InfoQ Homepage Security Content on InfoQ
-
IoT, DDoS, and the DNS: Development Models for a Hostile Internet
Chris Baker overviews the IoT DDoS landscape, providing both a comprehensive mental model for IoT botnets, as well as sharing some insight into recent adaptations to network threat models.
/presentations/iot-ddos/en/mediumimage/Chrisbig.JPG)
-
Practical Cryptography & Blockchain Panel
The panel discusses the most important trends involving the blockchain today and fields questions from the audience. Topics covered: smart contracts, oracles, sidechains, and blockchains.
/presentations/cryptography-blockchain/en/mediumimage/Panelbig.jpg)
-
Building Reliability in an Unreliable World
Greg Murphy describes how GameSparks has designed their platform to be tolerant of many things: unreliable and slow internet connectivity, cloud resources that can fail without warning, and more.
/presentations/gamespark-reliability/en/mediumimage/Gregbig.JPG)
-
Assuring Crypto-code with Automated Reasoning
A.Tomb describes the capabilities of some open source tools that allow us to automatically determine whether a low-level cryptographic implementation matches a higher-level mathematical specification
/presentations/cryptography-reasoning/en/mediumimage/Aabig.JPG)
-
Security War Stories: The Battle for the Internet of Things
Alasdair Allan discusses the security problems when building Internet of Things devices, and the underlying differences between the IoT and the digital Internet that drive those security issues.
/presentations/security-iot-2017/en/mediumimage/Alabig.JPG)
-
Selling Unikernels: The CyberChaff Experience
Adam Wick talks about his team’s experience developing CyberChaff, a novel network defense solution with unikernels built into its core and why unikernels made sense for them.
/presentations/cyberchaff/en/mediumimage/Adambig.JPG)
-
The Seven Righteous Fights
Heidi Waterhouse discusses seven issues to tackle during project development: Localization, Security, Extensibility, Documentation, Affordance, Acceptance, Accessibility.
/presentations/startup-seven-figths/en/mediumimage/heibig.JPG)
-
Managing Secrets at Scale
Mark Paluch discusses keeping the security bar high while running services that require secrets, securely sharing and managing secrets (certificates, passwords, keys) using Vault and Spring Boot.
/presentations/secrets-at-scale/en/mediumimage/Markbig.JPG)
-
Modern Web Security, Lazy But Mindful Like a Fox
Albert Yu presents a few viable, usable and effective defensive techniques that developers have often overlooked.
/presentations/security-defenses/en/mediumimage/Yubig.JPG)
-
OpenID Connect & OAuth - Demystifying Cloud Identity
Filip Hanik and Sree Tummidi talk about the OpenID Connect and OAuth 2, sharing their experiences building the CF User Authentication and Account management project, and OpenID Connect implementation.
/presentations/openid-connect-oauth/en/mediumimage/Filbig.JPG)
-
The Psychology of Security Automation
Jason Chan discusses how security teams can use thoughtful tools and automation to improve relationships with development teams while creating a more secure and manageable environment.
/presentations/security-automationi-collaboration/en/mediumimage/Jasbig.JPG)
-
Art of Stepping on the Same Rake, Volume 2
Alex Holden talks about hackers and their attacks, their latest techniques and the defenses needed today and tomorrow. He also talks about a number of recent breaches as well as lessons learned.
/presentations/security-hackers/en/mediumimage/Alexbig.JPG)