(SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014

•

20 likes•8,745 views

In this session, we'll give an overview of Distributed Denial of Service (DDoS) and discuss techniques using AWS and security solutions from AWS Marketplace to help build services that are resilient in the face of DDoS attacks. We'll discuss anti-DDoS features available in AWS, such as Route 53's Anycast Routing, Auto Scaling for EC2, and CloudWatch's alarms, and how these features can be used jointly to help protect your services. Also, you'll hear from CrownPeak, an AWS Technology Partner, on how it used techniques discussed in the presentation to help mitigate an actual DDoS attack.

Technology

•Infrastructure attacks (Layer 3 / 4)
–Average attack size is 900Mbps (50% under 500Mbps)
–78% of attacks are infrastructure (simple to launch)
•Application attacks (Layer 7)
–22% of all attacks target port 80 & 443 (more complex)
•Multi-vector –different attack types simultaneously
•Amplification (NTP, SSDP, DNS, Chargen, SNMP)
•Hit and run DDoS (91% < 1hour) and smokescreens (16-18%)

web app
server
DMZ public subnet
ssh
bastion
NAT
users ELB
admin
internet
Amazon EC2
security group
security group
security group
security group
frontend private subnet
TCP: 8080
Amazon EC2
TCP: 80/443
backend private subnet
security group
TCP: 1433;
3306
MySQL db
TCP: Outbound
TCP: 22

ELB
users
security group
DMZ
public subnet
Amazon
Route 53
CloudFront
Edge Location
security group
web app
server
Frontend server
private subnet
DDoS

Internet
Connection C
Internet
ConnectionA
Internet
Connection B
CloudFront
Valid
Object Request
Invalid
Protocol
Invalid
Object Request
Country B
Country A
Country C
Route A
Route B
Route C
users

ELB
security group
DMZ
public subnet
CloudFront
Edge Location
security group
web app
server
Frontend server
private subnet
DDoS
users

ELB
security
group
DMZ
public subnet
CloudFront
Edge Location
security group
WAF / Proxy
private subnet
DDoS
users
WAF
Auto
Scaling
ELB
security
group
Auto Scaling
security
group
frontend servers
private subnet
web app
server

9:30 pm PDT
Traffic analysis suggests opportunity to mitigate attack by revising configuration.
We also decide to disable auto- scaling to preserve data for FBI forensic analysis.
10:34 am PDT
First indications of impaired response from monitors. Traffic ramps dramatically.
12:30 pm PDT
Attack initially targets IP addresses of A record. Switch to Route53 CNAME as cutout eliminates traffic.
6:24 pm PDT
Attack resumes (targeting CNAME this time). Traffic ramps dramatically.

2:15 am PDT
Bad guys give up. Attack stops … Hah!
9:30 pm PDT
Traffic analysis suggests opportunity to mitigate attack by revising configuration.
We also decide to disable auto- scaling to preserve data for FBI forensic analysis.
10:34 am PDT
First indications of impaired response from monitors. Traffic ramps dramatically.
12:30 pm PDT
Attack initially targets IP addresses of A record. Switch to Route53 CNAME as cutout eliminates traffic.
6:24 pm PDT
Attack resumes (targeting CNAME this time). Traffic ramps dramatically.
1:00 am PDT
Revised configuration in place. The arms race begins …
7:17 pm PDT
Peak capacity deployed:
-17 c3.8xlarge HA proxies
-34 m3.large web servers
Bad guys run out of gas … traffic plateaus. 1-3 second response times.

Per-instance metric
First attack:
IP specific
Second attack:
arms race
Sigh of relief …

Customer CIO
“Team -I have been sitting here in my hotel room thinking about what this team has been able to accomplish over the past 2 days and it has been amazing. Not really my style to think we are out of the woods yet...but the level of effort and coordination has been world class.
To the CrownPeak/AWS team... Thank you for all of your efforts to assist our organization. You should know that it has been greatly appreciated at all levels.”

Please give us your feedback on this session.
Complete session evaluations and earn re:Invent swag.
http://bit.ly/awsevals

WordPress is an open-source blogging tool and content management system (CMS) that can power anything from personal blogs to high traffic websites. This session covers best practices for deploying scalable Wordpress-powered websites on AWS. Starting from one-click single-instance installations from the AWS Marketplace, we move on to Wordpress implementation details that help you make the most of AWS elasticity. We provide a blueprint architecture for high availability (Elastic Load Balancing, Auto Scaling, Amazon RDS multi-AZ). You learn how to use Amazon S3 to create a stateless web tier, how to improve performance with Amazon ElastiCache and Amazon CloudFront, how to manage your application lifecycle with AWS Elastic Beanstalk, and more.

SEC303 Automating Security in cloud Workloads with DevSecOps

Amazon Web Services

This session is designed to teach security engineers, developers, solutions architects, and other technical security practitioners how to use a DevSecOps approach to design and build robust security controls at cloud-scale. This session walks through the design considerations of operating high-assurance workloads on top of the AWS platform and provides examples of how to automate configuration management and generate audit evidence for your own workloads. We’ll discuss practical examples using real code for automating security tasks, then dive deeper to map the configurations against various industry frameworks. This advanced session showcases how continuous integration and deployment pipelines can accelerate the speed of security teams and improve collaboration with software development teams.

(SEC306) Defending Against DDoS Attacks

Amazon Web Services

"In this session, we will address the current threat landscape, present DDoS attacks that we have seen on AWS, and discuss the methods and technologies we use to protect AWS services. You will leave this session with a better understanding of: DDoS attacks on AWS as well as the actual threats and volumes that we typically see. What AWS does to protect our services from these attacks. How this all relates to the AWS Shared Responsibility Model."

(ARC401) Cloud First: New Architecture for New Infrastructure

Amazon Web Services

What do companies with internal platforms have to change to succeed in the cloud? The five pillars at the heart of IT solutions in the cloud are automation, fault tolerance, horizontal scalability, security, and cost-effectiveness. This talk discusses tools that facilitate the development and automate the deployment of secure, highly available microservices. The tools were developed using AWS CloudFormation, AWS SDKs, AWS CLI, Amazon RDS, and various open-source software such as Docker. The talk provides concrete examples of how these tools can help developers and architects move from beginning/intermediate AWS practitioners to cloud deployment experts.

(SEC311) Architecting for End-to-End Security in the Enterprise | AWS re:Inve...

Amazon Web Services

This session tells the story of how security-minded enterprises provide end-to-end protection of their sensitive data in AWS. Learn about the enterprise security architecture design decisions made by Fortune 500 organizations during actual sensitive workload deployments, as told by the AWS security solution architects and professional service security, risk, and compliance team members who lived them. In this technical walkthrough, we share lessons learned from the development of enterprise security strategy, security use-case development, end-to-end security architecture and service composition, security configuration decisions, and the creation of AWS security operations playbooks to support the architecture.

AWS APAC Webinar Week - AWS MySQL Relational Database Services Best Practices...

Amazon Web Services

Amazon RDS makes it easy to set up, operate, and scale, relational databases in the cloud. Amazon RDS for MySQL supports applications that require up to tens of thousands of IOPS, and allows you to scale on demand without administrative complexity. In this webinar, we will discuss best practices for getting the most out of Amazon RDS for MySQL, as well as techniques for migrating data to and from the service.

(DVO401) Deep Dive into Blue/Green Deployments on AWS

Amazon Web Services

Learn how the Blue/Green Deployment methodology combined with AWS tools and services can help reduce the risks associated with software deployment. We will illustrate common patterns and highlight ways deployment risks are mitigated by each pattern. Topics will include how services like AWS CloudFormation, AWS Elastic Beanstalk, Amazon EC2 Container Service, Amazon Route53, Auto Scaling and Elastic Load Balancing can help automate deployment. We will also address how to effectively manage deployments in the context of data model and schema changes. Learn how you can adopt blue/green for your software release processes in a cost-effective and low-risk way.

Running Microservices on AWS Elastic Beanstalk

Amazon Web Services

Elastic Load Balancing automatically distributes incoming application traffic across multiple Amazon EC2 instances for fault tolerance and load distribution. In this session, we go into detail about Elastic Load Balancing's configuration and day-to-day management, as well as its use in conjunction with Auto Scaling. We explain how to make decisions about the service and share best practices and useful tips for success.

Deep Dive on Microservices and Amazon ECS

Amazon Web Services

Microservices is a software architectural method where you decompose complex applications into smaller, independent services. Containers are great for running small decoupled services, but how do you coordinate running microservices in production at scale and what AWS services do you use? In this session, we will explore the reasoning and concepts behind microservices and how containers simplify building microservices based applications. We will also demonstrate how you can easily launch microservices on Amazon EC2 Container Service and how you can use ELB and Route 53 to easily do service discovery between microservices.

AWS re:Invent 2016: Amazon CloudFront Flash Talks: Best Practices on Configur...

Amazon Web Services

Enterprise summit – architecting microservices on aws final v2

Amazon Web Services

To tackle complexity and change, AWS customers are increasingly evolving their architectures from monoliths towards microservices, and benefiting from increased agility, simplified scalability, resiliency, and faster deployments. However, microservices also introduce new technical challenges. In this session, we'll provide an introduction and overview of the benefits and challenges of micrososervices, and share best practices for architecting and deploying microservices on AWS.

AWS August Webinar Series - DDoS Resiliency

Amazon Web Services

Distributed Denial of Service (DDoS) attackers use a variety of techniques to consume network or other resources, interrupting access for legitimate users Customers can adopt practices to reduce the impact of these attacks, including minimizing the attack surface area, safeguarding exposed resources and creating a plan for when attacks occur. This webinar will outline how to use AWS services like Elastic Load Balancing (ELB), Auto Scaling, Amazon CloudFront and Amazon Route53 to improve resiliency when attacks occur. Learning Objectives: • Learn techniques that can help maintain availability in the face of DDoS attacks • Understand how AWS services can work together to increase resiliency Who Should Attend: • Systems Architects, Network Engineers, Web Developers

SEC304 Advanced Techniques for DDoS Mitigation and Web Application Defense

Amazon Web Services

Security professionals and full-stack engineers will learn how to defend against distributed denial of service (DDoS) attacks and web application exploits by using automation to monitor activity, configure rate limiting, and deploy network filtering rules. This session will show you how to use Lambda functions to automate event response and integrate with your security operations tools. You will become an expert in advanced techniques to help you protect and monitor your AWS networks and resources using services such as Amazon Virtual Private Cloud, Amazon Web Application Firewall, Amazon Shield, and more. You will also learn how to monitor and gain deep visibility into your AWS environment by using highly-scaled solutions such as AWS CloudTrail and AWS CloudWatch.

AWS CloudFormation under the Hood (DMG303) | AWS re:Invent 2013

Amazon Web Services

You already know that AWS CloudFormation is a powerful tool for provisioning and managing your AWS infrastructure, but did you know that it can also provision and manage resources outside of AWS? Did you know that CloudFormation can fully bootstrap your EC2 instances, securely download data from S3, and even supports Mustache templates? In this session you will go on a deep dive, touring of some of CloudFormation's most advanced features with a member of the team that built the service. Explore custom resources, cfn-init, S3 authentication, and Mustache templates in a series of technical demos with code samples available for download afterwards.

Build A Website on AWS for Your First 10 Million Users

Amazon Web Services

Join this workshop to understand the core concepts of “Cloud Computing” and how businesses around the world are running the infrastructure that supports their websites to lower costs, improve time-to-market, and enable rapid scalability matching resource to demands of users. Whether you are an enterprise looking for IT innovation, agility and resiliency or small and medium business who wants to accelerate growth without a big upfront investment in cash or time for technology, the AWS Cloud provides a complete set of services at zero upfront costs which are available with a few clicks and within minutes.

(SEC202) Best Practices for Securely Leveraging the Cloud

Amazon Web Services

Cloud adoption is driving digital business growth and enabling companies to shift to processes and practices that make innovation continual. As with any paradigm shift, cloud computing requires different rules and a different way of thinking. This presentation will highlight best practices to build and secure scalable systems in the cloud and capitalize on the cloud with confidence and clarity. In this session we will cover: Key market drivers and advantages for leveraging cloud architectures. Foundational design principles to guide strategy for securely leveraging the cloud. The “Defense in Depth” approach to building secure services in the cloud, whether it’s private, public, or hybrid. Real-world customer insights from organizations who have successfully adopted the ""Defense in Depth"" approach. Session sponsored by Sumo Logic.

AWS Elastic Beanstalk under the Hood (DMG301) | AWS re:Invent 2013

Amazon Web Services

AWS Elastic Beanstalk provides a number of simple, flexible interfaces for developing and deploying your applications. In this session, learn how ThoughtWorks leverage the Elastic Beanstalk API to continuously deliver their applications with smoke tests and blue-green deployments. Also learn how to deploy your apps with Git and eb, a powerful CLI that allows developers to create, configure, and manage Elastic Beanstalk applications and environments from the command line.

(SEC305) How to Become an IAM Policy Ninja in 60 Minutes or Less

Amazon Web Services

Are you interested in learning how to control access to your AWS resources? Have you ever wondered how to best scope down permissions to achieve least privilege permissions access control? If your answer to these questions is "yes," this session is for you. We will take an in-depth look at the AWS Identity and Access Management (IAM) policy language. We will start with the basics of the policy language and how to create and attach policies to IAM users, groups, and roles. As we dive deeper, we will explore policy variables, conditions, and other tools to help you author least privilege policies. Throughout the session, we will cover some common use cases, such as granting a user secure access to an Amazon S3 bucket or locking down access to Amazon EC2 instances. The demonstrations will use tools such as the policy editor and policy simulator to debug policies.

Amazon EC2:Masterclass

Amazon Web Services

SRV302 Deep Dive on Serverless Application Development

Amazon Web Services

AWS Lambda and Amazon API Gateway have changed how developers build and run their applications or services. But what are the best practices for tasks such as deployment, monitoring, and debugging in a serverless world? In this session, we’ll dive into best practices that serverless developers can use for application lifecycle management, CI/CD, monitoring, and diagnostics. We’ll talk about how you can build CI/CD pipelines that automatically build, test, and deploy your serverless applications using AWS CodePipeline, AWS CodeBuild, and AWS CloudFormation. We’ll also cover the built-in capabilities of Lambda and API Gateway for creating multiple versions, stages, and environments of your functions and APIs. Finally, we’ll cover monitoring and diagnostics of your Lambda functions with Amazon CloudWatch and AWS X-Ray.

Running Microservices and Docker on AWS Elastic Beanstalk - August 2016 Month...

Amazon Web Services

In this session, we introduce you to a solution for easily running a Docker-powered microservices architecture on AWS using Elastic Beanstalk. We will also cover the fundamentals of Elastic Beanstalk and how it benefits developers looking for a quick and scalable way to get their applications running on AWS with no infrastructure work required. Building a microservices architecture using Docker can require a lot of work, from launching and operating the underlying infrastructure to installing and maintaining cluster management software. With AWS Elastic Beanstalk’s multicontainer support feature, many of these tasks are simplified and abstracted away so you can focus on your application code. AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker." Learning Objectives: • Learn the basics of AWS Elastic Beanstalk • Understand how to use Elastic Beanstalk to run containerized applications • Learn how to use Elastic Beanstalk to start architecting microservices-based applications

網路安全自動化 - 縮短應用維安的作業時間

Amazon Web Services

隨著攻擊者日趨複雜精密化，網路應用開發者必須常態性更新其安全配置。靜態防火牆規則早已不敷需求。開發者需要能部署自動化安全性的方法，以從應用程式行為學習並辨別有害流量模式，進而偵測出網際網路上的有害機器人程式或有害動作者。本專題演講將以真實世界的客戶使用案例為例，示範如何運用機器學習和 AWS WAF（網路應用防火牆）搭配自動化事件回應和機器學習，來自動辨別出有害動作者。另外也將介紹主題教學和程式碼範例，示範客戶可以如何在執行作業期間分析流量模式並部署新的 AWS WAF 規則。

Compliance in the Cloud Using Security by Design

Amazon Web Services

Up-front design of your AWS account can be done in a way that creates a reliably secure and controlled environment no matter how the AWS resources are used. This session will focus on "Secure by Design" principles and show how an AWS environment can be configured to provide a reliable operational security control capability to meet the compliance needs across multiple industry verticals (e.g. HIPAA, FISMA, PCI, etc.). This will include operational reporting through the use of AWS services (e.g. Config/Config Rules, CloudTrail, Inspector, etc.) as well as partner integration capabilities with partner solutions such as Splunk and Allgress for real-time governance, risk, and compliance reporting. Key takeaways from this session include: learning AWS Security best practices and automation capabilities for securing your environment, Automation accelerators for configuration, compliance, and audit reporting using CloudFormation, Config/Config Rules, CloudTrail, Inspector, etc., and ISV integration for real-time notification and reporting for security, compliance, and auditing in the cloud.

Creating Your Virtual Data Center: VPC Fundamentals and Connectivity Options

Amazon Web Services

In this session, we will walk through the fundamentals of Amazon Virtual Private Cloud (VPC). First, we will cover build-out and design fundamentals for VPC, including picking your IP space, subnetting, routing, security, NAT, and much more. We will then transition into different approaches and use cases for optionally connecting your VPC to your physical data center with VPN or AWS Direct Connect. This mid-level architecture discussion is aimed at architects, network administrators, and technology decision-makers interested in understanding the building blocks AWS makes available with VPC and how you can connect this with your offices and current data center footprint.

AWS re:Invent 2016: Operations Automation and Infrastructure Management with ...

Amazon Web Services

At Capital One, we are using Docker and container technologies to advance microservices adoption, increase efficiencies of cloud resources, and decouple the application layer from the underlying infrastructure. Capital One is a federated organization with a “you build it, you own it” culture that provides autonomy and speed for delivery teams. Each federated team runs and operates their container management stack. In order for the federated teams to accelerate their cloud and container-based apps adoption, we created self-service automation tools for creation and operations management of container management stack. In this session, we explore our push-button automation tool that includes capabilities such as the creation and management of Amazon ECS clusters, an Application Load Balancer for dynamic and context-based routing and provides a user interface via a Jenkins Job or a AWS Lambda function. Our tooling also includes a home-grown dynamic service discovery and routing for applications requiring two-way mutual SSL authentication. We talk through how Capital One regularly updates AMIs with the latest patches and software versions using an automated solution that leverages AWS Lambda to rehydrate the Amazon ECS compute cluster with the latest AMI without causing any downtime. We also discuss how we created a sophisticated canary deployment automation using AWS Lambda and application services, where users can specify how to migrate to a new version of containerized apps and manage the deployment. AWS empowers enterprise Docker deployment with Amazon ECS and an ecosystem of cloud services and serverless architectures, making containerization in mission-critical environments easier than ever.

(APP307) Leverage the Cloud with a Blue/Green Deployment Architecture | AWS r...

Amazon Web Services

Minimizing customer impact is a key feature in successfully rolling out frequent code updates. Learn how to leverage the AWS cloud so you can minimize bug impacts, test your services in isolation with canary data, and easily roll back changes. Learn to love deployments, not fear them, with a blue/green architecture model. This talk walks you through the reasons it works for us and how we set up our AWS infrastructure, including package repositories, Elastic Load Balancing load balancers, Auto Scaling groups, internal tools, and more to help orchestrate the process. Learn to view thousands of servers as resources at your command to help improve your engineering environment, take bigger risks, and not spend weekends firefighting bad deployments.

DevOps Tooling - Pop-up Loft TLV 2017

Amazon Web Services

Learn how to use AWS services to automate manual tasks, help teams manage complex environments at scale, and keep engineers in control of the high velocity that is enabled by DevOps. In this session, we will provide an overview of the various AWS development and deployment services and when best to use them. We will show how to build a fully automated infrastructure and software delivery pipeline with AWS CodePipeline, AWS CodeBuild, AWS CloudFormation and AWS CodeDeploy. At the end of the session, a GitHub repository of AWS CloudFormation templates will be provided so you can quickly deploy the same pipeline to your AWS account(s).

DDoS Resiliency with Amazon Web Services (SEC305) | AWS re:Invent 2013

Amazon Web Services

It's a rough world out there, filled with mega bot nets that threaten the availability of your web service. How do you keep your service running in the event of a 10,000x increase in traffic? Maximizing service availability under DDoS conditions requires thoughtful service architecture, and at times, fast acting operations teams. This presentation covers best practices for DDoS-resilient services.

AWS re:Invent 2016: Mitigating DDoS Attacks on AWS: Five Vectors and Four Use...

Amazon Web Services

Distributed denial of service (DDoS) attack mitigation has traditionally been a challenge for those hosting on fixed infrastructure. In the cloud, users can build applications on elastic infrastructure that is capable of mitigating and absorbing DDoS attacks. What once required overprovisioning, additional infrastructure, or third-party services is now an inherent capability of many cloud-based applications. This session explains common DDoS attack vectors and how AWS customers with different use cases are addressing these challenges. As part of the session, we show you how to build applications that are resilient to DDoS and demonstrate how they work in practice.

What's hot

(CMP401) Elastic Load Balancing Deep Dive and Best Practices

Amazon Web Services

Deep Dive on Microservices and Amazon ECS

Amazon Web Services

AWS re:Invent 2016: Amazon CloudFront Flash Talks: Best Practices on Configur...

Amazon Web Services

Enterprise summit – architecting microservices on aws final v2

Amazon Web Services

AWS August Webinar Series - DDoS Resiliency

Amazon Web Services

SEC304 Advanced Techniques for DDoS Mitigation and Web Application Defense

Amazon Web Services

AWS CloudFormation under the Hood (DMG303) | AWS re:Invent 2013

Amazon Web Services

Build A Website on AWS for Your First 10 Million Users

Amazon Web Services

(SEC202) Best Practices for Securely Leveraging the Cloud

Amazon Web Services

AWS Elastic Beanstalk under the Hood (DMG301) | AWS re:Invent 2013

Amazon Web Services

(SEC305) How to Become an IAM Policy Ninja in 60 Minutes or Less

Amazon Web Services

Amazon EC2:Masterclass

Amazon Web Services

SRV302 Deep Dive on Serverless Application Development

Amazon Web Services

Running Microservices and Docker on AWS Elastic Beanstalk - August 2016 Month...

Amazon Web Services

網路安全自動化 - 縮短應用維安的作業時間

Amazon Web Services

Compliance in the Cloud Using Security by Design

Amazon Web Services

Creating Your Virtual Data Center: VPC Fundamentals and Connectivity Options

Amazon Web Services

AWS re:Invent 2016: Operations Automation and Infrastructure Management with ...

Amazon Web Services

(APP307) Leverage the Cloud with a Blue/Green Deployment Architecture | AWS r...

Amazon Web Services

DevOps Tooling - Pop-up Loft TLV 2017

Amazon Web Services

What's hot (20)

(CMP401) Elastic Load Balancing Deep Dive and Best Practices

Deep Dive on Microservices and Amazon ECS

AWS re:Invent 2016: Amazon CloudFront Flash Talks: Best Practices on Configur...

Enterprise summit – architecting microservices on aws final v2

AWS August Webinar Series - DDoS Resiliency

SEC304 Advanced Techniques for DDoS Mitigation and Web Application Defense

AWS CloudFormation under the Hood (DMG303) | AWS re:Invent 2013

Build A Website on AWS for Your First 10 Million Users

(SEC202) Best Practices for Securely Leveraging the Cloud

AWS Elastic Beanstalk under the Hood (DMG301) | AWS re:Invent 2013

(SEC305) How to Become an IAM Policy Ninja in 60 Minutes or Less

Amazon EC2:Masterclass

SRV302 Deep Dive on Serverless Application Development

Running Microservices and Docker on AWS Elastic Beanstalk - August 2016 Month...

網路安全自動化 - 縮短應用維安的作業時間

Compliance in the Cloud Using Security by Design

Creating Your Virtual Data Center: VPC Fundamentals and Connectivity Options

AWS re:Invent 2016: Operations Automation and Infrastructure Management with ...

(APP307) Leverage the Cloud with a Blue/Green Deployment Architecture | AWS r...

DevOps Tooling - Pop-up Loft TLV 2017

Viewers also liked

DDoS Resiliency with Amazon Web Services (SEC305) | AWS re:Invent 2013

Amazon Web Services

AWS re:Invent 2016: Mitigating DDoS Attacks on AWS: Five Vectors and Four Use...

Amazon Web Services

Day 4 - Securing Your Business on the AWS Cloud

Amazon Web Services

Helping to protect the security of our customers content is of utmost importance to AWS, as is maintaining customer trust and confidence. Under the AWS shared responsibility model, AWS provides a secure global infrastructure, including compute, storage, networking and database services, as well as a range of high level services. AWS provides a range of security services and features that AWS customers can use to secure their content and meet their own specific business requirements for security. This presentation focuses on how you can make use of AWS security features to meet your own organization's security and compliance objectives. Reasons to attend: - Learn about the AWS approach to security and how responsibilities are shared between AWS and our customers. - Learn how to build your own secure virtual private cloud and integrate it with your existing solutions. - Learn how to use AWS services and scale to assist in mitigation against attacks. - Learn best practices for securing your AWS account, your content and your applications.

AWS Service Catalog

Amazon Web Services

Running an IT department in a large organization is challenging. You need to provide users with access to the latest technology, while maintaining corporate standards and providing oversight to avoid runaway spending. In this session, you’ll hear how Lockheed Martin has used AWS Service Catalog to ensure compliance across the organization. You will also learn how 2nd Watch, an APN Premier Consulting Partner, leverages AWS Service Catalog to manage resources for customers and are now able to deploy quickly and standardize their workload management. We’ll also demo advanced functionality and how you can get started.

(DEV310) CI/CD of Services with Mocking & Resiliency Testing Using AWS

Amazon Web Services

"At Intuit, we are migrating many services to AWS. We have developed a tool called Slingshot to automate our entire onboarding process. It sets up our AWS account; generates the Jenkins flow pipeline; and then automatically builds, tests, deploys, and promotes our applications/services in the software development pipeline. The deployment automation provides zero downtime with fast cutover and quick rollbacks. Additionally, one of the challenges of implementing CI/CD with service-oriented architectures (SOA) is reliable execution of test automation. Because every service evolves on its own schedule, having a single integrated test environment is virtually impossible. One way to handle this complexity is dependency mocking. We use the Wiremock tool, which allows users to stub for service dependencies and do resiliency testing that was hard to automate before. "

DDoS Resiliency

Amazon Web Services

A REVIEW ON DDOS PREVENTION AND DETECTION METHODOLOGY

ijasa

Denial of Service (DoS) or Distributed-Denial of Service (DDoS) is major threat to network security. Network is collection of nodes that interconnect with each other for exchange the Information. This information is required for that node is kept confidentially. Attacker in network computer captures this information that is confidential and misuse the network. Hence security is one of the major issues. There are one or many attacks in network. One of the major threats to internet service is DDoS (Distributed denial of services) attack. DDoS attack is a malicious attempt to suspending or interrupting services to target node. DDoS or DoS is an attempt to make network resource or the machine is unavailable to its intended user. Many ideas are developed for avoiding the DDoS or DoS. DDoS happen in two ways naturally or it may due to some botnets .Various schemes are developed defense against to this attack. Main idea of this paper is present basis of DDoS attack. DDoS attack types, DDoS attack components, survey on different mechanism to prevent DDoS

Check Point Software Technologies: Secure Your AWS Workloads

Amazon Web Services

Hosting workloads on AWS provides organizations with agility, speed, efficiency, and reduced costs. Check Point vSEC further enhances this experience by delivering advanced, multi-layered threat prevention security for your AWS workloads, protecting assets and enabling secure connectivity from enterprise networks to your AWS resources. Register for our upcoming webinar to learn how Check Point vSEC on AWS provided customers with an advanced threat prevention solution to enable secure application delivery. Learn how to migrate your applications and workloads to AWS with vSEC’s comprehensive security solution tailored to help protect your cloud environment. Join us to learn: • How Check Point vSEC enabled customers to confidently migrate from an on-premises infrastructure to AWS • How to prevent network attacks and data breaches when hosting workloads in a cloud-based environment • How Courtagen Life Sciences secured their cloud environment to maintain compliance, reduce IT expenses and leverage the full capabilities of the AWS Cloud Who should attend: IT Admins, Security Admins, Cloud Admins, Business Decision Makers, Compliance & governance officers, Line of Business leaders, DevOps engineers & architects

NetScout nGeniusONE overview

BAKOTECH

Return on Security InvestmentConferencias FIST

AWS April Webianr Series - How Willbros Builds Securely in AWS with Trend Micro

Amazon Web Services

Willbros, a leading infrastructure contractor serving the oil and gas industry, leverages Amazon Web Services (AWS) and Trend Micro Deep Security to quickly design and deploy agile, secure cloud solutions to protect their vital data. Moving to AWS allows organizations to leave their infrastructure behind and start fresh – architecting for flexibility and scalability. However, bottlenecks are created when traditional on-premises security approaches and tools are used. Learn how Willbros unleashed innovation in the energy industry by taking a greenfield approach to security in AWS. Attend this practical webinar by AWS, Trend Micro and Willbros to learn how you can design a flexible, agile architecture that meets compliance requirements and protects your most valuable asset – your data. Jason Cradit from Willbros will share their experience on how they achieved building robust and secure pipeline management systems in the cloud. Topics will include: • Identify and select the AWS services and configurations required to build secure applications in the AWS Cloud • Identify and select the Trend Micro services that complement AWS' broad set of security features • Architect a secure application using a combination of AWS services, Trend Micro services, and configurations • How to protect workloads from attacks, without hampering performance Who Should Attend: • Solutions Architects, IT Operations Professionals, Dev-Ops Engineers, and System Integrators

DDoS Open Threat Signaling (DOTS) Working Group Presentation on draft-ietf-do...

ShortestPathFirst

The ROI on Intrusion Prevention: Protecting Both Your Network & Investment

IBM Security

View on-demand: http://event.on24.com/wcc/r/1125108/92F1EBE9F405FFB683B79FD046CAC8B7 Forrester Research recently conducted a Total Economic Impact (TEI) study, commissioned by IBM, to examine the potential return on investment (ROI) that organizations may achieve by deploying IBM Security Network Protection (XGS), a next-generation intrusion prevention system (IPS). The study determined that by implementing IBM Security Network Protection (XGS), organizations realize an increase in network performance and availability, while also enjoying reduced costs and security risks. Join us at this complimentary webinar to hear directly from our guest, Forrester TEI consultant Ben Harris, about the results of IBM Security Network Protection (XGS) study.

How to launch and defend against a DDoSjgrahamc

BGP Flowspec (RFC5575) Case study and Discussion

APNIC

Viewers also liked (15)

DDoS Resiliency with Amazon Web Services (SEC305) | AWS re:Invent 2013

AWS re:Invent 2016: Mitigating DDoS Attacks on AWS: Five Vectors and Four Use...

Day 4 - Securing Your Business on the AWS Cloud

AWS Service Catalog

(DEV310) CI/CD of Services with Mocking & Resiliency Testing Using AWS

DDoS Resiliency

A REVIEW ON DDOS PREVENTION AND DETECTION METHODOLOGY

Check Point Software Technologies: Secure Your AWS Workloads

NetScout nGeniusONE overview

Return on Security Investment

AWS April Webianr Series - How Willbros Builds Securely in AWS with Trend Micro

DDoS Open Threat Signaling (DOTS) Working Group Presentation on draft-ietf-do...

The ROI on Intrusion Prevention: Protecting Both Your Network & Investment

How to launch and defend against a DDoS

BGP Flowspec (RFC5575) Case study and Discussion

Similar to (SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014

redGuardian DP100 large scale DDoS mitigation solution

Redge Technologies

DNS DDoS Attack and Risk

Sukbum Hong

Network Intelligence for a secured Network (2014-03-12)

Andreas Taudte

KHNOG 3: DDoS Attack Prevention

APNIC

PLNOG15 :DDOS Attacks & Collateral Damage. Can we avoid it? Asraf Ali

Marta Pacyga

PLNOG15 :DDOS Attacks & Collateral Damage. Can we avoid it? Asraf Ali

PROIDEA

Application-engaged Dynamic Orchestration of Optical Network Resources

Tal Lavian Ph.D.

Networking @Scale'19 - Getting a Taste of Your Network - Sergey Fedorov

Sergey Fedorov

DEF CON 27 - GERALD DOUSSOT AND ROGER MEYER - state of dns rebinding attack ...

Felipe Prado

Atelier Technique CISCO ACSS 2018

African Cyber Security Summit

Nanog66 vicente de luca fast netmon

Pavel Odintsov

Ntp in Amplification Inferno

Sriram Krishnan

"Giving the bad guys no sleep"

Christiaan Beek

Cybersecurity breakfast tour 2013 (1)

Infradata

Meetup Microservices Commandments

Bill Zajac

[Webinar] DDoS Pentester Reveals: How Hackers Find Your Website’s Weak Points...

Imperva Incapsula

DDoS attacks are bigger and more sophisticated than ever before. Odds are your business is going to be attacked – and without an effective mitigation strategy, you don't stand a chance. In this webinar Andrew Shoemaker a DDoS simulation expert from NimbusDDOS gives you a rare glimpse into how hackers find the weak points in your defenses and exploit them to level devastating DDoS attacks. You'll see real world examples of the tactics and methods used to create tailored DDoS attacks that can bring down a targeted network or application, and learn how best to defend them.

Weapons of Mass Disruption by Roman Lara for OWASP San Antonio Chapter meetup

michaelxin2015

We now live in a world where individuals or groups of individuals hold the same destructive power that only nation states once held. For as little as a couple of dollars an hour, fortune 500 companies and even nation states have been wiped off the Internet. The emergence of professional DDoS services is changing the threat landscape of the Internet once again. We'll take a look at DDoS tools and services and what we can do to combat them.

Hunting for APT in network logs workshop presentation

OlehLevytskyi1

Nonamecon 2021 presentation. Network logs are one of the most efficient sources to hunt adversaries, but building good analytics capabilities require a deep understanding of benign activity and attacker behavior. This training focuses on detecting real-case attacks, tools and scenarios by the past year. The training is highly interactive and retains a good balance between theory and a lot of hands-on exercises for the students to get used to the detection engineering methodology and prepare them to start implementing this at their organizations. Presentation topics: - Netflow Mitre Matrix view - Full packet captures vs Netflow - Zeek - Zeek packages - RDP initial comprometation - Empire Powershell and CobaltStrike or what to expect after initial loader execution. - Empire powershell initial connection - Beaconing. RITA - Scanning detection - Internal enumeration detection - Lateral movement techniques widely used - Kerberos attacks - PSExec and fileless ways of delivering payloads in the network - Zerologon detection - Data exfiltration - Data exfiltration over C2 channel - Data exfiltration using time size limits (data chunks) - DNS exfiltration - Detecting ransomware in your network - Real incident investigation Authors: Oleh Levytskyi (https://twitter.com/LeOleg97) Bogdan Vennyk (https://twitter.com/bogdanvennyk)

DDoS.ppt

EllenSutiyem

PLNOG 17 - Patryk Wojtachnio - DDoS mitygacja oraz ochrona sieci w środowisku...

PROIDEA

Kazdy z nas w dobie obecnego Internetu i Pokemon Go ma swoja stronę internetowa, forum czy tez prowadzi sklep e-commerce. Z punktu widzenia klienta, rozwiązanie jest proste. Loguje się na swoje konto, uruchamia instalator CMS i zaczyna prowadzić swoje usługi bądź tez dostarczać treści. Będzie to pierwsze case study skutecznej obrony przed potężnymi atakami wolumetrycznymi mające na celu wyłącznie usług HTTP bądź HTTPS za pomocą wysyłania dużej ilości pakietów SYN na serwer który hostuje zainfekowana stronę www. Celem prezentacji jest pokazanie mechanizmu obrony przed szeroko znanego problemu jakim jestDDoS, metody mitygacji, blackholing oraz przykładowe scenariusze w raz z konfiguracja w oparciu o dystrybucje CentOS oraz modułu HAProxy.

Similar to (SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014 (20)

redGuardian DP100 large scale DDoS mitigation solution

DNS DDoS Attack and Risk

Network Intelligence for a secured Network (2014-03-12)

KHNOG 3: DDoS Attack Prevention

PLNOG15 :DDOS Attacks & Collateral Damage. Can we avoid it? Asraf Ali

Application-engaged Dynamic Orchestration of Optical Network Resources

Networking @Scale'19 - Getting a Taste of Your Network - Sergey Fedorov

DEF CON 27 - GERALD DOUSSOT AND ROGER MEYER - state of dns rebinding attack ...

Atelier Technique CISCO ACSS 2018

Nanog66 vicente de luca fast netmon

Ntp in Amplification Inferno

"Giving the bad guys no sleep"

Cybersecurity breakfast tour 2013 (1)

Meetup Microservices Commandments

[Webinar] DDoS Pentester Reveals: How Hackers Find Your Website’s Weak Points...

Weapons of Mass Disruption by Roman Lara for OWASP San Antonio Chapter meetup

Hunting for APT in network logs workshop presentation

DDoS.ppt

PLNOG 17 - Patryk Wojtachnio - DDoS mitygacja oraz ochrona sieci w środowisku...

More from Amazon Web Services

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...

Amazon Web Services

Il Forecasting è un processo importante per tantissime aziende e viene utilizzato in vari ambiti per cercare di prevedere in modo accurato la crescita e distribuzione di un prodotto, l’utilizzo delle risorse necessarie nelle linee produttive, presentazioni finanziarie e tanto altro. Amazon utilizza delle tecniche avanzate di forecasting, in parte questi servizi sono stati messi a disposizione di tutti i clienti AWS. In questa sessione illustreremo come pre-processare i dati che contengono una componente temporale e successivamente utilizzare un algoritmo che a partire dal tipo di dato analizzato produce un forecasting accurato.

Big Data per le Startup: come creare applicazioni Big Data in modalità Server...

Amazon Web Services

La varietà e la quantità di dati che si crea ogni giorno accelera sempre più velocemente e rappresenta una opportunità irripetibile per innovare e creare nuove startup. Tuttavia gestire grandi quantità di dati può apparire complesso: creare cluster Big Data su larga scala sembra essere un investimento accessibile solo ad aziende consolidate. Ma l’elasticità del Cloud e, in particolare, i servizi Serverless ci permettono di rompere questi limiti. Vediamo quindi come è possibile sviluppare applicazioni Big Data rapidamente, senza preoccuparci dell’infrastruttura, ma dedicando tutte le risorse allo sviluppo delle nostre le nostre idee per creare prodotti innovativi.

Esegui pod serverless con Amazon EKS e AWS Fargate

Amazon Web Services

Ora puoi utilizzare Amazon Elastic Kubernetes Service (EKS) per eseguire pod Kubernetes su AWS Fargate, il motore di elaborazione serverless creato per container su AWS. Questo rende più semplice che mai costruire ed eseguire le tue applicazioni Kubernetes nel cloud AWS.In questa sessione presenteremo le caratteristiche principali del servizio e come distribuire la tua applicazione in pochi passaggi

Costruire Applicazioni Moderne con AWS

Amazon Web Services

Vent'anni fa Amazon ha attraversato una trasformazione radicale con l'obiettivo di aumentare il ritmo dell'innovazione. In questo periodo abbiamo imparato come cambiare il nostro approccio allo sviluppo delle applicazioni ci ha permesso di aumentare notevolmente l'agilità, la velocità di rilascio e, in definitiva, ci ha consentito di creare applicazioni più affidabili e scalabili. In questa sessione illustreremo come definiamo le applicazioni moderne e come la creazione di app moderne influisce non solo sull'architettura dell'applicazione, ma sulla struttura organizzativa, sulle pipeline di rilascio dello sviluppo e persino sul modello operativo. Descriveremo anche approcci comuni alla modernizzazione, compreso l'approccio utilizzato dalla stessa Amazon.com.

Come spendere fino al 90% in meno con i container e le istanze spot

Amazon Web Services

L’utilizzo dei container è in continua crescita. Se correttamente disegnate, le applicazioni basate su Container sono molto spesso stateless e flessibili. I servizi AWS ECS, EKS e Kubernetes su EC2 possono sfruttare le istanze Spot, portando ad un risparmio medio del 70% rispetto alle istanze On Demand. In questa sessione scopriremo insieme quali sono le caratteristiche delle istanze Spot e come possono essere utilizzate facilmente su AWS. Impareremo inoltre come Spreaker sfrutta le istanze spot per eseguire applicazioni di diverso tipo, in produzione, ad una frazione del costo on-demand!

Open banking as a service

Amazon Web Services

In recent months, many customers have been asking us the question – how to monetise Open APIs, simplify Fintech integrations and accelerate adoption of various Open Banking business models. Therefore, AWS and FinConecta would like to invite you to Open Finance marketplace presentation on October 20th. Event Agenda : Open banking so far (short recap) • PSD2, OB UK, OB Australia, OB LATAM, OB Israel Intro to Open Finance marketplace • Scope • Features • Tech overview and Demo The role of the Cloud The Future of APIs • Complying with regulation • Monetizing data / APIs • Business models • Time to market One platform for all: a Strategic approach Q&A

Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...

Amazon Web Services

Per creare valore e costruire una propria offerta differenziante e riconoscibile, le startup di successo sanno come combinare tecnologie consolidate con componenti innovativi creati ad hoc. AWS fornisce servizi pronti all'utilizzo e, allo stesso tempo, permette di personalizzare e creare gli elementi differenzianti della propria offerta. Concentrandoci sulle tecnologie di Machine Learning, vedremo come selezionare i servizi di intelligenza artificiale offerti da AWS e, anche attraverso una demo, come costruire modelli di Machine Learning personalizzati utilizzando SageMaker Studio.

OpsWorks Configuration Management: automatizza la gestione e i deployment del...

Amazon Web Services

Con l'approccio tradizionale al mondo IT per molti anni è stato difficile implementare tecniche di DevOps, che finora spesso hanno previsto attività manuali portando di tanto in tanto a dei downtime degli applicativi interrompendo l'operatività dell'utente. Con l'avvento del cloud, le tecniche di DevOps sono ormai a portata di tutti a basso costo per qualsiasi genere di workload, garantendo maggiore affidabilità del sistema e risultando in dei significativi miglioramenti della business continuity. AWS mette a disposizione AWS OpsWork come strumento di Configuration Management che mira ad automatizzare e semplificare la gestione e i deployment delle istanze EC2 per mezzo di workload Chef e Puppet. Scopri come sfruttare AWS OpsWork a garanzia e affidabilità del tuo applicativo installato su Instanze EC2.

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Amazon Web Services

Vuoi conoscere le opzioni per eseguire Microsoft Active Directory su AWS? Quando si spostano carichi di lavoro Microsoft in AWS, è importante considerare come distribuire Microsoft Active Directory per supportare la gestione, l'autenticazione e l'autorizzazione dei criteri di gruppo. In questa sessione, discuteremo le opzioni per la distribuzione di Microsoft Active Directory su AWS, incluso AWS Directory Service per Microsoft Active Directory e la distribuzione di Active Directory su Windows su Amazon Elastic Compute Cloud (Amazon EC2). Trattiamo argomenti quali l'integrazione del tuo ambiente Microsoft Active Directory locale nel cloud e l'utilizzo di applicazioni SaaS, come Office 365, con AWS Single Sign-On.

Computer Vision con AWS

Amazon Web Services

Database Oracle e VMware Cloud on AWS i miti da sfatare

Amazon Web Services

Amazon Web Services e VMware organizzano un evento virtuale gratuito il prossimo mercoledì 14 Ottobre dalle 12:00 alle 13:00 dedicato a VMware Cloud ™ on AWS, il servizio on demand che consente di eseguire applicazioni in ambienti cloud basati su VMware vSphere® e di accedere ad una vasta gamma di servizi AWS, sfruttando a pieno le potenzialità del cloud AWS e tutelando gli investimenti VMware esistenti. Molte organizzazioni sfruttano i vantaggi del cloud migrando i propri carichi di lavoro Oracle e assicurandosi notevoli vantaggi in termini di agilità ed efficienza dei costi. La migrazione di questi carichi di lavoro, può creare complessità durante la modernizzazione e il refactoring delle applicazioni e a questo si possono aggiungere rischi di prestazione che possono essere introdotti quando si spostano le applicazioni dai data center locali.

Crea la tua prima serverless ledger-based app con QLDB e NodeJS

Amazon Web Services

Molte aziende oggi, costruiscono applicazioni con funzionalità di tipo ledger ad esempio per verificare lo storico di accrediti o addebiti nelle transazioni bancarie o ancora per tenere traccia del flusso supply chain dei propri prodotti. Alla base di queste soluzioni ci sono i database ledger che permettono di avere un log delle transazioni trasparente, immutabile e crittograficamente verificabile, ma sono strumenti complessi e onerosi da gestire. Amazon QLDB elimina la necessità di costruire sistemi personalizzati e complessi fornendo un database ledger serverless completamente gestito. In questa sessione scopriremo come realizzare un'applicazione serverless completa che utilizzi le funzionalità di QLDB.

API moderne real-time per applicazioni mobili e web

Amazon Web Services

Con l’ascesa delle architetture di microservizi e delle ricche applicazioni mobili e Web, le API sono più importanti che mai per offrire agli utenti finali una user experience eccezionale. In questa sessione impareremo come affrontare le moderne sfide di progettazione delle API con GraphQL, un linguaggio di query API open source utilizzato da Facebook, Amazon e altro e come utilizzare AWS AppSync, un servizio GraphQL serverless gestito su AWS. Approfondiremo diversi scenari, comprendendo come AppSync può aiutare a risolvere questi casi d’uso creando API moderne con funzionalità di aggiornamento dati in tempo reale e offline. Inoltre, impareremo come Sky Italia utilizza AWS AppSync per fornire aggiornamenti sportivi in tempo reale agli utenti del proprio portale web.

Database Oracle e VMware Cloud™ on AWS: i miti da sfatare

Amazon Web Services

Molte organizzazioni sfruttano i vantaggi del cloud migrando i propri carichi di lavoro Oracle e assicurandosi notevoli vantaggi in termini di agilità ed efficienza dei costi. La migrazione di questi carichi di lavoro, può creare complessità durante la modernizzazione e il refactoring delle applicazioni e a questo si possono aggiungere rischi di prestazione che possono essere introdotti quando si spostano le applicazioni dai data center locali. In queste slide, gli esperti AWS e VMware presentano semplici e pratici accorgimenti per facilitare e semplificare la migrazione dei carichi di lavoro Oracle accelerando la trasformazione verso il cloud, approfondiranno l’architettura e dimostreranno come sfruttare a pieno le potenzialità di VMware Cloud ™ on AWS.

Tools for building your MVP on AWSAmazon Web Services

How to Build a Winning Pitch DeckAmazon Web Services

Building a web application without serversAmazon Web Services

Fundraising EssentialsAmazon Web Services

AWS_HK_StartupDay_Building Interactive websites while automating for efficien...Amazon Web Services

Introduzione a Amazon Elastic Container Service

Amazon Web Services

Amazon Elastic Container Service (Amazon ECS) è un servizio di gestione dei container altamente scalabile, che semplifica la gestione dei contenitori Docker attraverso un layer di orchestrazione per il controllo del deployment e del relativo lifecycle. In questa sessione presenteremo le principali caratteristiche del servizio, le architetture di riferimento per i differenti carichi di lavoro e i semplici passi necessari per poter velocemente migrare uno o più dei tuo container.

More from Amazon Web Services (20)

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...

Big Data per le Startup: come creare applicazioni Big Data in modalità Server...

Esegui pod serverless con Amazon EKS e AWS Fargate

Costruire Applicazioni Moderne con AWS

Come spendere fino al 90% in meno con i container e le istanze spot

Open banking as a service

Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...

OpsWorks Configuration Management: automatizza la gestione e i deployment del...

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Computer Vision con AWS

Database Oracle e VMware Cloud on AWS i miti da sfatare

Crea la tua prima serverless ledger-based app con QLDB e NodeJS

API moderne real-time per applicazioni mobili e web

Database Oracle e VMware Cloud™ on AWS: i miti da sfatare

Tools for building your MVP on AWS

How to Build a Winning Pitch Deck

Building a web application without servers

Fundraising Essentials

AWS_HK_StartupDay_Building Interactive websites while automating for efficien...

Introduzione a Amazon Elastic Container Service

Recently uploaded

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

Albert Hoitingh

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

DanBrown980551

Do you want to learn how to model and simulate an electrical network from scratch in under an hour? Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)! During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook. PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides: - A fully editable and extendable library for grid component modelling; - Visualization tools to display your network; - Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses; The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well. What you will learn during the webinar: - For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills; - For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.

Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...

Ramesh Iyer

In today's fast-changing business world, Companies that adapt and embrace new ideas often need help to keep up with the competition. However, fostering a culture of innovation takes much work. It takes vision, leadership and willingness to take risks in the right proportion. Sachin Dev Duggal, co-founder of Builder.ai, has perfected the art of this balance, creating a company culture where creativity and growth are nurtured at each stage.

The Future of Platform Engineering

Jemma Hussein Allen

Assuring Contact Center Experiences for Your Customers With ThousandEyes

ThousandEyes

Knowledge engineering: from people to machines and back

Elena Simperl

FIDO Alliance Osaka Seminar: Overview.pdf

FIDO Alliance

Essentials of Automations: Optimizing FME Workflows with Parameters

Safe Software

Are you looking to streamline your workflows and boost your projects’ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, you’re in the right place. Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part “Essentials of Automation” series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects. Here’s what you’ll gain: - Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows. - Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy. - Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency. - Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity. We’ll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic. Don’t miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.

Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...

Jeffrey Haguewood

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on the notifications, alerts, and approval requests using Slack for Bonterra Impact Management. The solutions covered in this webinar can also be deployed for Microsoft Teams. Interested in deploying notification automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Paul Groth

Neuro-symbolic is not enough, we need neuro-*semantic*

Frank van Harmelen

Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”. All of this illustrated with link prediction over knowledge graphs, but the argument is general.

Designing Great Products: The Power of Design and Leadership by Chief Designe...

Product School

DevOps and Testing slides at DASA Connect

Kari Kakkonen

Transcript: Selling digital books in 2024: Insights from industry leaders - T...

BookNet Canada

The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more. Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/ Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.

Bits & Pixels using AI for Good.........

Alison B. Lowndes

From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...

Product School

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

FIDO Alliance

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

Prayukth K V

The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development. The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers: State of global ICS asset and network exposure Sectoral targets and attacks as well as the cost of ransom Global APT activity, AI usage, actor and tactic profiles, and implications Rise in volumes of AI-powered cyberattacks Major cyber events in 2024 Malware and malicious payload trends Cyberattack types and targets Vulnerability exploit attempts on CVEs Attacks on counties – USA Expansion of bot farms – how, where, and why In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East Why are attacks on smart factories rising? Cyber risk predictions Axis of attacks – Europe Systemic attacks in the Middle East Download the full report from here: https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/

GraphRAG is All You need? LLM & Knowledge Graph

Guy Korland

Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs. 1. Unifying Large Language Models and Knowledge Graphs: A Roadmap. https://arxiv.org/abs/2306.08302 2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs: https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/

AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...

Product School

Recently uploaded (20)

Encryption in Microsoft 365 - ExpertsLive Netherlands 2024

LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...

Builder.ai Founder Sachin Dev Duggal's Strategic Approach to Create an Innova...

The Future of Platform Engineering

Assuring Contact Center Experiences for Your Customers With ThousandEyes

Knowledge engineering: from people to machines and back

FIDO Alliance Osaka Seminar: Overview.pdf

Essentials of Automations: Optimizing FME Workflows with Parameters

Slack (or Teams) Automation for Bonterra Impact Management (fka Social Soluti...

To Graph or Not to Graph Knowledge Graph Architectures and LLMs

Neuro-symbolic is not enough, we need neuro-*semantic*

Designing Great Products: The Power of Design and Leadership by Chief Designe...

DevOps and Testing slides at DASA Connect

Transcript: Selling digital books in 2024: Insights from industry leaders - T...

Bits & Pixels using AI for Good.........

From Daily Decisions to Bottom Line: Connecting Product Work to Revenue by VP...

FIDO Alliance Osaka Seminar: Passkeys and the Road Ahead.pdf

State of ICS and IoT Cyber Threat Landscape Report 2024 preview

GraphRAG is All You need? LLM & Knowledge Graph

AI for Every Business: Unlocking Your Product's Universal Potential by VP of ...

(SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014

4. •Infrastructure attacks (Layer 3 / 4) –Average attack size is 900Mbps (50% under 500Mbps) –78% of attacks are infrastructure (simple to launch) •Application attacks (Layer 7) –22% of all attacks target port 80 & 443 (more complex) •Multi-vector –different attack types simultaneously •Amplification (NTP, SSDP, DNS, Chargen, SNMP) •Hit and run DDoS (91% < 1hour) and smokescreens (16-18%)

5.  X

6. GET GET GET GET GET GET G -E -T

10. web app server DMZ public subnet ssh bastion NAT users ELB admin internet Amazon EC2 security group security group security group security group frontend private subnet TCP: 8080 Amazon EC2 TCP: 80/443 backend private subnet security group TCP: 1433; 3306 MySQL db TCP: Outbound TCP: 22

11. ELB users security group DMZ public subnet Amazon Route 53 CloudFront Edge Location security group web app server Frontend server private subnet DDoS

12.

13.

14.

15. ELB users security group DMZ public subnet Amazon Route 53 CloudFront Edge Location security group web app server Frontend server private subnet DDoS

16. Internet Connection C Internet ConnectionA Internet Connection B CloudFront Valid Object Request Invalid Protocol Invalid Object Request Country B Country A Country C Route A Route B Route C users

17.

18.

19.

20. Security Group Auto Scaling 1:1 WAF Master Auto Scaling WAF Worker Admin Auto Scaling Web Application Management / Monitoring Custom Profile Configuration ELB ELB ELB Amazon S3 Web Traffic Unauthorized Web Traffic

21.

22.

23. ELB security group DMZ public subnet CloudFront Edge Location security group web app server Frontend server private subnet DDoS users

24. ELB security group DMZ public subnet CloudFront Edge Location security group web app server frontend server private subnet DDoS users

25. ELB security group DMZ public subnet CloudFront Edge Location security group WAF / Proxy private subnet DDoS users WAF Auto Scaling ELB security group Auto Scaling security group frontend servers private subnet web app server

26.

27.

28.

29.

30.

31.

32.

33.

34.

35.

36. 9:30 pm PDT Traffic analysis suggests opportunity to mitigate attack by revising configuration. We also decide to disable auto- scaling to preserve data for FBI forensic analysis. 10:34 am PDT First indications of impaired response from monitors. Traffic ramps dramatically. 12:30 pm PDT Attack initially targets IP addresses of A record. Switch to Route53 CNAME as cutout eliminates traffic. 6:24 pm PDT Attack resumes (targeting CNAME this time). Traffic ramps dramatically.

37.

38. 2:15 am PDT Bad guys give up. Attack stops … Hah! 9:30 pm PDT Traffic analysis suggests opportunity to mitigate attack by revising configuration. We also decide to disable auto- scaling to preserve data for FBI forensic analysis. 10:34 am PDT First indications of impaired response from monitors. Traffic ramps dramatically. 12:30 pm PDT Attack initially targets IP addresses of A record. Switch to Route53 CNAME as cutout eliminates traffic. 6:24 pm PDT Attack resumes (targeting CNAME this time). Traffic ramps dramatically. 1:00 am PDT Revised configuration in place. The arms race begins … 7:17 pm PDT Peak capacity deployed: -17 c3.8xlarge HA proxies -34 m3.large web servers Bad guys run out of gas … traffic plateaus. 1-3 second response times.

39. Per-instance metric First attack: IP specific Second attack: arms race Sigh of relief …

40. Customer CIO “Team -I have been sitting here in my hotel room thinking about what this team has been able to accomplish over the past 2 days and it has been amazing. Not really my style to think we are out of the woods yet...but the level of effort and coordination has been world class. To the CrownPeak/AWS team... Thank you for all of your efforts to assist our organization. You should know that it has been greatly appreciated at all levels.”

41. Please give us your feedback on this session. Complete session evaluations and earn re:Invent swag. http://bit.ly/awsevals

(SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (15)

Similar to (SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014

Similar to (SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014 (20)

More from Amazon Web Services

More from Amazon Web Services (20)

Recently uploaded

Recently uploaded (20)

(SEC307) Building a DDoS-Resilient Architecture with Amazon Web Services | AWS re:Invent 2014