Demystifying Machine Learning in Production - Reasoning about a Large-Scale ML Platform
Explore techniques for managing and improving reliability in large-scale machine learning production systems, focusing on common failure modes, best practices, and practical strategies for SREs.
When Linux Memory Accounting Goes Wrong
Debugging Linux memory accounting issues in cgroups, exploring scenarios where misaccounting can lead to host inaccessibility and application failures despite set limits.
Why You Should Burn Down Your Datacenter
Explore datacenter optimization challenges, integrating infrastructure management with power, space, and cooling systems. Learn about industrial controls and their limitations in this thought-provoking talk.
Lessons Learned from a Ransomware Attack
Comprehensive analysis of a real-world ransomware attack on a school district, covering timeline, damage, recovery, and preventive measures for future cybersecurity preparedness.
FAST '21 Work-in-Progress Reports
Explore cutting-edge research in storage systems through short presentations on topics like persistent memory, I/O optimization, transaction handling, and data privacy in analytics.
Recertifying Active Directory Certificate Services
Explore AD CS vulnerabilities, attack vectors, and defense strategies for securing Microsoft's PKI implementation. Learn escalation scenarios, auditing techniques, and incident response.
Certified Pre-Owned - Abusing Active Directory Certificate Services
Explore AD CS vulnerabilities for credential theft, persistence, and domain escalation. Learn offensive and defensive techniques to secure Active Directory PKI implementations.
Threat Hunting in Active Directory Environment
Explore advanced threat hunting techniques in Active Directory, focusing on attacker persistence methods, privilege escalation, and covert system control. Learn to detect and mitigate sophisticated APT threats.
Fuzzing File System Implementations to Uncover Security Bugs
Explore file system vulnerability research through fuzzing techniques on BSD systems. Learn to identify attack surfaces, automate testing, and uncover security bugs in kernel implementations.
Reimplementing Local RPC in .Net
Reimplementing Windows RPC in .NET for privilege escalation, covering ALPC implementation, NDR parsing, and PowerShell integration. Includes bug discovery and tooling demonstration.
Extracting Messages From iCloud - Vladimir Katalov
Explore techniques for extracting messages from iCloud, covering iCloud security basics, data protection, and accessing stored messages. Learn about encryption, token policies, and iCloud sync settings.
Demystifying the Definitions of Dark
Demystifying deep web, dark web, and related terms. Clarifies misconceptions, explores definitions, and offers a new perspective on internet classification.
A Deep Dive Into Malicious Documents
Comprehensive analysis of malicious Office documents, covering macro analysis, obfuscation techniques, shellcode execution, and OS X targeting. Equips attendees to handle various maldoc threats.
Faster, Wider, Greater - Modern Pentest Tricks
Explore modern pentesting techniques, tools, and procedures for efficient data processing and analysis. Learn about Jython, PyInstaller, CSVKit, Impacket, Frida, and GNU Parallel to enhance your security auditing skills.
Forging a Wireless Time Signal to Attack NTP Servers
Forging wireless time signals to disrupt NTP servers and consumer devices. Explores vulnerabilities in radio timing services and demonstrates low-cost methods to spoof GPS, WWVB, and other signals used for time synchronization.
Escape From The Docker KVM QEMU Machine
Explore Docker and KVM-QEMU escape techniques, vulnerabilities, and exploitation methods in cloud computing systems. Learn about container escape, QEMU device emulator flaws, and virtual machine escape strategies.
All Your Cloud Are Belong to Us - Hunting Compromise in Azure
Explore cloud security challenges, focusing on Azure infrastructure vulnerabilities and shared responsibility in IaaS, PaaS, and SaaS environments. Learn detection and mitigation strategies for emerging threats.
Industrial Technology Trajectory - Running with Scissors
Explore industrial technology's rapid evolution, its impact on cybersecurity, and the challenges of innovation, data management, and intelligent infrastructure in the digital age.
Finding Government and Vendor Hardware Backdoors
Explore techniques for identifying hidden backdoors in government and vendor hardware, covering pentesting, security appliances, and various operating systems.
You Might Still Need Patches for Denim
Explore container patch management strategies, including image registry maintenance, continuous deployment, and Google's approach to critical vulnerability patching without downtime.
Building Identity for an Open Perimeter
Explore Netflix's cloud-first security approach, focusing on identity as the new perimeter through SSO, MFA, and adaptive authentication for a location-independent strategy.