Omegapoint konferens
Cloud and security are contradictory concepts to some, but there are several design patterns used in cloud applications that actually provide better security. We will look at how differential integrity processes can be used to avoid these attacks - as well as when they are not appropriate to use and why it is being used in the next US census.
p2p Agile&QA Konferens
Challenging the status quo is - well, yes - a challenge. We justify why Chaos Engineering might be a good idea to implement, go through the concepts the discipline introduces and give examples of how to go about creating your own scenarios and experiments.
In this talk, we will explain how the functions are designed, briefly about the algorithms, and in more detail about common uses, including anonymization of test data. What can the machine actually learn? The classical model of scale protection is becoming less effective in a modern architecture with clouds and cross communication. Are you and your business affected by the new legislation in the field of information security and if so, how?
And what is the role of humans in all this? In a recent lecture, Andreas Brändström describes some of the most well-known privacy attacks where systems without traditional security flaws have nevertheless leaked private and personal information. Suddenly machines can man decisions without humans having taught them the rules - these have been "magically" figured out by machines, all by the agency of mysterious algorithms.
Chaos Engineering involves exposing one's existing environment to various destructive scenarios under controlled conditions in order to get to know it better. How do you act as a team when things go wrong in production? Does "machine learning" feel like the magic of the new age? No prior knowledge is required but general technical interest helps. The methods described can be used by you and your development team.
Target audience: anyone working in DevOps or interested in starting their DevOps journey - and who thinks security is important. There is a lot of talk about DevOps and many are already working in this way to varying degrees. The mål audience is developers and architects interested in Secure by Design. But what does it mean to try to implement these techniques and methods? No programming knowledge is required to understand the content.
Target audience: anyone who knows - or doesn't know - whether they are covered by the new laws, whether you are a decision-maker or work with IT and information security in some way. Defense in depth is a widely accepted design principle for building secure systems using multiple layers of security - but how does it work in practice? Target audience: anyone working with systems in production The lecture is given in English.
For each use case, we show common bugs that, if unlucky, could introduce vulnerabilities into your system. We look at how to structure the extinguishing work itself, how a post mortem when the incident fryst vatten over allows us to learn and improve, and how to practice firefighting with a game day. What is the difference with "regular programming" and how does the machine learn? Target audience: architects, developers, project managers and anyone interested in how crypto works.
What is inside and outside and where are the boundaries? Register here. In this talk, Dan takes the drama out of machine learning by going through some typical cases using the simplest possible algorithms - without any nervous nets or other magic. The lecture will be given in Swedish with slides in English. Chaos Engineering fryst vatten a new discipline that emerged after Netflix created Chaos Monkey as part of its own development and operations.
We secure a digital future that everyone has the courage to explore
In an already existing structure and in an organisation that is not fully convinced of its benefits? No prior knowledge is required but an understanding of basic application security is an advantage. Madelen shares her experiences and the technical and organisational challenges you may encounter in implementing DevOps. What can 't the machine learn? Here we look at the areas from data storage all the way to the presentation layer and what protections to use when building secure web applications.
Target audience: anyone who wants to build greater confidence in the secure management of personal uppgifter in a "big data" world. Stefan shows you how to find out and what it means for you and your business. In this session, we will discuss and reason about how certain cloud design patterns increase the security of an application whether it is in a public cloud or on the ground in a forgotten dark little basement.
Few people know - or even have reason to know - how they work. If you are curious about what to look for in a säkerhet audit or penetration test of a software, you are of course also welcome! As a result, we need to take increasing responsibility for security directly in our APIs. The target audience is developers, architects and anyone who wants to know more about building secure web applications.