Giovanni Cruz - Atacando VoIP: un paraíso - Ekoparty 2010
Exploración de vulnerabilidades y técnicas de ataque en sistemas VoIP, revelando riesgos de seguridad y estrategias de protección en comunicaciones de voz sobre IP.
Network Based Detection of PE Structural Anomalies
Explore network-based detection techniques for identifying structural anomalies in Portable Executable (PE) files, enhancing cybersecurity defenses against malware threats.
Turning an Incident Report into a Design Issue with TLA+
Explore how modeling-driven techniques and TLA+ can enhance postmortem analysis, uncover root causes, and improve system design in distributed database architectures.
Logs Told Us It Was DNS, It Looked like DNS, It Had to Be DNS, It Wasn't DNS
Unraveling a complex Kubernetes incident: from DNS suspicions to kernel-level insights, culminating in a surprising three-line code fix. Learn debugging techniques and unexpected system behaviors.
An Organizational Response to Incidents - Designing for Smooth Coordination
Strategies for effective incident response coordination, focusing on follower roles and organizational preconditions. Insights to improve communication and collaboration during software outages.
Incident Commanders to Incident Analysts - How We Got Here
Explore the transition from incident management to incident analysis, highlighting the distinct skills required and the value of post-incident learning for driving meaningful organizational change.
SRE's Critical Role in the COVID-19 Pandemic Response in Government
Explore how SREs in government navigated regulatory constraints to rapidly deploy critical software services during the COVID-19 pandemic, showcasing their adaptability and incident response skills.
Hacking the Pachyderm - Scaling Servers and People
Scaling a social platform from 700 to 30,000 users in one month: technical challenges, decision-making, and team dynamics during rapid growth and migration without data loss or burnout.
Far from the Shallows - The Value of Deeper Incident Analysis
Explore the value of in-depth incident analysis in SRE, moving beyond surface-level metrics to uncover hidden insights and improve system reliability through qualitative investigation.
Human Observability of Incident Response
Practical advice on improving incident response outcomes by understanding the human element. Explores coordination, learning, and socio-technical systems in incident management.
Warding against the Dark Arts - Crafting a Defense Strategy against Botnet DDoS Attacks
Learn strategies to defend against large-scale DDoS attacks, focusing on performance gains, service hardening, and understanding real-user traffic for improved availability and comprehensive protection.
Adversarial Data Mining - Big Data Meets Cyber Security
Explore adversarial data mining techniques in cybersecurity, focusing on big data challenges and solutions for detecting and mitigating threats in complex digital environments.
Practical Censorship Evasion Leveraging Content Delivery Networks
Explore innovative techniques for bypassing internet censorship using Content Delivery Networks, presented by researchers from UMass Amherst at a major cybersecurity conference.
Slitheen - Perfectly Imitated Decoy Routing Through Traffic Replacement
Explore a novel decoy routing technique for censorship circumvention, featuring traffic replacement to perfectly imitate overt destinations and enhance user privacy.
Stemming Downlink Leakage from Training Sequences in Multi-User MIMO Networks
Explore techniques to prevent information leakage in multi-user MIMO networks, focusing on downlink training sequences and their security implications for wireless communications.
All Your DNS Records Point to Us - Understanding the Security Threats of Dangling DNS Records
Explore security threats of dangling DNS records, understanding vulnerabilities and potential exploits in domain name systems.
PIPSEA - A Practical IPsec Gateway on Embedded APUs
Innovative IPsec gateway implementation on embedded APUs, enhancing network security performance through efficient hardware utilization and optimized cryptographic operations.
Coverage-based Greybox Fuzzing as Markov Chain
Explore coverage-based greybox fuzzing as a Markov chain process, enhancing software testing efficiency and vulnerability detection in computer security applications.
Introduction to Credit Networks
Explore credit networks, their applications, and security implications in distributed systems. Learn from expert Aniket Kate about this emerging concept in computer science.
Make Sure DSA Signing Exponentiations Really Are Constant-Time
Explore constant-time DSA signing exponentiations for enhanced cryptographic security. Insights from experts on mitigating timing attacks in digital signature algorithms.
Generic Attacks on Secure Outsourced Databases
Explores generic attacks on secure outsourced databases, revealing vulnerabilities in data protection methods and proposing potential countermeasures for enhanced security in cloud storage systems.