Better SSH Management with Ephemeral Keys
Explore Netflix's Bless and Lyft's Blessclient for improved SSH security and user-managed keys, enhancing infrastructure protection and empowering engineers.
What Is Needed to Build Trusted Infrastructures
Exploring evolving security models for trusted infrastructure, including tokenization, TPMs, cryptography, and containerization. Discusses open source approaches to modern cybersecurity challenges.
Building a Cyber Security Operations Center - DefCamp 2015
Explore the challenges, objectives, and key success factors in establishing a Cyber Security Operations Center. Learn about data aggregation, change management, and incident response strategies.
Are We Alone in Our Infrastructure? - DefCamp - 2017
Exploración de infraestructuras de seguridad: desde módulos Viki hasta procesamiento de agua, clientes múltiples y hashes de usuarios. Análisis de cumplimiento y código abierto en sistemas Windows.
Test Driven Security in the DevOps Pipeline
Learn to implement Test Driven Security in DevOps, focusing on baseline controls, continuous testing, and preventing common vulnerabilities through specific, actionable security practices.
Docker Container Security
Learn to create a secure software supply chain using Docker Enterprise, focusing on image signing, scanning, and automated policies for compliant application development.
Avoiding Insidious Points of Compromise in Infrastructure Access Systems
Explore war stories and learn to build secure infrastructure access systems. Analyze classic incidents and discover why the industry's "zero-trust" definition may be flawed.
Six Degrees of Infiltration - Using Graph to Understand Your Infrastructure and Optimize Security Decision Making
Explore graph-based solutions for consolidating security intelligence and improving decision-making in complex infrastructures, using tools like Neo4j to enhance visibility and risk assessment.
Bringing a Machete to the Amazon
Explore AWS security challenges, vulnerabilities, and solutions. Learn assessment techniques and tools to protect your cloud infrastructure and applications.
Authenticator Leakage Through Backup Channels on Android
Explore Android authentication vulnerabilities through backup channels. Learn about security risks, attack vectors, and mitigation strategies for app developers and protocol analysts.
Pay No Attention to That Hacker Behind the Curtain - A Look Inside the Black Hat Network
Insider look at the notorious Black Hat network, revealing infrastructure, traffic patterns, and security challenges faced by one of the most hostile networks on the planet.
Security Pitfalls in Scriptable Infrastructure Pipelines
Explore security vulnerabilities in infrastructure pipelines, focusing on script-based systems. Learn to identify and mitigate risks in automated deployment processes.
Developing CTFS - Writing and Hosting Intentionally Vulnerable Applications
Learn to host Capture The Flag competitions, develop secure vulnerable applications, and set up robust infrastructure for large-scale events. Gain insights into challenge creation and security considerations.
Improving Security by Avoiding Traffic and Still Get What You Want in Data Transfers
Explore innovative data transfer techniques to enhance security without compromising connectivity. Learn about unidirectional gateways, database replication, and state transfer devices for improved network protection.
Infrastructure Craftsmanship - Keeping the Lights on for Everyone
Explore the unglamorous yet crucial world of blue team security, navigating company culture to achieve essential victories despite limited resources and recognition.
Penetration Testing in the Cloud
Exploring challenges and methods for secure cloud penetration testing, including targeted approaches using Docker instances and internal network interfaces for ethical hacking.
Security Issues in the Infrastructure
Explore infrastructure security trends, protocols, and paradigm shifts in this panel discussion, covering wireless networks, personal firewalls, and emerging security solutions.
Getting FXXXed on the River
Explore online poker vulnerabilities, from random number generation to web app security, and learn how to exploit them for enhanced gameplay and protection.
The Response Ready Infrastructure
Explore proactive cybersecurity strategies, incident response processes, and technical controls for building a robust, response-ready infrastructure in this comprehensive security talk.
Reaching Across the Isle - Improving Security Through Partnership
Strategies for enhancing security through cross-team collaboration, focusing on partnership, facilitation, and understanding different perspectives in IT and infrastructure.
How to Secure Your Node.js Containers on Kubernetes With Best Practices
Discover best practices for securing Node.js containers on Kubernetes, covering cluster protection, OIDC implementation, and application-specific security measures for robust DevOps deployments.