uk: Комп'ютерні науки

description: Industrial Control System(ICS) protocols are often neglected in the realm of network security monitoring. Detecting, parsing, and finding malicious activity can be frustrating and time consuming. In this session we will share our learning experiences building detections and protocol parsers in Zeek. We will discuss how ICS protocols can be parsed by using Zeek network security monitor to hunt for malicious patterns and generate detections for your Security Information and Event Management(SIEM) tools. This talk is for those that have ICS protocols in their environments and want greater insight into ICS network traffic.

uk: вхід без авторизації

name: Blue Team Village - Extending Zeek For ICS Defense


Mark Orlando

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: The security industry is facing a severe talent shortage, but the threats are growing in number and sophistication. Finding talent, honing it to meet your specific mission, and retaining it have become immense challenges for modern operations teams. In this talk, we’ll explore these challenges and discuss creative ways to find, train, and equip a security operations “A-Team”.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Blue Team Village - When A Plan Comes Together Building a SOC A Team

DEF CON

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: In today's ecosystem, verification of identity is no longer applicable just to the user; extending to microservices, cloud providers, IoT devices and many other emerging systems as well. 81% of discovered breaches are due to broken authentication, indicate it as a prevalent issue. Developers are generally aware of different authentication methods used for secure interaction between these entities, but most often lose context on best practices. In this context, we talk about popular authentication schemes like SAML, OAuth, token, magic links, adopted by developers today and emerging ones like WebAuthN. We will present incorrectly coded authentication patterns observed in disclosed reports related to these schemes. Finally, we will conclude with actionable solutions to correct these flaws realized in the form of practical guidelines. These would be security design patterns that developers or designers could refer to in their daily tasks.

uk: вхід без авторизації

name: Blue Team Village - Who Dis?: The Right Way To Authenticate


uk: Комп'ютерні науки

description: When the shadow brokers released a large number of Equation Group tools in 2017, many researchers jumped on the analysis of EternalBlue, FuzzBunch etc. The exploits of the leak have now been thoroughly analysed and mostly patched, but the works of its persistence tool (Danderspritz) is still widely unknown. In our talk, we are going to break down the Killsuit modules of Danderspritz. Killsuit (KiSu) is a modular post-exploitation persistence and capability mechanism employed in various hacker frameworks including Danderspritz (DdSz).

uk: вхід без авторизації

name: Blue Team Village - Killsuit - How The Equation Group Remained Out Of Sight


uk: Комп'ютерні науки

description: In this talk we will go over traditional log analysis methods for AWS Cloudtrail logs and why we needed to find a better way of performing such investigations. We will then dive into AWS Athena which is essentially a serverless hive on the cloud “too many buzzwords alert” and how we use it to perform log analysis on the cloud under a centralized, efficient and transparent framework. We will go over use cases and examples of investigations, showcase investigations and showcase how Athena helped us perform more efficiently than the traditional methods mentioned before. Additionally, we will mention use cases for other type of log analysis like apache access logs, ELB and ALB logs, etc. Lastly, we will demo AWS Athena and analyze over 50GB of logs in under 1 minute, all done on the cloud serverless without the need to spin up any instances or servers. In the end, we will describe the countless possibilities for future work which include, automation, threat hunting and continuous monitoring of your AWS environment.

uk: вхід без авторизації

name: Blue Team Village - Serverless Log Analysis On AWS


uk: Комп'ютерні науки

description: Following testimony in Congress and a lengthy investigation of the Equifax breach in 2016, U.S. House of Representatives drafted a report. The report is AMAZING! It includes details of Equifax corporate structure, IT infrastructure, and covers timelines and minutiae of the breach itself. It has information that is extremely interesting and useful for security practitioners, but we might not all have the time or interest to wade through 97 pages of deep information. I did that for you! My talk is a comprehensive review of the report that covers everything I considered interesting or important.

uk: вхід без авторизації

name: Blue Team Village - Anatomy Of A Megabreach Equifax Report: a review of Equifax's organizational failures and how it led to one of tofay's most severe compromises of PII


uk: Комп'ютерні науки

description: Panel discussion with blue teamers leading in the SMB industry.

uk: вхід без авторизації

name: Blue Team Village - Security Strategy for Small - Medium Business


uk: Комп'ютерні науки

description: The life of a blue-teamer is daunting. There are logs to sift through, tasks to automate, incidents to triage, vulnerabilities to manage, meetings to attend, coffee to drink, etc. Scenarios have moving parts, procedures might not be documented, and solutions can vary. At times, the responsibilities can be compared to an ever growing fire, and all there is a pail of water. How do you put out the flames if you're not a seasoned professional? This talk lays out existing challenges for those trying to break into the fast-moving world of defensive security and ways to tackle them. Included are anecdotes, highlights, and pro-tips.

uk: вхід без авторизації

name: Blue Team Village - Blue Team Guide For Fresh Eyes


uk: Комп'ютерні науки

description: What if I told you that it is possible for blue teamers to practice CTI everyday?! With minimal guidance and insight, blue teamers can learn how to see things through the eyes of a cyber threat intel analyst. We’ll step through multiple examples of how a CTI analyst would view data, intel, analysis, and situations so you can gain helpful perspectives when performing analysis for your organization. Learn about the cognitive biases and logical fallacies that are killing your analysis and what to do about it. Take away CTI strategies that you can use in your org day one back from Hacker Summer Camp.

uk: вхід без авторизації

name: Blue Team Village - The Cyber Threat Intelligence Mindset


uk: Комп'ютерні науки

description: The InfoSec industry was born out of fear. Initially it was fear from virus infections and later, external attacks. We capitalized on that fear to build more secure environments. But fear is hard to manage: too much fear breeds paralysis, and too little fear breeds complacency. This talk will take a look at the history of fear in InfoSec, explore how its impact has shaped the industry, and how it is now getting in the way. Fortunately, we can provide the next generation a new paradigm to affect change. This talk presents some ideas on what the new security paradigm could be, and most importantly - how to enable a security-minded culture without using fear.

uk: вхід без авторизації

name: Blue Team Village - A Theme Of Fear: Hacking The Paradigm


uk: Комп'ютерні науки

description: Presentations from the DEF CON 27 Blockchain Village

uk: вхід без авторизації

name: Block Chain Village - The CryptoCurrency Security Standard CCSS


uk: Комп'ютерні науки

description: Memhunter is an endpoint sensor tool specialized in detecting memory-resident malware. The detection process is performed through a combination of endpoint data collection and memory inspection scanners. Memhunter automates the detection of memory resident malware at scale. The tool is a standalone binary that, upon execution, deploys itself as a windows service. Once running as a service, memhunter starts the collection of ETW events that might indicate code injection attacks. The live stream of collected data events is feed into memory inspection scanners that use detection heuristics to down select the potential attacks to the one that represents actual fileless threats. The entire detection process does not require human intervention, neither memory dumps, and it can be performed by the tool itself, at scale, improving the threat hunting analysis process and remediation times.

uk: вхід без авторизації

name: Blue Team Village - Memhunter: Automated Hunting of Malicious Memory Resident Code at Scale


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Block Chain Village - A Smart Contract Killchain: How the first Blockchain APT


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Block Chain Village - Responding to Firefox 0 days


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Block Chain Village - Hacking Cryptocurrencies


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Block Chain Village - Privacy Enabler or Hindrance to the Success of Blockchain


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Block Chain Village - Forcing a trustworthy notion of sequential time


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Block Chain Village - Alice and Bobs Big Secret video


Block Chain Village - What Is Bitcoin

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The human body is the most elegant and complex machine ever created, but often we do not realize how well it works until a major system has been compromised such as with an amputation severing and removing an element of the neuromuscular and skeletal system. There are 1 million annual limb amputations globally, which equates to one every 30 seconds. With those kinds of numbers and what we see in science fiction TV and film, one would expect that prosthetic technology is ubiquitous and advancing at an exponential pace. However, prosthetic technology advancement can be correlated with periods immediately following military conflicts and still not able to fully replicate anatomical function, which is why we are seeking assistance of those at DEFCON’s Biohacking Village to collaborate and help create prosthetic solutions. Wayne Penn, a biomedical engineer and entrepreneur, will be joined by bi-lateral amputee Chuck Hildreth Jr., and Occupational Therapist Laurel Koss to discuss the etiology and epidemiology of amputations, challenges amputees face, the secondary or associated conditions and complications, and their shared experiences while working on advanced robotic prosthetic limb research programs such as the DEKA/DARPA/Mobius Bionics Luke Prosthetic Arm System. Chuck will give a demonstration of the Luke Arm System, the only full powered shoulder down prosthetic arm system in existence. Introductions will be given to the two BHV Prosthetic Labs taking place following the talk and ran by this presentation team. The first Lab will be to create a family of Quick Change Magnetic Adapters for Activities of Daily Living to hold items for personal hygiene as well as items for eating and food preparation utilizing 3D Printing. The second Lab, Thermo Limbs, will be introduced by 7th graders, Piper Vail Lalla and Ava Conlon, who won the Best Idea in the Medical Field and a $20,000 grant for a patent application at the National Invention Convention. This lab will focus on creating microprocessor controlled cooling systems for amputees, as thermal regulation is a major issue that affects amputees with the loss of their major sweat and heat dissipation surfaces.

uk: вхід без авторизації

name: Bio Hacking Village - Amputees and Prosthetics Challenges: Creating Functionality, Dignity, Interaction Restoring & Enabling Technology


uk: Комп'ютерні науки

description: Medical Simulations Panel

uk: вхід без авторизації

name: Bio Hacking Village - Medical Simulations Panel


uk: Комп'ютерні науки

description: Drawing the connections between how human biology is affecting the evolution of malware. This talk will discuss how malware can affect biological virus research and be used for future medical research. Basically, a cool malware talk that will hopefully make you excited or s*&^ your pants.

uk: вхід без авторизації

name: Bio Hacking Village - Malware and Biology video


uk: Комп'ютерні науки

description: What tools are currently available to us to create “living” or bio-hybrid materials—those that can be animated with biological functionalities for growth, response, distributed information processing, and cuing to the physical and chemical environment (a.k.a. the IOT before the digital IOT)? We seek fascinating ways augment the existing devices (i.e. pregnancy tests), 3D printed objects, and fabrics to interface with engineered living systems. The illustrated applications of these bio-hybrids range from disease-detection, programmable patterning of chemicals or pharmaceutics, and embedded reactivity to environmental DNA or particles.

uk: вхід без авторизації

name: Bio Hacking Village - Liven Up: Augmentation for hybrid living materials


uk: Комп'ютерні науки

description: The internet is broken. It's vulnerable to manipulation, censorship, shutdowns, surveillance, and on top of all that, it costs to access it. What if we could bypass all that? The PirateBox platform with its meshing capability creates this possibility, but somehow has gained little traction. If every WiFi enabled device just became a node on a mesh network, we would have a replacement for the hardware layer of the internet. To show how powerful this platform can be, and take it to the next level, we have created the PegLeg, an implanted cybernetic enhancement that turns the user into an anonymized local area network on which people can chat and share files anonymously, as well as mesh with other nearby networks. The PegLeg differs from a wearable, as it cannot be confiscated, and has no battery. Come learn how you can turn your phone, laptop, raspberry pi, or router into a meshing piratebox, and build a new internet. And if you are really committed, you can build the implant yourself, and be a walking pirate server with a PegLeg.

uk: вхід без авторизації

name: Bio Hacking Village - Building a New Decentralized Internet With the Nodes


uk: Комп'ютерні науки

description: Forensic Science and Information Security are very parallel fields. They are both methodical in nature and often one area builds succinctly on top of the other. With the ability to have a specialty in various areas, it is interesting that the two do not often merge together and share policies and procedures. You see Forensic Scientists often are called in at the “endpoint.” Usually, it is at the scene of a crime, only giving the final “product” and must work backwards to build a story for what initially happened. In Information Security, with the rapid growth of exposure to data, specifically PHI, it is evident that it would be beneficial for both communities to work together. With my area of extended knowledge and expertise in Forensic and Clinical Toxicology, I am often met with various attempts to “social engineer” me out of patient results to having sent incorrect reports to clients (not on purpose of course). In a Toxicology lab, whether government (local, state or federal) or private, PHI is the utmost important issue. Scientists adhere to the policies and procedures of the SCIENTIFIC aspect of the organization, but not always to the INFORMATION SECURITY aspect of the organization. Let’s chat a little about how to make both industries more aware how they are really Lifetime Lovers and Part-time Friends

uk: вхід без авторизації

name: Bio Hacking Village - Forensic Science and Information Security presents: "Lifetime lovers, part-time friends"


uk: Комп'ютерні науки

description: Biomedical Imaging has previously been expensive and near impossible to hack and experiment with. If more people experimented and understood how imaging works we could move it forward much faster and make these transformative technologies available to everyone. In this talk I'll present Spectra: a tiny 2" device that uses safe levels of AC current to recreate an image of any conductive material such as your lungs, arm or head, using the same tomographic reconstruction technique as a cat scan.

uk: вхід без авторизації

name: Bio Hacking Village - Spectra: Open Biomedical Imaging


uk: Комп'ютерні науки

description: Evaluating the clinical impact of a vulnerability has significant implication on how the vulnerabilities is handled both pre and post disclosure including how it is communicated to physicians and patients. Open and transparent communication between the clinical and security researcher communities is essential to ensure that researchers understand the impact that medical device vulnerabilities will have on patient health and safety and clinicians have a better understanding of security implications to be able to recommend an appropriate response for their patients. This panel which includes medical security researchers and practicing physicians and healthcare technologists will discuss the challenges of evaluating the clinical impact of medical device technologies and the opportunities for researchers and healthcare processionals to work more closely together.

uk: вхід без авторизації

name: Bio Hacking Village - Doctor Hacker Panel


uk: Комп'ютерні науки

description: Want to learn how an epic clash between hackers turns into a battle of survival? How an intense, immersive experience builds critical cybersecurity skills? This talk highlights how storytelling, gamification and theater arts are used in a realistic environment to experience cybersecurity. The paradigm shift for cybersecurity crisis response training and preparation is here. Individuals, teams, and organizations can now prepare for a worst day with an intense, immersive experience that builds your critical cybersecurity and leadership skills in a realistic and gamified environment. The response and actions can have a decisive impact on the end state or the aftermath.

uk: вхід без авторизації

name: Bio Hacking Village - How to Level Up Experiential Learning


uk: Комп'ютерні науки

description: I will present two case studies of groups using biohacking methods to create generic versions of two of the most widely prescribed and most expensive pharmaceuticals in America. I will explain their methods and motivations in the context of the crisis of distributive justice in the US healthcare system. I question the ethics of the the delivery of pharmaceuticals to patients in the US and argue that biohackers are actually acting in a way that is morally acceptable, given the circumstances.

uk: вхід без авторизації

name: Bio Hacking Village - DIY Medicine: Biohacking Pharma


uk: Комп'ютерні науки

description: Managing diabetes revolves around stagnated tech from the 80s and 90s. Hackers took their lives into their hands by augmenting inadequate products after market. Building iterations of a DIY artificial pancreas and real-life examples of will be discussed and at least one will be working on the presenter. Replacing human intervention with technology betters quality of life. See what happens when hackers decide they’re not waiting around for government and the MedTech industry to do better.

uk: вхід без авторизації

name: Bio Hacking Village - The DIY Artificial Pancreas: Hacking Wetware with Open Source Software and Hardware


uk: Комп'ютерні науки

description: Medical misinformation has been labeled as one of the greatest public health threats of our time. Previously eradicated diseases, such as measles are occurring in clusters and causing deaths. The problem is complex with a mixture of private individuals and nation state actors all working to undermine the credibility of doctors and the US health system. In this piece, I will discuss our JAMA piece that calls for the use of an ethical cyber response to the threat of medical misinformation.

uk: вхід без авторизації

name: Bio Hacking Village - Employ Cybersecurity Techniques against the Threat of Mediacal Misinformation


uk: Комп'ютерні науки

description: Even a device with the most ironclad firmware can still be subject to a broad variety of attacks depending on its interaction with other external components. This presentation will examine commonly overlooked vulnerabilities in medical device deployments, with real-world examples discovered either during a certification process or through regulatory review. These vulnerabilities serve as cautionary examples of the extensive, but not always apparent, attack surface of medical devices.

uk: вхід без авторизації

name: Bio Hacking Village - Beyond the Firmware: A comprehensive view of the Attack Surface of a Networked Medical Device


uk: Комп'ютерні науки

description: massive security vulnerability was discovered which allowed PHI to be leaked from closed patient support groups on Facebook. In this session we’ll discuss ho...

uk: вхід без авторизації

name: Bio Hacking Village - Pazient Zero Day: A Previvors Story of Uncovering Massive Zero Day Vulnerability


uk: Комп'ютерні науки

description: We show how we hack planes for real without getting in any trouble The session aims to provide insights on real-life experiences gathered from the security engineering tasks and assessments of modern aircraft systems. Particular focus is placed on explaining how the interaction between safety and security is assessed and how responsible teams can interact and combine their diverse set of skills. Examples and technical overviews of the classes of systems, interfaces and audit methodologies are given to precisely demonstrate how work in this area is laid out and executed, and to emphasize their importance in the transportation industry. Additionally, the talk will highlight the combined industry effort that currently goes into dealing with the changing security threats in modern aircraft from a technical audit and security engineering perspective.

uk: вхід без авторизації

name: Aviation Village - Behind the scenes of hacking airplanes


uk: Комп'ютерні науки

description: As an information security researcher beginning my private pilot’s license training, I was startled to see the common security fails in many resources available for pilots, including official training/FAA sites, and more. I’ll cover a couple of the most common plane/instructional booking sites’ major security issues, and what to expect from having your personal information exposed online as will be at least partially required if you too decide to learn to fly a plane. I’ll cover Bluetooth and radio interference in avionics, Garmin instrument panels requesting keyboard input, and some simple checks to keep yourself aware of potential security issues in flight. I am not disclosing any 0-day or anything that isn’t already available online; this talk is intended to summarize the worst offenders and low-hanging fruit. I’d like to keep my FAA license; thank you very much.

uk: вхід без авторизації

name: Aviation Village - A Hacker walks into a Flight School and says Ouch: Common Online Security Fails In Pilot Training


uk: Комп'ютерні науки

description: Andrea (@amatwyshyn and @PSUPILOTlab), the moderator, will provide an introduction to the law of air safety regulation using the case study of the Boeing 737 MAX. Stefan will discuss the state of aircraft avionics vulnerabilities, comparing and contrasting with other industries. (Savage, Stefan - A quick and dirty take on doing aviation security research) Pete will offer a pilot’s perspective, explaining how aviation prevents critical safety or security incidents through a layering of people, process and technology. RenderMan will update his DEF CON talk on air traffic spoofing, sharing what happened after his talk in terms of policy response

uk: вхід без авторизації

name: Aviation Village - The Long Haul The State of Aviation Policy


uk: Комп'ютерні науки

description: There has been a lot of discussion around the security risks associated with CAN bus systems in cars, but this risky technology is also being deployed widely in all sorts of transport systems. After performing a thorough investigation on two commercially available avionics systems, Patrick will show how it is possible for a malicious individual to send false data to these systems, given some level of prior physical access to an aircraft’s wiring. Such an attacker could attach a device to an avionics CAN bus that could be used to inject false measurements that would then be displayed to the pilot. A pilot relying on these instrument readings would not be able to tell the difference between false data and legitimate readings, and this could result in an emergency landing or a catastrophic loss of control of an affected aircraft. This talk will show that any network system that does not include message integrity can be subject to attack. This talk is not meant to attack CAN bus, but is intended to show that systems that are involved in life‐safety should have additional controls to prevent spoofing attacks such as those presented in this talk.

uk: вхід без авторизації

name: Aviation Village - CAN Bus in Aviation: Investigating CAN Bus in Avionics


uk: Комп'ютерні науки

description: An airplane is a complex mix of legacy components and custom protocols, generally obscured from security researchers as a result of the high barriers to entry and safety-critical requirements. As a result, little is known in the research community about airplane security. The little that does make it in to the public domain is generally full of FUD; the media are understandably excited about such stories and independent researchers are rarely aware of the security controls that can mitigate some attacks. We will lift the lid on airplane network and avionics security. This is a 101 primer for aviation security: understand the network surface on an airplane, the protocols involved, the components and how they interface with each other and ground systems, plus potential routes that attackers might take & how to lock them down. We will also be running hands-on avionics hardware security workshops during the aviation village. Learn from reverse engineers and understand how aviation components interact.

uk: вхід без авторизації

name: Aviation Village - A Hackers First Solo Airplane Avionics Security 101


uk: Комп'ютерні науки

de: Wirtschaftswissenschaften

uk: Бізнес та економіка

en: Business and Economics

de: Rechts-, Wirtschafts- und Sozialwissenschaften

uk: Право, економіка та суспільні науки

en: Law, Economics and Social Sciences

description: Peter Gal of the OECD speaks on his topic of discussion at the ECB's Conference of Digitalization, which took place on the 6th and 7th of July, 2019.

uk: вхід без авторизації

name: ECB Conference on Digitalization, 2019 - Peter Gal

European Central Bank (ECB)

addressCountry: DE

addressLocality: Frankfurt am Main

addressRegion: Hesse


uk: Комп'ютерні науки

uk: Бізнес та економіка

uk: Право, економіка та суспільні науки

description: Jonathan Haskel of the Bank of England speaks on his topic of discussion at the ECB's Conference on Digitalization.

uk: вхід без авторизації

name: ECB Conference on Digitalization, 2019 - Jonathan Haskel


keywords:
Airborne Wind Energy
Kite Power
Kite Launch
Airfield Valkenburg

description: The video recording shows a successful launch of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The GoPro camera is placed on the ground next to the launch mast. Following the upswing of the kite into an upright position, the tether suddenly disengages from the mast head (10 s into the video). In contrast to the previous flight, the resulting lash of the tether does not lead to a breaking of the weak link, just below the kite control unit, but instead, the kite accelerates and, while reeling out the tether, performs a crosswind sweep past the ground surface, before climbing to higher altitude. At 1 min into the video the kite disappears from the field of view, after which it reappears shortly several times, before eventually leaving it at 4 min into the video, when flying to the landing site. This launch was also covered by a regular photo camera and by a second GoPro video camera that was taped to the leading edge tube of the kite, looking down at the kite control unit. Unfortunately, the data recording did not work properly. Because the time of the GoPro video camera was incorrectly set, the time information of the photographic footage was used for synchronization, knowing from the previous test flight that this footage runs 2:21 min ahead of the correct time. The creation date of the video was set to the launch time 19:26:29.50 such that the tether disengages from the mast head about 10 s later, at 19:26:39.50.

uk: вхід без авторизації

name: Successful mast-based launch of the V3 kite: Video recorded on 2 August 2012 with a GoPro camera on the ground next to the launch mast

Delft University of Technology

addressCountry: NL

addressLocality: Delft

addressRegion: South Holland


description: The video recording shows a successful launch of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The GoPro camera is taped to the rear side of the leading edge tube of the wing, between the two center struts, looking at the kite control unit. During the upswing of the kite, the kite control unit remains in the line of sight between video camera and mast head. At 7 s into the video, the ground station appears at the top of the field of view. Also clearly visible is the tether running from the mast head to the ground station. At 10 s into the video, the tether suddenly disengages from the mast head, which leads to a strong dynamic perturbation of the tensile system. Playing the video in slow motion reveals that the disengaged tether moves within 1 s towards a new equilibrium shape, which is the straight line connecting ground station and kite. This rapid straigthening of the tether yanks the kite control unit upwards, into the line of sight between video camera and ground station. In contrast to the previous flight, the perturbation does not lead to a breaking of the weak link, just below the kite control unit, but instead, the kite accelerates and, while reeling out the tether, performs a crosswind sweep past the ground surface, before climbing to higher altitude. The kite is then operated in several crosswind flight maneuvers and reel in phases before landing sideways in the hands of the ground crew, at the side of the wind wind window. This launch was also covered by a regular photo camera and by a second GoPro video camera that was placed on the ground next to the launch mast. Unfortunately, the data recording did not work properly. Because the time of the GoPro video camera was incorrectly set, the time information of the photographic footage was used for synchronization, knowing from the previous test flight that this footage runs 2:21 min ahead of the correct time. The creation date of the video was set to the launch time 19:26:29.50 such that the tether disengages from the mast head about 10 s later, at 19:26:39.50.

uk: вхід без авторизації

name: Successful mast-based launch of the V3 kite: Video recorded on 2 August 2012 with a GoPro camera mounted on the leading edge tube


description: The animated photo sequence shows a successful launch of the TU Delft V3 kite from an upside- down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. At 10 s into the sequence, the tether suddenly disengages from the mast head and is then rapidly pulled by the accelerating kite into a straight line to the ground station. This sudden straigthening yanks the entire kite assembly (wing, bridle line system and kite control unit) around. In contrast to the previous flight, this perturbation does not lead to a breaking of the weak link, but instead, the kite accelerates further and, while reeling out the tether, dives first towards the ground, before climbing to higher altitude. This launch attempt was also covered by two different GoPro video cameras, one positioned on the ground, next to the launch mast, the other one taped to the leading edge tube of the kite, looking down at the kite control unit. The 58 photos capturing this launch were shot with a Nikon D40X. The photos were assembled into a video using the precise time information available for each photo from its metadata. Because the absolute time of the camera was running 2:21 min ahead of the correct time, this was taken into account when setting the creation date of the generated video file, using the time 19:26:29.50. Accordingly, the tether disengages from the mast head at time 19:26:39.50.

uk: вхід без авторизації

name: Successful mast-based launch of the V3 kite: Animated sequence of photos taken on 2 August 2012 from the ground


description: The video recording shows a failed launch attempt of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The GoPro camera is placed on the ground next to the launch mast. As for all previous mast-based launch attempts, the hanging kite is first steered into a pendulum motion, before taking off with a sideways upswing maneuver to the right. This upswing motion ends at the side of the wind window with a roughly horizontal tether and the kite subsequently falling back. A possible contribution is the sudden drop of the propulsive aerodynamic force, which is indicated by the observable loose membrane and partial collapse of the entire right half of the wing. While falling back, the kite again catches wind and regains power, and this time is steered into a sideways upswing maneuver to the left. Towards the highest point above the mast head, the kite slows down and, unable to sustain a stable flight mode, accelerates into a sideways downswing maneuver, crashing into the line suspension system of the launch mast, however, staying fully intact. Only a few seconds later, the hanging kite regains speed and is steered into a similar upswing-downswing maneuver, again crashing into the line suspension system. This crash is slightly harder, deforming the entire wing, which then recovers and performs a smaller final loop before again crashing into the line suspension system, where it then comes to a rest. This launch was also covered by data recording, by a regular photo camera and by a second GoPro video camera, that was taped to the rear side of the leading edge tube of the wing, between the two center struts, looking at the kite control unit. Because the time of the GoPro video camera was incorrectly set, we used the short initial pendulum motion of the hanging kite as a clearly identifiable event in the video and the data recording to determine the correct starting time of the video, 20:32:01, which was then set in the video metadata.

uk: вхід без авторизації

name: Failed mast-based launch attempt of the V3 kite: Video recorded on 2 August 2012 with a GoPro camera on the ground next to the launch mast


description: The video recording shows a failed launch attempt of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The GoPro camera is taped to the rear side of the leading edge tube of the wing, between the two center struts, looking at the kite control unit. As for all previous mast-based launch attempts, the hanging kite is first steered into a pendulum motion, before taking off with a sideways upswing maneuver to the right. This upswing motion ends at the side of the wind window with a roughly horizontal tether and the kite subsequently falling back. A possible contribution is the sudden drop of the propulsive aerodynamic force, which is indicated by the observable loose membrane and partial collapse of the entire right half of the wing. While falling back, the kite again catches wind and regains power, and this time is steered into a sideways upswing maneuver to the left. Towards the highest point above the mast head, the kite slows down and, unable to sustain a stable flight mode, accelerates into a sideways downswing maneuver, crashing into the line suspension system of the launch mast, however, staying fully intact. Only a few seconds later, the hanging kite regains speed and is steered into a similar upswing-downswing maneuver, again crashing into the line suspension system. This crash is slightly harder, deforming the entire wing, which then recovers and performs a smaller final loop before again crashing into the line suspension system, where it then comes to a rest. This launch was also covered by data recording, by a regular photo camera and by a second GoPro video camera, that was positioned on the ground, next to the launch mast. Because the time of the GoPro video camera was incorrectly set, we used the short initial pendulum motion of the hanging kite as a clearly identifiable event in the video and the data recording to determine the correct starting time of the video, 20:32:01, which was then set in the video metadata.

uk: вхід без авторизації

name: Failed mast-based launch attempt of the V3 kite: Video recorded on 2 August 2012 with a GoPro camera mounted on the leading edge tube


description: The animated photo sequence shows a failed launch attempt of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. As for all previous mast-based launch attempts, the hanging kite is first steered into a pendulum motion, before taking off with a sideways upswing maneuver to the right. This upswing motion ends at the side of the wind window with a roughly horizontal tether and the kite subsequently falling back. A possible contribution is the sudden drop of the propulsive aerodynamic force, which is indicated by the observable loose membrane and partial collapse of the entire right half of the wing. While falling back, the kite again catches wind and regains power, and this time is steered into a sideways upswing maneuver to the left. The following events are not covered only fragmentarily by the photos: the kite is unable to assume a stable flight above the mast head and several times dives into downswing maneuvers, crashing into the line suspension system of the launch mast, where it eventually comes to a rest. This launch was also covered by data recording, and by two different GoPro video cameras, of which one was positioned on the ground, next to the launch mast, and the other one taped to the leading edge tube of the kite, looking down at the kite control unit. The photos capturing the unsuccessful launch attempt were shot with a Nikon D40X in irregular intervals. The photos were assembled into a video using the precise time information available for each photo from its metadata. Because the time duration between some photos is very long, the generated movie is of limited use for these periods. Also, the absolute time setting of the camera was incorrect. The time information from the data redording was used to determine the starting time of the video sequence as 20:32:01.

uk: вхід без авторизації

name: Failed mast-based launch attempt of the V3 kite: Animated sequence of photos taken on 2 August 2012 from the ground


description: The video recording shows a successful launch of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The GoPro camera is placed on the ground next to the launch mast. As for all previous mast-based launch attempts, the hanging kite is first steered into a pendulum motion, before taking off with an upswing maneuver. This upswing is not continuous, however, with the kite stagnating several times, falling back down somewhat, then picking up speed again and climbing a bit higher, eventually reaching a stable flight position above the mast head. The tether is then reeled out continuously and the kite works its way up to higher altitude, while performing subtle crosswind maneuvers. Shortly after 1 minute into the video, the kite disappears from the field of view, such that its reaching the peak altitude of 120 meters and the subsequent descent are not visible. This launch was also covered by data recording, by a regular photo camera and by a second GoPro video camera, that was taped to the rear side of the leading edge tube of the wing, between the two center struts, looking at the kite control unit. Because the time of the GoPro video camera was incorrectly set, we used the short initial pendulum motion of the hanging kite as a clearly identifiable event in the video and the data recording to determine the correct starting time of the video, 20:45:10, which was then set in the video metadata.

uk: вхід без авторизації


description: The video recording shows a successful launch of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The GoPro camera is taped to the rear side of the leading edge tube of the wing, between the two center struts, looking at the kite control unit. As for all previous mast-based launch attempts, the hanging kite is first steered into a pendulum motion, before taking off with an upswing maneuver. This upswing is not continuous, however, with the kite stagnating several times, falling back down somewhat, then picking up speed again and climbing a bit higher, eventually reaching a stable flight position above the mast head. The tether is then reeled out continuously and the kite works its way up to higher altitude, while occasionally performing subtle crosswind maneuvers. The ground station is visible at the top of the field of view. When reaching the highest point at around 2:10 to 2:20 minutes into the video, the maneuvers are terminated which leads to a drop in tether tension and consequently a more pronounced tether sag. The tether is reeled back in. At about 3 minutes into the video, the tether starts to progressively loose all tension and eventually goes entirely slack. As a result, the kite further descends in a paragliding mode, moves upwind and towards the end of the video, overflies the ground station before hitting the ground.This launch was also covered by data recording, by a regular photo camera and by a second GoPro video camera that was positioned on the ground, next to the launch mast. Because the time of the GoPro video camera was incorrectly set, we used the short initial pendulum motion of the hanging kite as a clearly identifiable event in the video and the data recording to determine the correct starting time of the video, 20:45:10, which was then set in the video metadata.

uk: вхід без авторизації


description: The animated photo sequence shows a successful launch of the TU Delft V3 kite from an upside-down hanging position on 2 August 2012 at the former airfield Valkenburg, Leiden, Netherlands. The hanging kite is first steered into an upswing maneuver. This upswing is not continuous, however, with the kite stagnating several times, falling back down somewhat, then picking up speed again and climbing a bit higher, eventually reaching a stable flight position above the mast head. The tether is then reeled out continuously and the kite works its way up to higher altitude. After reaching the highest point (not visible in the photo footage) the tether is reeled back in. At some point the tether looses all tension and goes entirely slack. As a result, the kite further descends in a paragliding mode, moves upwind and towards the end of the photo sequence, overflies the ground station before hitting the ground. This launch was also covered by data recording, and by two different GoPro video cameras, of which one was positioned on the ground, next to the launch mast, and the other one taped to the leading edge tube of the kite, looking down at the kite control unit. The 77 photos capturing launch, ascent, descent and landing were shot with a Nikon D40X in irregular intervals. The photos were assembled into a video using the precise time information available for each photo from its metadata. Because the time duration between some photos is very long, the generated movie is of limited use for these periods. Also, the absolute time setting of the camera was incorrect. The time information from the data redording was used to determine the starting time of the video sequence as 20:45:10.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: How can Quantum Cryptography contribute to cyber security?

Technische Universität Darmstadt

addressLocality: Darmstadt


Quantum Key Distribution Networks

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Long-term verifiable multi-party computation


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Legal requirements and challenges for long-term security systems


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Wiretap codes and key-efficient one-time-pad


uk: Комп'ютерні науки

uk: вхід без авторизації

name: On the Impossibilty of Tight Cryptographic Reductions


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Long-Term Integrity: from Theoretical Concepts to Practice in Estonia


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Everlasting security in the bounded storage model


A QKD-based digital archiving solution

uk: Комп'ютерні науки

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: High-speed quantum cryptography over global distances


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Privacy requirements and technical challenges for storing genomic data


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Solving the collision problem of DC Nets


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Introduction to Protection of Long-Lived Systems


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Composability of long-lived security solutions


uk: Комп'ютерні науки

uk: вхід без авторизації

name: An Unconditionally Hiding Auditing Procedure for Multi-Party Computations


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Tokyo QKD Network for long-lived systems


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Modeling security of long-term integrity solutions


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Governmental Cryptopolicy and the Role of BSI


uk: Комп'ютерні науки

description: CROSSING is a Collaborative Research Center at the Technical University of Darmstadt and funded by the German Research Foundation.

uk: вхід без авторизації

name: SFB CROSSING - Our research on Sanitizable Signatures


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our Research on Scalable Trust Infrastructures


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Secure and Scalable Blockchain Technology


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Strongly Secure Connection Establisment


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our Research on the Secure Integration of Cryptographic Software


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on the Secure Refinement of Cryptographic Algorithms


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Attestation Protocols


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our Research on Developing a Compiler for Privacy-Preserving Protocols


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our Research on Future Public Key Encryption and Signature Schemes


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Hardware-Entangled Cryptography


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Long Term Secure Archiving


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Privacy Preserving Computation


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Privacy-Aware Distributed Computation


uk: Комп'ютерні науки

uk: вхід без авторизації

name: SFB CROSSING - Our research on Quantum Key Hubs


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Key Distribution - QKD (3)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Key Distribution - QKD (4)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Provable Security (2)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Provable Security (3)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Provable Security (1)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Encryption


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Query Complexity and Lower Bounds (1)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Query Complexity and Lower Bounds (2)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Algorithms (1)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Algorithms (2)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Circuits


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Cryptanalysis


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Key Distribution - QKD (2)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Key Distribution - QKD (1)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Channels


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: The Density Matrix Formalism


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Algorithms (3)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Algorithms (4)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Non-causal Models


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Quantum Information Complexity


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Introduction to Quantum Information (1)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: CROSSING Winter School 2016: Introduction to Quantum Information (2)


uk: Комп'ютерні науки

description: Amir will answer questions about the Open Source Technology Improvement Fund (OSTIF), a nonprofit that help coordinate audits of open-source software and undertake other initiatives. OSTIF has helped Monero audit several important code implementations and build strong relationships within the cybersecurity space.

uk: вхід без авторизації

name: Monero Village - The Cost of Good Open Source Software


Monero Village - Bulletproofs deep dive

uk: Комп'ютерні науки

description: Bulletproofs are important zero-knowledge proofs used in Monero to hide transaction amounts, but they can be used to prove other statements too. Cathie will walk through many of these applications and constructions. This talk will start at a basic level.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Learn the basics of Monero and its community. Monero provides benefits to society that all Defcon attendees benefit from. Daniel will express the importance of holders and advocates for cryptocurrencies. He will describe a set of concepts and frameworks to examine market data.

uk: вхід без авторизації

name: Monero Village - Keynote Speech Monero Introduction and Investor Perspective


uk: Комп'ютерні науки

description: Francisco will provide an overview and review of blockchain scaling and fees in Monero. He will review the relationship between fees and the Cryptonote (now Monero) penalty with an emphasis on the impact of the block reward on fees. He will focus on rational miner behavior, and how this creates a fee market in Monero which is totally dependent upon the block reward. He will also consider the case of the block reward going to zero, how this limits the Satoshi fee market in Bitcoin and the critical differences between Monero and Bitcoin. In addition, he will consider the possible impacts of block rewards falling to zero on large block and adaptive block crypto-currencies.

uk: вхід без авторизації

name: Monero Village - Critical Role of Min Block Reward Trail Emission


uk: Комп'ютерні науки

description: Monero has a biannual major release schedule, but it has been hit with setback after setback despite the best efforts of the community. Justin will discuss how borrowing small changes from other projects to work smarter, not harder, will improve Monero’s release schedule without compromising on centralization. Creating clear policies, procedures, and timelines, even if they are flexible, will improve Monero’s release process and encourage outside development efforts and allow important stakeholder feedback.

uk: вхід без авторизації

name: Monero Village - Monero's Release Schedule: we can do better


uk: Комп'ютерні науки

description: Kristy-Leigh will discuss the importance of accessible mining in consumer applications and the work that she has done at Core Scientific. She will explain how Monero’s development of RandomX is the best chance yet at preserving consumer-device mining.

uk: вхід без авторизації

name: Monero Village - The Future of Accessible Mining: Randomx, the heat death of the universe, and you


uk: Комп'ютерні науки

description: Zcoin launched with the Zerocoin protocol, which was riddled with critical security issues. Reuben will talk through the team’s response to these and its development and research journey. He will share the most important lessons and what the Monero community can learn from their experiences.

uk: вхід без авторизації

name: Monero Village - Handling Broken cryptography in cryptocurrencies: Challenges and lessons from Zerocoin


uk: Комп'ютерні науки

description: The past year has seen excellent research focused on achieving better functionality, privacy, and efficiency for spend obfuscation in digital assets like Monero. This includes CLSAG, DLSAG, Lelantus, Omniring, RingCT 3.0, and Spartan. What are these constructions, what are their tradeoffs, and what could they mean for Monero and other privacy-focused projects? This talk assumes no mathematical background and will be accessible to everyone.

uk: вхід без авторизації

name: Monero Village - If You Like It, Then you have Put a Ring Signature on It: Actually: transaction protocols


uk: Комп'ютерні науки

description: In 2017, Vik launched Cake Wallet which is a popular open-source Monero wallet that allows users to hold Monero, make payments, and convert between cryptocurrencies. Although initially launched as a closed-source project but after receiving feedback from the community, Vik quickly had to learn about open-source projects and re-introduce the wallet. He will speak about the difficulties and opportunities creating a business with open-source projects and the importance of a strong relationship with the core community.

uk: вхід без авторизації

name: Monero Village - Cake Wallet - the Open Source Monero Wallet App


uk: Комп'ютерні науки

description: A New York apartment building and a Moroccan rural village share the same internet challenges - inefficient methods of distribution across the last mile. Our idea is to address this inefficiency to provide greater internet availability to the end user. This presentation will discuss the concept of micropayments with strong privacy protections that address these challenges.

uk: вхід без авторизації

name: Monero Village - AirBNB for Retail Internet A Distrubuted Internet Tech


uk: Комп'ютерні науки

description: Diego will explain why Monero’s user experience needs improvement for wide adoption. He will introduce theories of good UI/UX, and he will explain how other open-source projects handle these challenges with limited resources. He will give recommendations to developers to create more accessible and friendly projects on the first pass with little additional effort, and how existing, large projects can further incorporate advanced techniques into their development plans.

uk: вхід без авторизації

name: Monero Village - Monero is UGLY and DIFFICULT to use


uk: Комп'ютерні науки

description: Jeremy will be speaking about the EFF's past and ongoing efforts to encrypt the web.

uk: вхід без авторизації

name: Monero Village - Encrypting the Web Isnt Enough: How EFF Plans to Encrypt the Entire Internet


uk: Комп'ютерні науки

description: Here we explore Mimblewimble, a blockchain construction for private transactions. How does it function and how do the three implementations in the wild differ?

uk: вхід без авторизації

name: Monero Village - Tale of Two Tongues: Examining Two Mimblewimble Protocols and more


uk: Комп'ютерні науки

description: This talk presents the methodology, findings and conclusions of a boundary theory based Information Systems research project completed at University College Cork, Ireland. Perspectives of privacy have been analyzed from five key social worlds within the blockchain industry (users, regulators, cryptographic researchers, corporate architects, and protocol developers) through semi-structured interviews, conducted in 2018. The study attempts to distinguish the similarities and differences that exist between interdependent groups of agents. Communicating benign and internecine perspectives, ideologies, and approaches to the development of privacy enhancing technologies is viewed as method through which conflict and division may be mitigated against as the industry evolves further into the 21st century.

uk: вхід без авторизації

name: Monero Village - Perspectives of Privacy: Blockchain as a Boundary Object


uk: Комп'ютерні науки

description: A Texas bill has been introduced that encourages the use of what is termed a “verified identity digital currency,” which is a currency that allows the true identities of the sender and the receiver to be known. In addition, the bill mandates the verification of senders’ identity when receiving funds from a non-verified currency. This talk will consider the meaning of “digital currency” with reference to Federal and State agency interpretations and relevant case law and then evaluate the potential impact of the bill on small businesses and the public at large.

uk: вхід без авторизації

name: Monero Village - Houston we have a problem: 86(R) H.B. 4371 is a no-go!


uk: Комп'ютерні науки

description: As the cryptocurrency industry grows in prominence, bankers, consultants, and information security specialists have moved into the space that was once the territory of hackers, cypherpunks, and anarchists. This is a talk on the corporatization of Bitcoin, the obsessive horse race reporting on its price, and the battle lines that are today being drawn between where this technology will go and who will get it there. This speaker will identify unmet needs in Bitcoin that bankers, consultants, and InfoSec can’t figure out. There is much work to be done and the people who can get us there are being chased from that field. If you’re creative and capable, come with your notebooks. This speaker will offer an insider’s view on a laundry list of problems that need solving. DEF CON organizers this year issued a reminder: “DEF CON is a hacker con, not an InfoSec conference. Hackers are more focused on the joy of discovery, irreverence, novel if impractical approaches. InfoSec is more focused on enterprise, frameworks, and protecting the interests of share holders. There is great value in both types of content, but our con is a hacker con by design.” This promises to be a talk geared toward hackers.

uk: вхід без авторизації

name: Monero Village - InfoSec vs Hacker The War for the Soul of a Technology


uk: Комп'ютерні науки

description: Security venders are struggling to keep up with the tactics used by adversaries. What happens when you use really old technology as a security strategy rather than bleeding edge tech? Can ransomware infect a Commodore 64 or Windows 3.0? What happens when malware attempts to compromise a Sega Genesis? Could an adversary successfully pivot and exfiltrate data from a network running CatOS? This talk will answer these and other questions regarding how modern threats react to really old technology. Research includes running various forms of modern malware on old technologies as well as permitting cybercriminals access to really old networks to see how they handle the situation. Speakers are authors of a handful of books including a recent title on digital forensics. Joseph Muniz (Twitter: @SecureBlogger) and Aamir Lakhani (Twitter: @aamirlakhani) together have spoken at various conferences including the infamous Social Media Deception RSA talk quoted by many sources found by searching "Emily Williams Social Engineering". Both speakers have written books together including a recent title "Digital Forensics for Network Engineers" released on Cisco Press late February 2018. They have been friends for years and continue to collaborate on research and other projects.

uk: вхід без авторизації

name: Packet Hacking Village - Old Tech vs New Adversaries Round 1...Fight


uk: Комп'ютерні науки

description: Availability, scalability, agility, and automation - "The Cloud" brings all of these to your fingertips. Improperly configured, it can also be a security incident waiting to happen. In this talk, we'll cover open source tools to help paint a current, accurate picture of your cloud security posture, share some insight from first-hand experience, and show examples of how you can use this approach within your organization. Matt Nash works in a variety of realms, including internal/external network infrastructure, cloud architecture, web applications, automated teller machines (ATMs), physical security, social engineering, digital forensics and incident response, and wireless. As well, these assessments span a number of industries: oil and gas energy, utility, manufacturing, software development, financial, and retail. With more infrastructure and resources moving into "the cloud", at a staggering pace, building a skillset in large-scale cloud review was an obvious choice. Matt holds a B.S. in Food and Resource Economics, and is totally qualified to speak on this topic.

uk: вхід без авторизації

name: Packet Hacking Village - Head in the Clouds


uk: Комп'ютерні науки

description: As adversaries look for new methods of creating malware, steganography has seen a resurgence. In this session, we'll review this black art and uncover recent steganographic malware weaponizing techniques. We'll cover techniques that include file and image embedding techniques invisible to malware and intrusion detection systems, methods of exploiting weak networking protocols for covert communications, mischievous IoT devices, and cloud data hiding methods. But we don't stop there, our organic research has uncovered numerous other ways in which malware could be embedded in an effort to prepare threat researchers with the knowledge to improve their tools and fortify their networks. Mike Raggo is Chief Security Officer at 802 Secure and has over 20 years of security research experience. His current focus is wireless IoT threats impacting the enterprise. Michael is the author of "Mobile Data Loss: Threats & Countermeasures" and "Data Hiding" for Syngress Books, and contributing author for "Information Security the Complete Reference 2nd Edition". A former security trainer, Michael has briefed international defense agencies including the FBI and Pentagon, and is a frequent presenter at security conferences, including Black Hat, DEF CON, Gartner, DoD Cyber Crime, OWASP, HackCon, and SANS. Chet Hosmer is an international author, educator & researcher, and founder of Python Forensics, Inc., a non-profit research institute focused on the collaborative development of open source investigative technologies using the Python programming language. Chet is also a Visiting Professor at Utica College in the Cybersecurity Graduate Program, where his research and teaching is focused on data hiding, active cyber defense and security of industrial control systems. Additionally, Chet is an Adjunct Professor at Champlain College in the Digital Forensics Graduate Program, where his research and teaching is focused on solving hard digital investigation problems using the Python programming language.

uk: вхід без авторизації

name: Packet Hacking Village - Stego Augmented Malware


uk: Комп'ютерні науки

description: This presentation is the story of the success and failures of building a security awareness program at a Top 20 CPA firm, and finding "the hidden side" of why users fail phishing exercises (both simulated and not!). The presentation will cover how Elasticsearch was used to correlate awareness training, phishing test, and HR data together, examine real results from this work, and the improvements that were made to improve user awareness and reduce phishing related security incidents. Russell Butturini (Twitter: @tcstoolhax0r) is head of information security for a top 20 CPA and financial services firm. He has authored tools for both red and blue teams with his C- and Python coding skills. His most popular tool, NoSQLMap, was featured in the Hacker Playbook 2.

uk: вхід без авторизації

name: Packet Hacking Village - Phishing Freakonomics (aka "Picking Winners")


uk: Комп'ютерні науки

description: From Shodan to Certificate Transparency, it is easier than ever to use TLS certificates for DNS hostname reconnaissance. However, these sources of data are either not free, infrequently updated or are not linked to a server IP address. This talk will survey existing resources & release a new, free service for finding TLS certificates in the IPv4 space! Sam Erb is a 2x black badge winner with Co9 in the Badge Challenge and is working to make the Internet a safer place.

uk: вхід без авторизації

name: Packet Hacking Village - Hunting Certificates and Servers


uk: Комп'ютерні науки

description: The National Collegiate Penetration Testing Competition (CPTC) provides students with realistic challenges that prepare for a career in the security assessment field. The architecture of the competition is designed to mimic a real-world organization, while requiring participants to excel in both technical and communication skills. The ultimate goal is to use a unique environment to prepare young professionals to navigate the technical and administrative challenges they are likely to face in their careers. Join National CPTC directors Dan Borges and Tom Kopchak in a deep-dive discussion on what goes into building the competition scenario created for each year's event. Tom Kopchak (Twitter: @tomkopchak) is the Director of Technical Operations at Hurricane Labs, where he pretends to manage a team of Splunk engineers, but is still an engineer and technology geek at heart. Tom's speaking experience includes a previous talk at DC24 (Sentient Storage - Do SSDs Have a Mind of Their Own?) as well as many talks at other conferences around the country (and BSides LV in 2013). He holds a Master's degree in Computing Security from the Rochester Institute of Technology, and volunteers as the white team captain for the National Collegiate Penetration Testing Competition (CPTC). When he is not working with computers, Tom enjoys composing, music improvisation (Acts of Music), and playing both the piano and organ. Dan Borges is an information security professional with over 15 years in computer science. Dan participates in a number of cyber security competitions each year, from being on the National CCDC Red Team and helping with the black team for the Collegiate Penetration Testing Competition (CPTC). He is an experienced red teamer who enjoys developing new tools in his free time. He has taught workshops on advanced red teaming at both DEF CON and WOPR Summit. He has been publishing a blog on infosec education for more than 10 years at

uk: вхід без авторизації

name: Packet Hacking Village - 5 Years and 40,000+ Hours Later: Lessons Learned from Running a National Penetration Testing Competition


uk: Комп'ютерні науки

description: DNS fragmentation attacks are a more recent series of cache poisoning attacks on resolvers. Even if DNSSEC is fully implemented, an attacker can still poison various unsigned records in the response. These types of attacks are difficult but have been considered feasible over IPv4, but impossible over IPv6. Unfortunately, changes to the Linux kernel have made the entropy limiting this attack inferable off-path, poisoning on the first iteration is now possible. This talk will cover how this attack is carried out, and mitigations that can be put in place by operators of DNS servers to limit its effectiveness. Travis (Travco) Palmer is a Security Research Engineer at Cisco. Travis is a certified OSCP and OSCE who has been getting paid to either fix or break something for over seven years. He is a fan (and sometimes-contributer) of a number of simulator/sandbox video games, and keeper of too many unfinished hardware projects. Brian Somers is a Site Reliability Engineer for Cisco Umbrella (formerly OpenDNS). He specializes in large scale development on Unix-like platforms, software design & architecture, low level C development, and FreeBSD development.

uk: вхід без авторизації

name: Packet Hacking Village - "First Try" DNS Cache Poisoning with IPv4 and IPv6 Fragmentation: Or how to become the one in "one in 34 million"


uk: Комп'ютерні науки

description: Adversaries need to have a wordlist or combination-generation tool while conducting password guessing attacks. To narrow the combination pool, researchers developed a method named "mask attack" where the attacker needs to assume a password's structure. Even if it narrows the combination pool significantly, it can be still too large to use for online attacks or offline attacks with low hardware resources. Rhodiola tool is developed to narrow the combination pool by creating a personalized wordlist for target people. It finds interest areas of a given user by analyzing his/her tweets, and builds a personalized wordlist. Utku Sen (Twitter: @utkusen) is a security researcher who is mostly focused on application security, network security and tool development. He presented his different tools and researches in Black Hat USA Arsenal, DEF CON Demo Labs and Packet Hacking Village in recent years. He's also nominated for Pwnie Awards on "Best Backdoor" category in 2016. He is currently working for Tear Security.

uk: вхід без авторизації

name: Packet Hacking Village - Personalized Wordlists With NLP by Analyzing Tweets


uk: Комп'ютерні науки

description: While you can patch against malware infecting your tech stack or targeting your competitors, what about malware that hasn't been in the news? This presentation will cover what malware and tools are popular among underground forum members based on prevalence in forum ads, how malware presence differs between forums, and why understanding that difference matters. Winnona DeSombre (Twitter: @__winn) is an Asia Pacific threat intelligence researcher at Recorded Future, focusing on Chinese underground hacking communities and East Asian cyber espionage campaigns. She was recently featured in Threatcare's "Tribe of Hackers" book, containing career advice from some of the world's best information security professionals.

uk: вхід без авторизації

name: Packet Hacking Village - Bestsellers in the Underground Economy


uk: Комп'ютерні науки

description: As a security professional you're hungry to learn everything you can but training isn't quite free. Meanwhile, your boss, and the bosses in a bunch of other business units are fretting all they can about DoD 8570, just one more "unfunded mandate". How does anyone justify the cost of these nonfunctional requirements? This talk will draw some indirect lines in the org chart and cite documentation in various parts of a company to show how training can be a win for the entire organization. Adam is an engineer. Several years ago, Adam's program got whacked with the compliance stick. If Adam wanted to fly he had to comply. In an odd turn of events, Adam found that all this security compliance made him level-up his systems engineering game. After satisfying a number of security "one-offs", Adam started to realize where non-engineers had strengths and willingness to bolster his program's overall security. As a lonely security engineer in a feature-driven world he credits the infosec community for providing so much "professional development". He is happy to show engineers how fun (less painful?) security can be. Tragically, he has yet to meet anyone who can wrestle failed vuln scanners as well as he can - but he knows that special someone is out there.

uk: вхід без авторизації

name: Packet Hacking Village - Security to Make the CFO Happy


uk: Комп'ютерні науки

description: With the widespread use of wireless Internet access, we see that the use of portable technologies is rapidly increasing. Increasing public networks and facilitating access to these networks have attracted the attention of attackers. Due to easy availability of mature honeypot creation tools, this attack is a slam dunk for even the most novice of Wi-Fi attackers. Enterprise security products have tried but failed to solve this problem with rule and lockdown based approaches. In this talk, we are going to tell a story experienced about Wi-Fi network attackers. We will practically demonstrate how using new detection and deception techniques we can make Wi-Fi clients and environmentally secure. Besim Altinok has been researching Wi-Fi security for over a decade. He created WiPi-Hunter project against Wi-Fi hackers. He is the author of a book on Wi-Fi security. Besim's work on wireless security has been published in ArkaKapi Magazine and others. He has also spoken at top conferences including BlackHat Europe, ASIA, Defcon, and others. Besim ALTINOK works currently at BARIKAT Internet Security in Turkey. Besim also founded Pentester Training project. Can Kurnaz is conducting penetration tests from internet and internal networks to web-based applications, network infrastructures, wireless devices, IoT devices and operational technology infrastructures such as ICS/SCADA systems and components.

uk: вхід без авторизації

name: Packet Hacking Village - Wi-Fi Threat Modeling and Monitoring


uk: Комп'ютерні науки

description: Malware analysis sanboxes are pervading our IT environments and the internet as well. So, a lot of systems are available to be used and may be abused. Let's have a look on what we can get there and get your own tools ready to express yourself in this field. Cesare Pizzi is a computer and technology enthusiast from the early '80. Computer and programming were his hobbies and then became also a real job. On the professional side, he works from more then 20 years in IT field, covering during the years a lot of different roles: programmer, system admin, DBA and in the last years, network and security engineer and analyst.

uk: вхід без авторизації

name: Packet Hacking Village - Sandbox Creative Usage: For Fun and Problems


uk: Комп'ютерні науки

description: Patching – it's complicated. Organizations at every level struggle with security updates in a fundamental process that seems more like a necessary evil than a best practice. The fact is, one size does not fit all when security patches get issued and things can go very wrong. What actually determines enterprise patching cycles? How should we prepare for the pernicious spread of unpatched BYOD that gets connected? We need to go beyond just finding the sweet spot between mitigating business risk with vulnerability exposure. Because the cure isn't supposed to be worse than the disease. Cheryl Biswas is a Strategic Threat Intel Analyst with a major bank in Toronto, Canada. Previously, she was a Cyber Security Consultant with KPMG and worked on security audits and assessment, privacy, breaches, and DRP. Her experience includes project management, vendor management and change management. Cheryl holds an ITIL certification and a degree in Political Science. Her areas of interest include APTs, mainframes, ransomware, ICS SCADA, and building threat intel. She actively shares her passion for security online, as a speaker and a volunteer at conferences, and by encouraging women and diversity in Infosec as a founder and member of the "The Diana Initiative".

uk: вхід без авторизації

name: Packet Hacking Village - Patching: It's Complicated


uk: Комп'ютерні науки

description: There is growing community of hackers who refer to themselves as "Chameleon Hackers" and practice an organizational socialization technique they call "code switching." Code switching is a "tradecraft" practice used by chameleon hackers to consciously change their mannerisms, outward appearance, dress, thinking, physical characteristics, and their language in order to achieve socialization in either a virtual or live setting. The briefer will draw on his December 2018 doctoral dissertation to describe a framework for how these chameleons hackers go about their code switching tradecraft and then discuss examples of how they "hacked" the hacker community and the Corporate C-suite D9 is a member of the Senior Executive Service and currently serving as the Deputy Director for Expeditionary Warfare for the U.S. Navy. Twenty-six years as an U.S. Air Force officer serving as a B-52H navigator and then F-15A and A-37B pilot. Held Command, Director, and staff positions across the Air Force in training operations, policy, and advanced training technologies. Three operational deployments with the last in Pakistan in support of Operation Enduring Freedom (Afghanistan). Served in the Office of the Secretary of Defense for eleven years as the DoD Senior Executive responsible for the programming and execution of the nearly $900M/year the Department of Defense invests in worldwide joint training and training technologies. Cyber experience includes: Co-Lead with the DoD CIO to develop the strategy and implement the Secretary of Defense's DoD Cyber Strategy to "Build and Maintain Ready Forces to Conduct Cyberspace Operations." Built from scratch a six-month Cyber Operations training course that yielded a 78% cohort pass rate (average is 16%) on the Offensive Security Certified Professional certification. Worked with DEF CON officials to repurpose DEF CON's CTF and CTP technical architecture to support DoD's cyber operations training. 2018 Doctorates in Education from The University of Pennsylvania's Graduate School of Education. Dissertation advanced organizational socialization theory by improving our understanding of the plasticity of human socialization. Study population consisted of "chameleon" hackers who practiced a socialization tradecraft technique they called "Code Switching."

uk: вхід без авторизації

name: Packet Hacking Village - Hacking Corporate Org Socialization


uk: Комп'ютерні науки

description: Designed under Raspberry Pi and aimed for Red Team Ops, we take advantage of "Sec/Net/Dev/Ops" enterprise tools to capture network credentials in a stealth mode. Using a low profile hardware & electronics camouflaged as simple network outlet box to be sitting under/over a desk. CIRCO include different techniques for network data exfiltration to avoid detection. This tool gather information and use a combination of honeypots to trick Automation Systems to give us their network credentials! Emilio Couto is a Security Consultant with more than 20 years of experience in the network and security field. Born and raised in Argentina, he is currently located in Japan where multitasking between language, culture and technologies is a must. Over the last decade focusing mainly on Finance IT. In his spare time he enjoys playing with RFID, computers and home made IoT devices. Over the last 5 years presenting tools in conferences (Black Hat Asia, HITB, AV Tokyo and SECCON)

uk: вхід без авторизації

name: Packet Hacking Village - CIRCO Cisco Implant Raspberry Controlled Operations


uk: Комп'ютерні науки

description: The presentation will introduce viewer to geofencing - the technique successfully used by law enforcement agencies to pinpoint suspects in an array of anonymous metadata coming from wireless devices. The presentation will teach viewer how to build such system from scratch using freely downloadable analytical tools. Different ways to visually define GeoFencing zones and investigation constraints will be explained. Samples of working scripts, search queries, data formats and working dashboard layouts will be provided. Gleb Esman helps to guide research, product planning and development efforts in the areas of fraud detection, data security analytics and investigations at Splunk Inc. Currently Gleb manages number of security projects in healthcare space such as drugs and opioids diversion platform and healthcare privacy monitoring platform. Before Splunk Gleb was engaged at Morgan Stanley overseeing fraud detection platform and enterprise wide data analytics systems within retail banking space. During his career, Gleb worked in a various positions at a number of enterprises involved in research and development of solutions against advanced malware and computer viruses as well as solutions for secure payments and data protection in e-commerce space. Gleb is an author of several patents in Deep Learning, Security, Behavior Biometrics and Healthcare Data Analytics.

uk: вхід без авторизації

name: Packet Hacking Village - Solving Crimes with Wireless GeoFencing and Multi-Zone Correlation Analytics


uk: Комп'ютерні науки

description: Many companies have deployed Kubernetes, but few infosec folks have experience attacking it. We aim to address that shortage, culminating in an audience-directed Choose Your Own Adventure, movie-themed demo against an intentionally-vulnerable cluster named Bust-a-Kube. You'll see how to attack Kubernetes clusters and learn what hardening techniques and freely available tools can break those attacks. We'll review the components of a Kubernetes cluster, then show how a threat actor can chain configuration vulnerabilities to pivot and escalate privilege, pilfer data and take over clusters. You will also gain exposure to a new open source Kubernetes attack tool called Peirates. Jay Beale (Twitter: @jaybeale) works on Kubernetes and cloud native security, as a professional threat actor, a Kubernetes Contributor and as a member of the Kubernetes Security Audit working group. He's the architect and a developer on the Peirates attack tool for Kubernetes. In the past, Jay created two tools used by hundreds of thousands of individuals, companies and governments, Bastille Linux and the Center for Internet Security's first Linux/UNIX scoring tool. He has led training classes on Linux security and Kuberntes at the Black Hat, CanSecWest, RSA, and IDG conferences, as well as in private corporate training, since 2000. As an author, series editor and speaker, Jay has contributed to nine books and two columns and given over one hundred public talks. He is CTO of the information security consulting company InGuardians.

uk: вхід без авторизації

name: Packet Hacking Village - Attacking and Defending Kubernetes


uk: Комп'ютерні науки

description: Ever inherited a security rule you were afraid to modify? Ever import a Yara rule only to have the alerts blow up in your face? Does your SEIM or security appliance keep you up at night with email alerts? The Art of Detection focuses on the methodology of writing and sharing accurate detections to make you a better detection author. Gain confidence in managing false positives, learn rule sharing best practices, tackle large monolithic detections, and write detections that feed other detections. Learn the importance of your intelligence test data, and if your intelligence streams could be causing bias. Jay Dimartino is a Threat Researcher for Fidelis Cybersecurity and Head of Detections & Countermeasures. He has been doing Malware Reverse Engineering for over nine years and also has several industry certifications including the GREM and GCFA.

uk: вхід без авторизації

name: Packet Hacking Village - The Art of Detection


uk: Комп'ютерні науки

description: Have you ever noticed that much of the mission of cyber- and information security professionals seems to be focused on vulnerabilities? Have you ever heard of the risk equation? Perhaps you are familiar with one or more versions that help you derive the risk to your organization (sometimes referred to as residual risk). I have been wondering for a while how to suggest to our industry that there is perhaps TOO much focus on vulnerabilities and not enough attention or focus on the other elements that derive the standard risk equation. The recent disclosure of Meltdown/Spectre introduced a "perfect storm" scenario where the vulnerability wasn't easy to patch or fix, and the solution seemed to be break things. This created a situation where the "security solution" wasn't simply to apply the patch - and that left many organizations scrambling to figure out how to deal with this example of a persistent vulnerability. This is a great example of what I've wanted to discuss for a while - what else should we focus on in terms of security if/when the vulnerabilities still remain. Interested? Intrigued? Come join the discussion!

uk: вхід без авторизації

name: Packet Hacking Village - (Re)thinking Security Given the Spectre of a Meltdown (hold my beer)


uk: Комп'ютерні науки

description: Presentations from the DEF CON 27 Recon Village

uk: вхід без авторизації

name: Recon Village - Finding the needle in the Twitter haystack


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Generating Personalized Wordlists by Analyzing Targets Tweets


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - OSINT Approach in Big Data


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Asset Discovery: Making Sense of the Ocean of OSINT


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - A URL Shortened By Any Other Name video


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Use Responsibly: Recon Like an insider threat for better user training


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Derevolutionizing OS Fingerprinting: The cat and mouse game


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Lets get technical and hunt harder


uk: Комп'ютерні науки

description: Presentations from the DEF CON 27 Recon Village Presentations from the DEF CON 27 Recon Village

uk: вхід без авторизації

name: Recon Village - PREBELLICO PIE: Leveraging the Network Against the Network without the Network


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Social Media: The New Court of Public opinion


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Hack the Planet!: Hackers Influencing Positive Change


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Building OSINT and Recon Program to address Healthcare Information Security Issues


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - From Email Address to Phone Number: A new OSINT approach


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - DECEPTICON: Deception Techniques to Derail OSINT Attempts


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Hack to Basics - Adapting Exploit Frameworks to Evade Microsoft ATP


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - The OSINT space is Growing! Are we Ready?


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Recon Village - Can you add a conference line, please?: Using Cloud Services for Dial-In Reconnaissance Automation


A system is not a tree

uk: Комп'ютерні науки

description: Trees. Both beautiful and useful. But we’re not talking about the green, oxygen-providing ones. As abstract structures we see trees all over the place — file systems, class hierarchies, call trees, ordered data structures, etc. They are neat and tidy, nested and hierarchical — a simple way of organising things; a simple way of breaking large things down into small things. The problem is, though, that there are many things — from modest fragments of code up to enterprise-wide IT systems — that do not fit comfortably into this way of looking at the world and organising it. Software architecture, design patterns, class decomposition, performance, unit tests... all of these cut across the strict hierarchy of trees. This talk will look at what this means for how we think and design systems, whether large or small.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Acceptance Testing for Continuous Delivery


uk: Комп'ютерні науки

description: Roller Derby is an assertive team sport which is played on roller skates and requires large amounts of skill, agility and flexibility. This talk will delve into the world of Roller Derby and what is necessary for team success. It uses Roller Derby to illustrate how behaviours we think are useful can sometimes get in the way of success. This leads to a discussion of patterns and anti patterns in Agile software development. This talk would be useful to team members, anyone who manages software teams and also higher level managers who wish to understand more about how to deal with problems in agile adoption. They will leave with an understanding of what good looks like as well as a list of anti-patterns to watch out for.

uk: вхід без авторизації

name: Agile Lessons from the World of Roller Derby


Analysing GitHub commits with R

uk: Комп'ютерні науки

description: R platform has made the world of data analysis and performance more approachable. It has become an important tool for computational statistics and data visualization. With Microsoft acquiring Revolution Analytics it's also now a part of the Azure family. In this talk Barbara will show how you can use R to turn application data into useful business insights. As the source of data Barbara will use Github Archive, event based commits datasets. She will ask question which languages had interesting trends at specific points of time. The records reveal interesting conclusions about why particular repositories are more popular than others. At the end, attendees will understand how they can apply R for their own application. The language will help them develop intuition about their own data sets. This could allow them to turn unstructured data into information that they could monetize.

uk: вхід без авторизації


AngularJS & ASP.NET MVC Playing Nice

uk: Комп'ютерні науки

description: Angular continues to take the market on a wild ride. Its courses are popular and its developer base growing daily. Google wrote Angular to have no external dependencies and in fact many devs use it with HTML alone. But we’re Microsoft devs and we know that ASP.NET MVC is the best delivery platform for HTML out there. So why not make it an equally awesome delivery platform for Angular-based apps as well? When using ASP.NET MVC, you need to to know how to set Angular up with regards to modules, controllers, and services. And the truth is that not the entire site needs to be one giant Single-Page-Application. I’ll show how to design an ASP.NET MVC site so that it includes pockets of SPA that use Angular, taking advantage of binding, routing, and even back-button support - all while remaining on the client.

uk: вхід без авторизації


Application Insights

uk: Комп'ютерні науки

description: Visual Studio Application Insights helps you to detect issues, diagnoses crashes and track your application usage in your application, both web and mobile. Let’s see how you can get alerts on performance and availability issues, monitor our applications usage and performance, get telemetry for our application without needing to redeploy the applications, search traces and exceptions logs to figure out what is wrong. Oh, did I mention we can monitor Android, iOS, Windows Mobile applications as well as ASP.NET applications. We’ll also take a look at how we can analyze request load, server performance counters and response times across dependencies. Get multi-dimensional analyses over standard metrics or define your own. Diagnose exceptions, mobile app crashes and failed requests, correlating with events and traces.

uk: вхід без авторизації


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Azure Machine Learning: From Design to Integration


uk: Комп'ютерні науки

description: This session discusses the bad habits you may have picked up from those "web school" pages on the internet and shows how to break them with some simple-to-follow rules.By simplifying your JavaScript, thinking about your web page holistically rather than pieces/parts, optimizing your server-client communications, and considering the security aspects of your page, this session will show you how to cook up lean, mean, speed machines for your web pages. No Heisenberg uncertainty involved either, you'll understand and use the developer tools provided with your browser to tweak performance, save time, and optimize bandwidth.

uk: вхід без авторизації

name: Breaking Bad - You can make Fast Web Pages


Beyond Features

uk: Комп'ютерні науки

description: Agile planning has always been a hit-and-miss affair. At one end of the scale is the soul-crushing, multiple day workshops whose output is a list of hundreds of detailed features, many of which will never see the light of day. At the other end is the continual insertion of random demands into the product backlog, with the team constantly on the defensive, never knowing what is coming next and forever switching context. We estimate as a group using story points and then we carefully track velocity, burn-up, burn-down, and use this to predict delivery timescales or commit ourselves to near-term deadlines. So with all this rigour and discipline, surely your team is a highly-energised unit, delivering quality software in a regular cadence, free from the thrashing, context-switching, pressure and uncertainty that would suggest “bad” planning, right? Or maybe not. Maybe features aren’t the point of delivery after all. Maybe there are other kinds of work that we could recognise, schedule and track as first class citizens. Maybe this could take some of the uncertainty out of the delivery process, and give us back our sanity. Maybe.

uk: вхід без авторизації


Building stuff that works with F#

uk: Комп'ютерні науки

description: Many standard F# libraries and tools, including the compiler itself, are developed as open-source and have a large number of contributors. To successfully build such projects, you need to be serious about your craft. This includes comprehensive testing, using automated build tools, continuous integration, as well as creating great documentation and tutorials. In this talk, I'll talk about what I learned as an open-source F# contributor.Along the way, we'll look a number of risk-free ways of introducing F# into your workflow: - How to use F# Interactive for explorative programming and writing code that works on the first try - Using FAKE - an F# build tool - to automate everything in your build process - Writing readable unit tests with F# and using FsCheck for property-based testing - Generating great documentation using F# Formatting toolsIn summary, this talk is a walkthrough covering some of the software engineering aspects of programming that have been working extremely well for the F# open-source ecosystem. After the talk, you'll have a good idea how to use some of the techniques in your daily job - but you may as well become an F# contributor!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: With new tools like Angularjs and Nodejs, it is easier than ever to build User Interfaces for the systems that you manage. But how to do it securely? Web browsers are woefully insecure, and hand-rolled APIs are risky. JSON Web Tokens (JWTs) are being prescribed as a panacea for webapp security, but you need to know your security basics before you can implement them with peace of mind. JWTs are a great mechanism for persisting authentication information in a verifiable and stateless way, but that token still needs to be stored somewhere.In this talk, Robert Damphousse, lead front-end developer at Stormpath, will explain the security loopholes in web browsers, and what you can do about them – keeping your JWTs safe and secure. Topics covered include: Web browser security issues like XSS, user credential security, managing access control information, Man in the Middle attacks (MitM), and Cross-Site Request Forgery (CSRF). How you can mitigate potential security risks. Security issues and implementation tips across the entire stack. What you need to know about cookies. Infrastructure issues with session identifiers. How to issue JSON Web Tokens (JWTs) to secure the browser application.Robert will demonstrate these points with a simple single-page-application, built with Angular.js, and backed by a REST API.

uk: вхід без авторизації

name: Building Secure User Interfaces with JWTs (JSON Web Tokens)


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Concurrency + Distribution = Scalability + Availability, a Journey architecting Erlang Systems