effective incident analysis, organizational learning, and strategic investments for improved reliability and team well-being.

Explore vulnerability research on Google's Titan M security chip, including fuzzing techniques, impact analysis, and mitigation strategies for modern device protection.

Unveils critical API vulnerabilities in 4G/5G networks, exposing risks for AI, MEC, and IoT applications. Explores attack vectors, security misconfigurations, and potential exploits in commercial providers' systems.

Explore new lateral movement techniques in Azure AD joined machines, including Pass-The-Certificate attacks and hunting solutions for enhanced network security.

Learn to build and operate a privacy red team, exploring its unique challenges and benefits for enhancing organizational privacy defenses through offensive techniques and real-world examples.

Explore pre-silicon power simulations to detect cryptographic side channel leakage in hardware designs, with case studies on identifying and mitigating vulnerabilities in software and hardware implementations.

Explore the evolution of bug bounty programs, their impact on cybersecurity, and future directions. Gain insights into challenges, best practices, and alternative solutions for ethical hackers and organizations.

Explore advanced kernel hardening techniques, focusing on CFI and UAF defense. Learn about new approaches to enhance OS security against evolving exploitation methods.

Explore advanced techniques for bypassing Control Flow Guard (CFG) in Chrome, including analysis of previous methods and examination of current vulnerabilities.