Day Zero on a Xloud Projec - Radu Vunvulea Cloud Developer Days 2018

•Download as PPTX, PDF•

0 likes•119 views

In this session we will take a look on what we need to keep on our radar when we start a new project inside cloud. When not only us, but also clients are new in cloud ecosystem we need to be aware of small things that can make a different or secure the success of the project. Things like security, environment isolation and access controls are just a small part of the things that we need be aware. There will be examples from real life projects and hands-on implementations inside Microsoft Azure. After joining this session you will have an initial view on what things we shall be aware when we start a new project inside cloud.

Technology

cloud.developerdays.pl@DeveloperDaysPL
SESSION STARTS AT 16:20

Sponsors
Silver Sponsors
Strategic Sponsor
Media Partners

Day Zero In A Cloud Project
@RaduVunvulea

RADU VUNVULEA
Chief Cloud Strategies
at @Avaelgo
Technology Enthusiast
Microsoft Azure MVP
Speaker & Trainer
Writer & Blogger
Idealist Software
Architecture Crafter

Day 0 – On-premises
Manage
User
Access
Define
infrastruc
ture
Request
infrastruc
ture
resources
Manage
security
Manage
access
control
Define
policies
Configure
firewall
for
external
systems

Day 0 - Cloud
Get cloud
subscripti
on
Click Create Click Create Click Create

Day 0 - Cloud
Flexibility
Self
Service
Fast
provisioning

cloud.developerdays.pl@DeveloperDaysPL
Lackofcontrol
Resource
Data
Access
Security
Consumption

Identify concerns that need to be attacked
when you kick-off a cloud project
Purpose

cloud.developerdays.pl@DeveloperDaysPL
ACCESSIBILITY &
ENVIRONMENT ISOLATION

Accessibility
VM
VM
VM
VM VM VM VM
VM
DB

Environments
DEV TEST PRE-PROD PROD
Access Control
Subscription
Storage Storage
Computation Computation Computation
Subscription

Environments
DEV TEST PRE-PROD PROD
Access Control
Subscription
Storage Storage
Computation Computation ComputationComputation
Storage Storage
Subscription
Access Control Access Control Access Control
Subscription

Accessibility &
Environment
Network
isolation
VPN
Firewall & IP
Public
Accessibility
TLS
Location

cloud.developerdays.pl@DeveloperDaysPL
ACCESS RIGHTS

Admin
Classical approach
Cloud Subscription
PM Developer Tester ClientITDevOps

Subscription
Access
Limit full
access
rights
Control
access of
DEV &
Test
3rd parties shall
not be admin
on client
subscription
3rd parties
can be co-
admin
Granular
permissions
Use only
company
emails

cloud.developerdays.pl@DeveloperDaysPL
DATA SECURITY

Data security
Storage
Developer
Tester
Client
DevOps
Full access Relational Database
No-SQL Database

PRODPRETESTDEV
Data security
Storage
Developer
Tester
Client
DevOps
Full access Relational Database
No-SQL Database

Data
Security
Environment
isolation
Row
masking
Data
masking
Token base
access (SAS)
RBAC

cloud.developerdays.pl@DeveloperDaysPL
RESOURCE MANAGEMENT

VM
VM
VM
DB
VM VM
VMDB
VM VM
VMDB
VM
VM
VM
DB
VM VM
VM VM
VM VM
VM VM
VMDB
VMDB
VMDB
VM VM

Resource management
Environment definition
New resource
Clean-up
Tear-down
Scripts only
Policy

cloud.developerdays.pl@DeveloperDaysPL
COST CONTROL

What is the value of the bill?
VM
VM
VM
DB
VM VM
VMDB

Cost
Control
Estimate
first
Define
budget
Access
control
Limit
consumpti
on per
env
Define
alerts
Empower
the team

cloud.developerdays.pl@DeveloperDaysPL
PROCESS DEFINITION

Process definition
Resource
Control
Access
Management
Cost control
Artifacts Data Sharing Deployment

Process definition
Resource
Control
Access
Management
Cost control
Artifacts Data Sharing Deployment
Automation

Overview
Access
control
Data security
Accessibility
Consumtion
Environment
Isolation
Policies

cloud.developerdays.pl@DeveloperDaysPL
Q & A

42
THANK YOU!
@RaduVunvulea
RADU VUNVULEA
radu.vunvulea@avaelgo.ro
CHIEF CLOUD STRATEGIST

The document discusses cybersecurity threats facing organizations and how traditional antivirus solutions are often unable to stop advanced malware. It introduces Glasswall's Content Disarm and Reconstruction (CDR) technology, which regenerates files to remove risks like malware while preserving file contents. CDR analyzes files at the visual, functional, and structural layers to sanitize them according to policy. This allows Glasswall to stay ahead of evolving threats unlike antivirus solutions.

Zero trust for everybody: 3 ways to get there fast

Cloudflare

The COVID-19 pandemic has exposed the weaknesses of the traditional ‘castle-and-moat’ security model. Remote work has expanded attack surfaces infinitely outwards, and more than ever, organizations need to start from the assumption that their ‘castle’ is already compromised. Zero Trust has emerged as a compelling security framework to address the failures of existing perimeter-based security approaches. It’s aspirational, but not unachievable. At Cloudflare, we’re making complicated security challenges easier to solve. Since 2018, Cloudflare Access has helped thousands of organizations big and small take their first steps toward Zero Trust. In this presentation, Cloudflare will share their perspective on what the most successful organizations do first on their journey to Zero Trust. We’ll cover: -The Zero Trust framework, and our recommended ZT security model -How 3 organizations of differing size and security maturity have implemented Zero Trust access -Cloudflare’s Zero Trust implementation and lessons learned

Bring speed and security to the intranet with cloudflare for teams

Cloudflare

Cloudflare was started to solve one half of every IT organization's challenge: how do you ensure the resources and infrastructure that you expose to the Internet are safe from attack, fast, and reliable? To deliver that, we built one of the world's largest networks. Today our network spans more than 200 cities worldwide and is within milliseconds of nearly everyone connected to the Intranet. Cloudflare for Teams is a new platform designed to solve the other half of every IT organization's challenge: ensuring the people and teams within an organization can safely access the tools they need to do their job. Now you can extend Cloudflare’s speed, reliability and protection to everything your team does on the Intranet. In this webinar, you’ll learn: - Common challenges of scaling security for your growing business - How to extend Zero Trust security principles to your internally managed applications - How to make Intranet access faster and safer for your employees

Netskope Threat Labs: Cloud As an Attack Vector

Netskope

This document discusses how threat actors are increasingly using cloud services as an attack vector. It provides examples of malware campaigns that have used cloud services for hosting payloads, command and control, and spreading malware. Specifically, it outlines campaigns that have used Amazon S3, Dropbox, Google Drive and other cloud platforms at various stages of the attack lifecycle. The document recommends that organizations inspect cloud traffic, block unnecessary cloud services, and block unsanctioned instances of needed services to better protect their cloud security posture.

Developing and Deploying Microservices with Project Tye

Eran Stiller

Everyone's talking about Microservices. Everyone's considering doing Microservices. Everyone's starting to use Microservices. And then everyone discovers how hard it is to develop Microservices on your local machine. Join me as we discover project "Tye," which simplifies Microservices development and flattens the learning curve of getting your services into production up and running. See more at https://stiller.blog/portfolio/developing-and-deploying-microservices-with-tye/

HARTMANN and Cloudflare Learn how healthcare providers can build resilient in...

Cloudflare

This document discusses how healthcare providers like Paul Hartmann AG can build resilient infrastructure with Cloudflare. It summarizes Cloudflare's services including performance, security, and serverless capabilities. It then discusses trends seen on Cloudflare's network during COVID-19 like a rise in DDoS attacks and attacks targeting hospital websites. The document outlines best practices for healthcare organizations to deliver superior online experiences through strengthening security, ensuring no trade-off between security and performance, understanding business objectives, leveraging threat intelligence, and remaining ahead of the security curve.

Stratégie et évolution de Microsoft IT pour supporter la transformation digit...

Microsoft Décideurs IT

Why Everyone Needs a Cloud-First Security Program - SASEfaction Guaranteed!

Netskope

The advancement in deep and machine learning, natural language understanding, and big data processing are paving the way for the rise in AI-powered bots, that are faster, getting better at understanding human interaction and can even mimic human behavior. Cyber criminals are harnessing the latest tools available, and constantly changing their techniques to make their attacks more effective, faster and adaptable to safeguards. Join this webinar to learn about: - What type of workloads prone to bot attacks - Which industries heavily affected by Bot attacks - Learn about Cloudflare's Machine Learning and Behavioral Analysis driven approach to solving Bot menace.

CSA Argentina - Jornada CXO Cloud

CSA Argentina

Network Transformation: What it is, and how it’s helping companies stay secur...

Cloudflare

This document provides an overview of a presentation by Cloudflare on network transformation and how to stay secure while migrating to the cloud. The presentation discusses network security challenges, an overview of Cloudflare's solutions, and customer stories from the financial services, manufacturing and e-commerce industries. Topics that will be covered include network security, Cloudflare's global cloud platform, how digital transformation is changing organizations, the need for network transformation, and how Cloudflare enables secure access and reduces costs when migrating applications and networks to the cloud. Customer examples are then provided from a financial services company, a manufacturing company, a cosmetics company, and a vehicle manufacturer that discuss how Cloudflare helped improve their security,

5 Highest-Impact CASB Use Cases

Netskope

Cloud app security is a top priority for many enterprises. Whether securing data in the Office 365 suite, ensuring compliance in Salesforce, or getting control over shadow IT, information security leaders are exploring how Cloud Access Security Brokers can make an impact in their organizations. This presentation covers the top five CASB use cases that have the highest impact on cloud-consuming enterprises.

2012 10 cloud security architecture

Vladimir Jirasek

Security architecture and cloud computing are not mutually exclusive according to Vladimir Jirasek, Director of Research at CSA UK. There is a direct map between cloud models (IaaS, PaaS, SaaS) and areas of security models (identity and access management, encryption, firewalls etc.). Responsibilities for security areas depend on the cloud model, with providers taking more responsibility in IaaS and customers taking more in SaaS. The document provides guidance on developing cloud security standards and managing security risks when using cloud computing.

Why you should replace your d do s hardware appliance

Cloudflare

CSS17: Dallas - Thawing the Frozen Middle

Alert Logic

Stop Hackers with Integrated CASB & IDaaS Security

CloudLock

Digitální transformace: zabezpečení agilních prostředí

MarketingArrowECS_CZ

This document discusses digital transformation and securing agile environments. It covers topics like the future of firewalls, developing threats, using machine learning for malware detection, and predictive detection of threats like Cerber. It also discusses securing applications in cloud and virtual environments through techniques like application-aware security policies, microsegmentation with software-defined networking, and the vSEC product family.

Web Performance Without Sacrificing Security: Featuring Forrester Guest Speaker

Cloudflare

View this presentation from guest speaker Mark Grannan, Senior Analyst at Forrester, and Jen Taylor, Head of Products at Cloudflare, to learn how cloud adoption transforms infrastructure and technical environments, resulting in a need for a holistic, strategic approach to performance and security. You will learn: -How moving to the cloud makes infrastructure and technical environments more complex -Why organizations cannot trade performance for security, or vice versa -What challenges organizations face with vendor lock-in and inconsistent security policies across cloud environments -Why global cloud platforms that can deliver security and performance in tandem are the new mandate

What You're Missing With Your Current WAF Provider

Cloudflare

Preventing data breaches and stopping malicious bots has become a top priority for many companies. Cloudflare blocks over 400 million malicious requests each day and from this we know that installing and forgetting a Web Application Firewall is no longer enough. In order to keep up, rules must not only be updated and monitored constantly, but they must also be augmented with other security services to provide an effective solution.

Pariveda Solutions - Thawing the Frozen Middle

Alert Logic

The document discusses strategies for overcoming common challenges ("thawing the frozen middle") that organizations face when adopting cloud technologies. It addresses four key challenges: 1) financial justification, 2) cloud security and compliance, 3) developing an effective cloud operating model, and 4) finding and growing the necessary talent. For each, it provides approaches to align cloud adoption with business needs, design secure cloud solutions, assess organizational readiness, and attract qualified talent. The overall message is that cloud transformation requires considering its impact on people, processes, and technology across the organization.

Forrester Research: Securing the Cloud When Users are Left to Their Own Devices

Netskope

90% of cloud apps in the enterprise are being used without IT’s knowledge. Whether brought in by individuals or lines of business, there’s an average of 508 apps per enterprise and more than 5,000 in the world from which people can choose. Where things get even more interesting is when cloud and mobile combine and the opportunity for data loss and breaches multiply. These slides are from a webinar where leading identity management, cloud security, and fraud management expert Andras Cser from Forrester and Netskope’s Sr. Director of Product Marketing Bob Gilbert talk about the importance of understanding which employees are using which cloud apps and from where they’re accessing them. View the on-demand webinar here: http://www.netskope.com/webinars/securing-cloud-users-left-devices/

The Cloud promises - Global Azure Bootcamp Paris 2019

Alex Danvy

Defcon 27 - The Future of Command and Control

Netskope

This document discusses how malware authors are increasingly using cloud services and Software as a Service (SaaS) applications for command and control rather than relying on their own infrastructure. A brief history of malware using techniques like domain generation algorithms and case studies of recent malware like SLUB that used Slack extensively are provided. The document also discusses perspectives and techniques for both blue teams defending against "SaaSy" malware and red teams conducting attacks using legitimate cloud services to blend in. Code for a proof-of-concept command and control malware that leverages various SaaS applications called "SaaSy_Boi" is also available on GitHub.

Slideshare

nacho15adae

In the connected world, online slide presentations can be easily shared regardless of location or device by uploading them to platforms like Slideshare. Users can create a Slideshare account, upload their PowerPoint presentation, add additional information and set the privacy settings. They can then obtain an embed code to insert the presentation on a website, allowing others to access and view the slides. Alternative programs for creating online slide presentations include OneDrive, Google Drive, PhotoShow and PhotoPeach.

Azure for a Design and User Experience (DUX) teams

Emma Woods

Supporting Remote Work While Securing, Governing, and Protecting Your Microso...

Chris Bortlik

This document announces a virtual Microsoft 365 marathon event on May 27-28, 2020 spanning 36 hours over 2 days. It will focus on supporting remote work while securing, governing, and protecting Microsoft 365 investments. The event is sponsored and features presentations, demos, and discussions on security best practices. Attendees can enter raffles and portions of sponsorship funds will be donated to charity relief efforts.

Silver Lining: An Everyman's Journey to Cloud Security - Sven Skoog, Monotype

Alert Logic

Sven Skoog discusses security challenges facing Monotype, a company with 500-700 employees across 14 offices in 10 countries. As Monotype relies increasingly on cloud computing but also maintains on-premise infrastructure, Skoog examines whether defenses need to differ between local and cloud environments. He then outlines Monotype's existing security tools from Alert Logic that provide sensors and instrumentation to detect threats, forensic logging and consolidation of events, web application inspection, and automated monitoring through a security operations center. Skoog believes the cloud can enable new "meta-insights" through tracking of cloud assets, attack trends over time, and deviations from typical usage profiles.

The Cloud & I, The CISO challenges with Cloud Computing

Moshe Ferber

Sonnenstrahlen am wolkenhimmel - Oracle in der Infrastruktur Cloud

Trivadis

This document is a presentation about Oracle software in cloud infrastructures like Amazon Web Services, Microsoft Azure, and Oracle Cloud. It discusses how Oracle databases, WebLogic Server, and other Oracle products can be deployed and managed on these three cloud platforms. It provides details on licensing, pricing models, virtual machine sizes available, and support options for running Oracle software in the cloud.

Scalar Security Roadshow - Ottawa Presentation

Scalar Decisions

What's hot

Fight bad bot on the internet

Cloudflare

CSA Argentina - Jornada CXO Cloud

CSA Argentina

Network Transformation: What it is, and how it’s helping companies stay secur...

Cloudflare

5 Highest-Impact CASB Use Cases

Netskope

2012 10 cloud security architecture

Vladimir Jirasek

Why you should replace your d do s hardware appliance

Cloudflare

CSS17: Dallas - Thawing the Frozen Middle

Alert Logic

Stop Hackers with Integrated CASB & IDaaS Security

CloudLock

Digitální transformace: zabezpečení agilních prostředí

MarketingArrowECS_CZ

Web Performance Without Sacrificing Security: Featuring Forrester Guest Speaker

Cloudflare

What You're Missing With Your Current WAF Provider

Cloudflare

Pariveda Solutions - Thawing the Frozen Middle

Alert Logic

Forrester Research: Securing the Cloud When Users are Left to Their Own Devices

Netskope

The Cloud promises - Global Azure Bootcamp Paris 2019

Alex Danvy

Defcon 27 - The Future of Command and Control

Netskope

Slideshare

nacho15adae

Azure for a Design and User Experience (DUX) teams

Emma Woods

Supporting Remote Work While Securing, Governing, and Protecting Your Microso...

Chris Bortlik

Silver Lining: An Everyman's Journey to Cloud Security - Sven Skoog, Monotype

Alert Logic

The Cloud & I, The CISO challenges with Cloud Computing

Moshe Ferber

What's hot (20)

Fight bad bot on the internet

CSA Argentina - Jornada CXO Cloud

Network Transformation: What it is, and how it’s helping companies stay secur...

5 Highest-Impact CASB Use Cases

2012 10 cloud security architecture

Why you should replace your d do s hardware appliance

CSS17: Dallas - Thawing the Frozen Middle

Stop Hackers with Integrated CASB & IDaaS Security

Digitální transformace: zabezpečení agilních prostředí

Web Performance Without Sacrificing Security: Featuring Forrester Guest Speaker

What You're Missing With Your Current WAF Provider

Pariveda Solutions - Thawing the Frozen Middle

Forrester Research: Securing the Cloud When Users are Left to Their Own Devices

The Cloud promises - Global Azure Bootcamp Paris 2019

Defcon 27 - The Future of Command and Control

Slideshare

Azure for a Design and User Experience (DUX) teams

Supporting Remote Work While Securing, Governing, and Protecting Your Microso...

Silver Lining: An Everyman's Journey to Cloud Security - Sven Skoog, Monotype

The Cloud & I, The CISO challenges with Cloud Computing

Similar to Day Zero on a Xloud Projec - Radu Vunvulea Cloud Developer Days 2018

Sonnenstrahlen am wolkenhimmel - Oracle in der Infrastruktur Cloud

Trivadis

Scalar Security Roadshow - Ottawa Presentation

Scalar Decisions

Scalar Security Roadshow - Vancouver Presentation

Scalar Decisions

Gartner recently released a report on IT security priorities for the remainder of 2014. Amongst respondents, network security, application security, endpoint security, and security services all ranked highly. In this quick-fire, half-day roadshow, Scalar brings you solutions to these problems from three of our most strategic security vendors, as well as a full presentation on our managed security services portfolio.

Global Mandate to Secure Cloud Computing

CloudSecurityAllianceAustralia

This document discusses the challenges and opportunities of cloud security from the perspective of the Cloud Security Alliance (CSA). It outlines key issues like legal jurisdiction, privacy protection, and lack of transparency from cloud providers. The CSA aims to address these issues by creating a global trusted cloud ecosystem through research, standards, and education. It has grown significantly since its founding in 2009 and now has over 44,000 members worldwide.

Scalar Security Roadshow - Calgary Presentation

Scalar Decisions

CSS17: Atlanta - Realities of Security in the Cloud

Alert Logic

Lss implementing cyber security in the cloud, and from the cloud-feb14

L S Subramanian

This document summarizes a presentation about implementing cyber security in and from the cloud. It discusses the Cloud Security Alliance (CSA), an organization that develops best practices for cloud security. The CSA has published a document called "Security Guidance for Critical Areas of Focus in Cloud Computing" that identifies important security domains for cloud computing like architecture, governance, compliance, and more. It also discusses how companies can provide cyber security solutions in the cloud through technologies like SecureCloud that give enterprises control over encrypted data in public clouds.

The Developer of the Future Starts Here

Tristano Vacondio

How to be a Cloud Savvy Developer and Why In 2011, Bob Violino wrote, “Whether developing, testing, or deploying your apps in the cloud, you have to unlearn some beliefs and learn new ones to make it work.” It still stands true today. “Despite the potential challenges, for many organizations application development in the cloud rather than sticking with traditional methods makes sense, for the same reasons that cloud computing in general makes sense.” Join us with CCC Professional Cloud Developer syllabus author, Vladimir Baranek, to find out exactly how cloud development makes sense and what one needs to know to become a cloud savvy developer.

GIDS_what does_cloud-native_mean_anyway?

Grace Jansen

Terms cloud-native & microservice architecture have been used interchangeably for years. Microservices have benefits, but also bring challenges, so are they really the go-to solution in all cases? Better understanding & some failed projects led to an evaluation of the suitability of microservices, and resulted in new interest in the various architecture styles in the cloud. We'll look at microservices and monoliths in the context of cloud-native.

CloudWorld: What Does Cloud-Native Mean Anyway?

Grace Jansen

Innovate bluemix and jazz vpc

Kartik Kanakasabesan

The document discusses how to use IBM Bluemix with an existing Jazz environment. It provides an overview of Bluemix, JazzHub, Cloud Foundry, and managed services. It then outlines two scenarios for managing code in Bluemix from Jazz: scenario A uses JazzHub while scenario B connects directly to Cloud Foundry. The document also covers challenges in setting up the integration and differences between Jazz on Cloud and JazzHub.

Cloud Foundry May 1 2014

Christopher Ferris

CSS 17: NYC - Realities of Security in the Cloud

Alert Logic

Cloud foundry presentation

Vipul Tope

Cloud Foundry is an open platform as a service that allows developers to deploy and scale applications in seconds across clouds without vendor lock-in. It provides developer agility, portability without code changes, and freedom of choice. Cloud Foundry enables multi-cloud flexibility by allowing applications to run on both public and private clouds. It aims to make multi-cloud a reality through tools like VMC and support for frameworks like Rails, Spring, Grails, and Node.js.

Keeping Security In-Step with Your Application Demand Curve

Amazon Web Services

Protecting dynamically scaled cloud compute resources can be challenging, especially for organizations that lack the time or money it takes to maintain dynamic security. Fortinet’s auto scaling security solution addresses this issue by providing the resources to help with deployment in order to optimize organizations’ AWS networks. Join the upcoming webinar hosted by Fortinet and AWS to learn how to leverage Fortinet for auto scaling complex security policies in your Amazon VPC. Fortinet has a broad set of capabilities that when combined with AWS services creates truly a complete security architecture.

Keeping Security In-Step with your Application Demand Curve

Amazon Web Services

This document discusses keeping security scalable with application demand in the cloud. It discusses how AWS infrastructure is constantly monitored and highly available across multiple regions. AWS and customers share responsibility for security. The document recommends automating logging and monitoring, simplifying access controls, enabling encryption, and enforcing authentication. It also discusses how security needs to scale elastically with workloads in the cloud.

Global Efforts to Secure Cloud Computing

InnoTech

The document discusses the Cloud Security Alliance (CSA), a non-profit organization focused on promoting the use of best practices for providing security assurance within cloud computing. It summarizes CSA's research projects including the Cloud Controls Matrix, Consensus Assessments Initiative, Cloud Audit, and Cloud Trust Protocol. It also discusses CSA's Certificate of Cloud Security Knowledge certification and training programs. The document emphasizes CSA's role in developing tools and standards to help ensure governance, risk management, and compliance in cloud computing.

A Quick Introduction to Microsoft Azure Public Cloud

ZNetLive

Microsoft Azure Stack

Tudor Damian

The document provides an overview of Microsoft Azure Stack, which allows organizations to run applications and services built on Azure in their own datacenters. It discusses how Azure Stack provides a hybrid cloud that combines public Azure services with private, on-premises infrastructure. It also covers key aspects of Azure Stack including Azure Resource Manager, supported services, cloud-inspired architecture, and next steps for learning more.

UKVMUG 2016 - Demystifying the Future of IT, an IT practitioners guide

Julian Wood

This document appears to be the slides from a presentation on the future of IT and multi-cloud strategies. Some key points summarized: - IT is changing rapidly with new technologies like containers, serverless computing, and the rise of multi-cloud environments. Simplicity should be a goal when managing infrastructure across private and public clouds. - Multi-cloud strategies allow using the best cloud for each workload and reduce vendor lock-in. However, they also increase complexity around integration, security, and billing across different cloud platforms. - Adopting a DevOps approach and treating infrastructure as code can help manage complexity when deploying applications across multiple cloud environments. Microservices architectures and containers are also well-suited

Similar to Day Zero on a Xloud Projec - Radu Vunvulea Cloud Developer Days 2018 (20)

Sonnenstrahlen am wolkenhimmel - Oracle in der Infrastruktur Cloud

Scalar Security Roadshow - Ottawa Presentation

Scalar Security Roadshow - Vancouver Presentation

Global Mandate to Secure Cloud Computing

Scalar Security Roadshow - Calgary Presentation

CSS17: Atlanta - Realities of Security in the Cloud

Lss implementing cyber security in the cloud, and from the cloud-feb14

The Developer of the Future Starts Here

GIDS_what does_cloud-native_mean_anyway?

CloudWorld: What Does Cloud-Native Mean Anyway?

Innovate bluemix and jazz vpc

Cloud Foundry May 1 2014

CSS 17: NYC - Realities of Security in the Cloud

Cloud foundry presentation

Keeping Security In-Step with Your Application Demand Curve

Keeping Security In-Step with your Application Demand Curve

Global Efforts to Secure Cloud Computing

A Quick Introduction to Microsoft Azure Public Cloud

Microsoft Azure Stack

UKVMUG 2016 - Demystifying the Future of IT, an IT practitioners guide

Recently uploaded

Nordic Marketo Engage User Group_June 13_ 2024.pptx

MichaelKnudsen27

Principle of conventional tomography-Bibash Shahi ppt..pptx

BibashShahi

Taking AI to the Next Level in Manufacturing.pdf

ssuserfac0301

Read Taking AI to the Next Level in Manufacturing to gain insights on AI adoption in the manufacturing industry, such as: 1. How quickly AI is being implemented in manufacturing. 2. Which barriers stand in the way of AI adoption. 3. How data quality and governance form the backbone of AI. 4. Organizational processes and structures that may inhibit effective AI adoption. 6. Ideas and approaches to help build your organization's AI strategy.

GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph

Neo4j

Overcoming the PLG Trap: Lessons from Canva's Head of Sales & Head of EMEA Da...

saastr

"Choosing proper type of scaling", Olena Syrota

Fwdays

“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...

Edge AI and Vision Alliance

For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/temporal-event-neural-networks-a-more-efficient-alternative-to-the-transformer-a-presentation-from-brainchip/ Chris Jones, Director of Product Management at BrainChip , presents the “Temporal Event Neural Networks: A More Efficient Alternative to the Transformer” tutorial at the May 2024 Embedded Vision Summit. The expansion of AI services necessitates enhanced computational capabilities on edge devices. Temporal Event Neural Networks (TENNs), developed by BrainChip, represent a novel and highly efficient state-space network. TENNs demonstrate exceptional proficiency in handling multi-dimensional streaming data, facilitating advancements in object detection, action recognition, speech enhancement and language model/sequence generation. Through the utilization of polynomial-based continuous convolutions, TENNs streamline models, expedite training processes and significantly diminish memory requirements, achieving notable reductions of up to 50x in parameters and 5,000x in energy consumption compared to prevailing methodologies like transformers. Integration with BrainChip’s Akida neuromorphic hardware IP further enhances TENNs’ capabilities, enabling the realization of highly capable, portable and passively cooled edge devices. This presentation delves into the technical innovations underlying TENNs, presents real-world benchmarks, and elucidates how this cutting-edge approach is positioned to revolutionize edge AI across diverse applications.

"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk

Fwdays

At this talk we will discuss DDoS protection tools and best practices, discuss network architectures and what AWS has to offer. Also, we will look into one of the largest DDoS attacks on Ukrainian infrastructure that happened in February 2022. We'll see, what techniques helped to keep the web resources available for Ukrainians and how AWS improved DDoS protection for all customers based on Ukraine experience

9 CEO's who hit $100m ARR Share Their Top Growth Tactics Nathan Latka, Founde...

saastr

How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf

Chart Kalyan

Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians

Neo4j

GNSS spoofing via SDR (Criptored Talks 2024)

Javier Junquera

In the realm of cybersecurity, offensive security practices act as a critical shield. By simulating real-world attacks in a controlled environment, these techniques expose vulnerabilities before malicious actors can exploit them. This proactive approach allows manufacturers to identify and fix weaknesses, significantly enhancing system security. This presentation delves into the development of a system designed to mimic Galileo's Open Service signal using software-defined radio (SDR) technology. We'll begin with a foundational overview of both Global Navigation Satellite Systems (GNSS) and the intricacies of digital signal processing. The presentation culminates in a live demonstration. We'll showcase the manipulation of Galileo's Open Service pilot signal, simulating an attack on various software and hardware systems. This practical demonstration serves to highlight the potential consequences of unaddressed vulnerabilities, emphasizing the importance of offensive security practices in safeguarding critical infrastructure.

HCL Notes and Domino License Cost Reduction in the World of DLAU

panagenda

Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-and-domino-license-cost-reduction-in-the-world-of-dlau/ The introduction of DLAU and the CCB & CCX licensing model caused quite a stir in the HCL community. As a Notes and Domino customer, you may have faced challenges with unexpected user counts and license costs. You probably have questions on how this new licensing approach works and how to benefit from it. Most importantly, you likely have budget constraints and want to save money where possible. Don’t worry, we can help with all of this! We’ll show you how to fix common misconfigurations that cause higher-than-expected user counts, and how to identify accounts which you can deactivate to save money. There are also frequent patterns that can cause unnecessary cost, like using a person document instead of a mail-in for shared mailboxes. We’ll provide examples and solutions for those as well. And naturally we’ll explain the new licensing model. Join HCL Ambassador Marc Thomas in this webinar with a special guest appearance from Franz Walder. It will give you the tools and know-how to stay on top of what is going on with Domino licensing. You will be able lower your cost through an optimized configuration and keep it low going forward. These topics will be covered - Reducing license cost by finding and fixing misconfigurations and superfluous accounts - How do CCB and CCX licenses really work? - Understanding the DLAU tool and how to best utilize it - Tips for common problem areas, like team mailboxes, functional/test users, etc - Practical examples and best practices to implement right away

“How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-eff...

Edge AI and Vision Alliance

For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2024/06/how-axelera-ai-uses-digital-compute-in-memory-to-deliver-fast-and-energy-efficient-computer-vision-a-presentation-from-axelera-ai/ Bram Verhoef, Head of Machine Learning at Axelera AI, presents the “How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-efficient Computer Vision” tutorial at the May 2024 Embedded Vision Summit. As artificial intelligence inference transitions from cloud environments to edge locations, computer vision applications achieve heightened responsiveness, reliability and privacy. This migration, however, introduces the challenge of operating within the stringent confines of resource constraints typical at the edge, including small form factors, low energy budgets and diminished memory and computational capacities. Axelera AI addresses these challenges through an innovative approach of performing digital computations within memory itself. This technique facilitates the realization of high-performance, energy-efficient and cost-effective computer vision capabilities at the thin and thick edge, extending the frontier of what is achievable with current technologies. In this presentation, Verhoef unveils his company’s pioneering chip technology and demonstrates its capacity to deliver exceptional frames-per-second performance across a range of standard computer vision networks typical of applications in security, surveillance and the industrial sector. This shows that advanced computer vision can be accessible and efficient, even at the very edge of our technological ecosystem.

zkStudyClub - LatticeFold: A Lattice-based Folding Scheme and its Application...

Alex Pruden

Folding is a recent technique for building efficient recursive SNARKs. Several elegant folding protocols have been proposed, such as Nova, Supernova, Hypernova, Protostar, and others. However, all of them rely on an additively homomorphic commitment scheme based on discrete log, and are therefore not post-quantum secure. In this work we present LatticeFold, the first lattice-based folding protocol based on the Module SIS problem. This folding protocol naturally leads to an efficient recursive lattice-based SNARK and an efficient PCD scheme. LatticeFold supports folding low-degree relations, such as R1CS, as well as high-degree relations, such as CCS. The key challenge is to construct a secure folding protocol that works with the Ajtai commitment scheme. The difficulty, is ensuring that extracted witnesses are low norm through many rounds of folding. We present a novel technique using the sumcheck protocol to ensure that extracted witnesses are always low norm no matter how many rounds of folding are used. Our evaluation of the final proof system suggests that it is as performant as Hypernova, while providing post-quantum security. Paper Link: https://eprint.iacr.org/2024/257

Mutation Testing for Task-Oriented Chatbots

Pablo Gómez Abajo

Conversational agents, or chatbots, are increasingly used to access all sorts of services using natural language. While open-domain chatbots - like ChatGPT - can converse on any topic, task-oriented chatbots - the focus of this paper - are designed for specific tasks, like booking a flight, obtaining customer support, or setting an appointment. Like any other software, task-oriented chatbots need to be properly tested, usually by defining and executing test scenarios (i.e., sequences of user-chatbot interactions). However, there is currently a lack of methods to quantify the completeness and strength of such test scenarios, which can lead to low-quality tests, and hence to buggy chatbots. To fill this gap, we propose adapting mutation testing (MuT) for task-oriented chatbots. To this end, we introduce a set of mutation operators that emulate faults in chatbot designs, an architecture that enables MuT on chatbots built using heterogeneous technologies, and a practical realisation as an Eclipse plugin. Moreover, we evaluate the applicability, effectiveness and efficiency of our approach on open-source chatbots, with promising results.

What is an RPA CoE? Session 1 – CoE Vision

DianaGray10

Northern Engraving | Nameplate Manufacturing Process - 2024

Northern Engraving

Manufacturing custom quality metal nameplates and badges involves several standard operations. Processes include sheet prep, lithography, screening, coating, punch press and inspection. All decoration is completed in the flat sheet with adhesive and tooling operations following. The possibilities for creating unique durable nameplates are endless. How will you create your brand identity? We can help!

Dandelion Hashtable: beyond billion requests per second on a commodity server

Antonios Katsarakis

This slide deck presents DLHT, a concurrent in-memory hashtable. Despite efforts to optimize hashtables, that go as far as sacrificing core functionality, state-of-the-art designs still incur multiple memory accesses per request and block request processing in three cases. First, most hashtables block while waiting for data to be retrieved from memory. Second, open-addressing designs, which represent the current state-of-the-art, either cannot free index slots on deletes or must block all requests to do so. Third, index resizes block every request until all objects are copied to the new index. Defying folklore wisdom, DLHT forgoes open-addressing and adopts a fully-featured and memory-aware closed-addressing design based on bounded cache-line-chaining. This design offers lock-free index operations and deletes that free slots instantly, (2) completes most requests with a single memory access, (3) utilizes software prefetching to hide memory latencies, and (4) employs a novel non-blocking and parallel resizing. In a commodity server and a memory-resident workload, DLHT surpasses 1.6B requests per second and provides 3.5x (12x) the throughput of the state-of-the-art closed-addressing (open-addressing) resizable hashtable on Gets (Deletes).

Fueling AI with Great Data with Airbyte Webinar

Zilliz

Recently uploaded (20)

Nordic Marketo Engage User Group_June 13_ 2024.pptx

Principle of conventional tomography-Bibash Shahi ppt..pptx

Taking AI to the Next Level in Manufacturing.pdf

GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph

Overcoming the PLG Trap: Lessons from Canva's Head of Sales & Head of EMEA Da...

"Choosing proper type of scaling", Olena Syrota

“Temporal Event Neural Networks: A More Efficient Alternative to the Transfor...

"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk

9 CEO's who hit $100m ARR Share Their Top Growth Tactics Nathan Latka, Founde...

How to Interpret Trends in the Kalyan Rajdhani Mix Chart.pdf

Biomedical Knowledge Graphs for Data Scientists and Bioinformaticians

GNSS spoofing via SDR (Criptored Talks 2024)

HCL Notes and Domino License Cost Reduction in the World of DLAU

“How Axelera AI Uses Digital Compute-in-memory to Deliver Fast and Energy-eff...

zkStudyClub - LatticeFold: A Lattice-based Folding Scheme and its Application...

Mutation Testing for Task-Oriented Chatbots

What is an RPA CoE? Session 1 – CoE Vision

Northern Engraving | Nameplate Manufacturing Process - 2024

Dandelion Hashtable: beyond billion requests per second on a commodity server

Fueling AI with Great Data with Airbyte Webinar

Day Zero on a Xloud Projec - Radu Vunvulea Cloud Developer Days 2018

1. cloud.developerdays.pl@DeveloperDaysPL SESSION STARTS AT 16:20

2. cloud.developerdays.pl@DeveloperDaysPL

3. Sponsors Silver Sponsors Strategic Sponsor Media Partners

4. Day Zero In A Cloud Project @RaduVunvulea

5. RADU VUNVULEA Chief Cloud Strategies at @Avaelgo Technology Enthusiast Microsoft Azure MVP Speaker & Trainer Writer & Blogger Idealist Software Architecture Crafter

6. Day 0 – On-premises Manage User Access Define infrastruc ture Request infrastruc ture resources Manage security Manage access control Define policies Configure firewall for external systems

7. Day 0 - Cloud Get cloud subscripti on Click Create Click Create Click Create

8. Day 0 - Cloud Flexibility Self Service Fast provisioning

9. cloud.developerdays.pl@DeveloperDaysPL Lackofcontrol Resource Data Access Security Consumption

10. cloud.developerdays.pl@DeveloperDaysPL Lackofcontrol Resource Data Access Security Consumption $ £ €

11. Identify concerns that need to be attacked when you kick-off a cloud project Purpose

12. cloud.developerdays.pl@DeveloperDaysPL ACCESSIBILITY & ENVIRONMENT ISOLATION

13. Accessibility VM VM VM VM VM VM VM VM DB

14. Accessibility VM VM VM VM VM VM VM VM DB

15. Environments DEV TEST PRE-PROD PROD Access Control Subscription Storage Storage Computation Computation Computation Subscription

16. Environments DEV TEST PRE-PROD PROD Access Control Subscription Storage Storage Computation Computation ComputationComputation Storage Storage Subscription Access Control Access Control Access Control Subscription

17. Accessibility & Environment Network isolation VPN Firewall & IP Public Accessibility TLS Location

18. cloud.developerdays.pl@DeveloperDaysPL ACCESS RIGHTS

19. Admin Classical approach Cloud Subscription PM Developer Tester ClientITDevOps

20. Admin Classical approach Cloud Subscription PM Developer Tester ClientITDevOps

21. Subscription Access Limit full access rights Control access of DEV & Test 3rd parties shall not be admin on client subscription 3rd parties can be co- admin Granular permissions Use only company emails

22. cloud.developerdays.pl@DeveloperDaysPL DATA SECURITY

23. Data security Storage Developer Tester Client DevOps Full access Relational Database No-SQL Database

24. PRODPRETESTDEV Data security Storage Developer Tester Client DevOps Full access Relational Database No-SQL Database

25. Country regulations

26. Data Security Environment isolation Row masking Data masking Token base access (SAS) RBAC

27. cloud.developerdays.pl@DeveloperDaysPL RESOURCE MANAGEMENT

28. VM VM VM DB

29. VM VM VM DB VM VM VMDB VM VM

30. VM VM VM DB VM VM VMDB VM VM VMDB VM VM VM DB VM VM VM VM VM VM VM VM VMDB VMDB VMDB VM VM

31. Resource management Environment definition New resource Clean-up Tear-down Scripts only Policy

32. cloud.developerdays.pl@DeveloperDaysPL COST CONTROL

33. What is the value of the bill? VM VM VM DB VM VM VMDB