Securing memcache
•
2 likes•2,703 views
Slides from Todd Ouska's presentation on Secure Memcache at OSCON 2010. To learn more about secure memcache or the CyaSSL embedded SSL library, visit www.yassl.com.
Report
Share
Report
Share
Download to read offline
Recommended
yaSSL 2010-2011 Technical and Community Update
View slides from Chris Conlon's presentation about yaSSL's progress in the 2010-2011 year at FOSDEM in Brussels, Belgium.
To learn more about yaSSL's product or the CyaSSL embedded SSL library, visit www.yassl.com.
Securing MySQL with a Focus on SSL
This document discusses securing MySQL databases using SSL/TLS. It begins with an overview of MySQL security best practices, such as keeping the database updated, using strong passwords, and restricting privileges. It then covers SSL/TLS, explaining how it provides privacy, authentication and integrity for client-server communication. The document delves into X.509 certificates and how they are used in the SSL handshake process. Finally, it addresses how to configure and build MySQL with SSL support.
wolfSSL Year In Review, 2013
wolfSSL, author of the open source CyaSSL embedded SSL library has made significant progress in 2013 towards bringing the community a more usable, feature-rich, and better supported library for use in an ever-growing range of embedded platforms and environments. This talk will provide an overview of technical progress in the last year and news on the current state of wolfSSL. Details on what's new include the addition of new crypto ciphers and algorithms, better hardware cryptography support, more flexible abstraction layers, a JNI wrapper, new platform support, and better development tool integration. www.wolfssl.com
Secure Communication: Usability and Necessity of SSL/TLS
Network-related applications and devices often use secure communication. Although keeping network communications safe should be a top priority to all developers and engineers, it often gets left behind due to lack of understanding, insufficient funding, or looming deadlines.
Securing a project with SSL shouldn?t have to include a steep learning curve, deep pockets, or an unlimited time frame. By learning a few basics of how things work, where the technology is best used, and what features to look for when trying to choose the right SSL implementation, a developer or engineer can easily, simply, and quickly secure their project - putting both themselves and their employer?s minds at ease.
This presentation will introduce SSL - including why secure communication is important, introductory details about SSL, x509, and the underlying cryptography. It will give an overview of where SSL is used today - including Home Energy, Gaming, Databases, Sensors, VoIP, and more. A description of important items to look for when trying to choose an SSL implementation will give developers and engineers a solid foundation to begin securing their projects with SSL and will enable them to have more informed discussions with potential vendors.
Learn more at www.yassl.com.
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
Are you building a new private cloud or moving your workloads to a hybrid cloud in 2015? Or, are you just interested in exploring what OpenStack has to offer but don't have all the resources and toolsets to understand the gaps.
A Complete Guide to VPS Hosting
Virtual Private Server (VPS) hosting is the hosting of separate entities for different customers in a single server. In VPS hosting a web server is separated into number of servers with separately allocated wealth.
OVHcloud Startup Program : Découvrir l'écosystème au service des startups
L’équipe de l’OVHcloud Startup Program France Benelux a organisé, le 05 janvier dernier, son premier meetup online de l’année.
Le premier d’une longue série !
Cette première session, animée par Fanny Bouton, Startup Program Leader France Benelux, était l’occasion de découvrir toute l’ampleur de l’écosystème OVHcloud au service des startups au travers de l’OVHcloud Marketplace, l’Open Trusted Cloud Program ou encore avec l’OVHcloud Partner Program.
Ce rendez-vous a permis d’échanger directement avec l’ensemble des Program Leaders d’OVHcloud ainsi que nos partenaires tels que La BigAddress, Freelance Stack ou encore SmartGlobal.
Does Hypervisor matter in OpenStack
A presentation by Greg Elkinbard, Mirantis Senior Technical Director, featured at OpenStack Summit in Hong Kong on November 5, 2013
Recommended
yaSSL 2010-2011 Technical and Community Update
View slides from Chris Conlon's presentation about yaSSL's progress in the 2010-2011 year at FOSDEM in Brussels, Belgium.
To learn more about yaSSL's product or the CyaSSL embedded SSL library, visit www.yassl.com.
Securing MySQL with a Focus on SSL
This document discusses securing MySQL databases using SSL/TLS. It begins with an overview of MySQL security best practices, such as keeping the database updated, using strong passwords, and restricting privileges. It then covers SSL/TLS, explaining how it provides privacy, authentication and integrity for client-server communication. The document delves into X.509 certificates and how they are used in the SSL handshake process. Finally, it addresses how to configure and build MySQL with SSL support.
wolfSSL Year In Review, 2013
wolfSSL, author of the open source CyaSSL embedded SSL library has made significant progress in 2013 towards bringing the community a more usable, feature-rich, and better supported library for use in an ever-growing range of embedded platforms and environments. This talk will provide an overview of technical progress in the last year and news on the current state of wolfSSL. Details on what's new include the addition of new crypto ciphers and algorithms, better hardware cryptography support, more flexible abstraction layers, a JNI wrapper, new platform support, and better development tool integration. www.wolfssl.com
Secure Communication: Usability and Necessity of SSL/TLS
Network-related applications and devices often use secure communication. Although keeping network communications safe should be a top priority to all developers and engineers, it often gets left behind due to lack of understanding, insufficient funding, or looming deadlines.
Securing a project with SSL shouldn?t have to include a steep learning curve, deep pockets, or an unlimited time frame. By learning a few basics of how things work, where the technology is best used, and what features to look for when trying to choose the right SSL implementation, a developer or engineer can easily, simply, and quickly secure their project - putting both themselves and their employer?s minds at ease.
This presentation will introduce SSL - including why secure communication is important, introductory details about SSL, x509, and the underlying cryptography. It will give an overview of where SSL is used today - including Home Energy, Gaming, Databases, Sensors, VoIP, and more. A description of important items to look for when trying to choose an SSL implementation will give developers and engineers a solid foundation to begin securing their projects with SSL and will enable them to have more informed discussions with potential vendors.
Learn more at www.yassl.com.
Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus Linux
Are you building a new private cloud or moving your workloads to a hybrid cloud in 2015? Or, are you just interested in exploring what OpenStack has to offer but don't have all the resources and toolsets to understand the gaps.
A Complete Guide to VPS Hosting
Virtual Private Server (VPS) hosting is the hosting of separate entities for different customers in a single server. In VPS hosting a web server is separated into number of servers with separately allocated wealth.
OVHcloud Startup Program : Découvrir l'écosystème au service des startups
L’équipe de l’OVHcloud Startup Program France Benelux a organisé, le 05 janvier dernier, son premier meetup online de l’année.
Le premier d’une longue série !
Cette première session, animée par Fanny Bouton, Startup Program Leader France Benelux, était l’occasion de découvrir toute l’ampleur de l’écosystème OVHcloud au service des startups au travers de l’OVHcloud Marketplace, l’Open Trusted Cloud Program ou encore avec l’OVHcloud Partner Program.
Ce rendez-vous a permis d’échanger directement avec l’ensemble des Program Leaders d’OVHcloud ainsi que nos partenaires tels que La BigAddress, Freelance Stack ou encore SmartGlobal.
Does Hypervisor matter in OpenStack
A presentation by Greg Elkinbard, Mirantis Senior Technical Director, featured at OpenStack Summit in Hong Kong on November 5, 2013
BrownBag - vCloud Networking
The document discusses vCloud Networking concepts including external networks, organization networks, vApp networks, and network pools. External networks connect the organization to the physical network, organization networks belong to a tenant organization, and vApp networks are available to a single application. Network pools give users control over layer 2 networks and include port-group, VLAN, and vCD-NI (VMware's proprietary encapsulation protocol) types. The document also covers considerations for the physical network design and configuration of external and organization networks.
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
This document provides an agenda and overview for a presentation on network automation using APIs, Ansible, and Python. The presentation introduces network programmability and automation tools like Ansible, discusses using infrastructure as code approaches, and provides examples of automating network device configurations and modules using Python and Jinja templates. It aims to help network engineers get started with network automation.
VMUG.IT Meeting Napoli - Opening
The document is a presentation for a VMUG IT Meeting in Naples on April 6, 2016. It discusses VMUG, an independent global organization for VMware customers with over 195 local groups and 100,000 members worldwide. It outlines the agenda for the meeting which includes presentations on software-defined data centers, network virtualization with NSX, vRealize Automation with NSX, Nutanix, always-on enterprises with Veeam, software-defined storage, and a panel discussion. It promotes VMUG membership advantages like discounts on VMware software and events.
Introduction to Internet of Things
This document provides an introduction to the Internet of Things (IoT). It discusses key concepts and challenges for IoT including scalability, power constraints, security, and standardization. It describes the IoT protocol stack including 6LoWPAN for IPv6 connectivity over low-power wireless networks and CoAP as a RESTful protocol. Popular IoT operating systems like Contiki and hardware platforms are also covered. Delay-tolerant networking and efficient XML interchange are discussed as approaches for challenged IoT networks and data encoding.
Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to Know
The document discusses NVMe, NVMe over Fabrics, and the future of composable storage. It begins by explaining that NVMe is a protocol designed for solid state storage that improves upon SCSI. NVMe over Fabrics allows networked NVMe to provide near in-server performance for shared storage. This paves the way for composable storage, which uses orchestration to dynamically allocate independent storage resources according to application needs. Kaminario was presented as offering a converged NVMe and NVMe-over-Fabrics all-flash array that preserves full functionality while improving agility.
Exploring the OVHcloud Hosted Private Cloud
Join OVHcloud expert Antoine Ruelle for a hands-on demonstration of our Hosted Private Cloud solution, exploring how a foundation of cutting-edge VMware technology allows for the creation of secure, scalable, multi-local cloud infrastructures, while maintaining full transparency and reversibility at all times.
Nimbus New Vision (Apr 2010)
The document introduces Nimbus Data Systems' new Enterprise Flash Array, which provides 10x the performance of traditional storage arrays through its use of 100% flash memory. It achieves 95% greater energy efficiency through inline data deduplication. The array offers unmatched simplicity through its full enterprise software suite and easy web management. It will be available for mainstream deployment starting at under €20K for 2.5TB of raw storage.
SUTOL 2016 - Secure IBM Traveler for 2017
Minimum HTTPS / TLS connection and certificate security requirements for IBM Verse for iOS, IBM Verse for Android, IBM Traveler Companion and IBM Traveler To Do mobile apps.
Brkcrt 1160 c3-rev2
This document provides an overview and agenda for a training session on securing networks with Cisco ASA VPN solutions for the CCNP Security certification. The session will cover ASA VPN architecture and fundamentals, IPSec fundamentals, site-to-site and remote access VPN configurations using IPSec and SSL, advanced VPN concepts, and provide a Q&A. Attendees are advised that the session will adhere to Cisco's confidentiality rules and cannot address specific exam questions.
Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...
The document discusses EMC's Unity family of all-flash and hybrid storage arrays. It provides details on the specifications and capabilities of the Unity 300, 400, 500, and 600 models. Key features highlighted include the new 64-bit Unity file system, FAST cache technology, quality of service controls, and the Unisphere management interface.
Data models-and-automation-jp
This document discusses YANG data models and automation. It provides background on the speaker and their focus on manageability. It describes how automation is required for today's large, dynamic networks. YANG is introduced as the standard data modeling language that can be used to define management information for protocols like NETCONF and RESTCONF. Examples of organizations developing YANG models are provided. The document emphasizes that data model-driven APIs are key to enabling automation.
Discover the OVH Dedicated Cloud Webinar
1) The webinar provides an overview of the OVH Dedicated Cloud product, including a vSphere demonstration and Q&A session.
2) Key features of the Dedicated Cloud include vMotion for live migration of VMs, HA clusters for high availability, and DRS for load balancing. It also includes advanced functions like fault tolerance.
3) Attendees can ask questions about pricing, migration options, performance, and support for technologies like Zerto for disaster recovery between locations. Additional options like load balancing and backups with Veeam are also discussed.
Using vSAN technology for hosted private cloud storage
Storage represents an increasingly complex challenge for growing organisations. In this session, Daniel Pascua and Timo Sugliani demonstrate how vSAN technology can provide both minimal latency and high performance for specific workloads, including hands-on examples of configuring and operating clusters.
VIO30 Technical Overview
VMware Integrated OpenStack (VIO) 3.0 provides an enterprise solution for OpenStack that leverages VMware's data center technologies. VIO 3.0 is based on the latest OpenStack Mitaka release and features a more compact control plane architecture. It allows existing vSphere workloads to be imported and managed through OpenStack APIs. Troubleshooting tools like vRealize Log Insight and vRealize Operations Manager provide visibility into the OpenStack and NSX environments through dedicated content packs.
Tokyo meetup 20160224
The document discusses integrating Cisco Application Centric Infrastructure (ACI) with container networking using OpenStack. ACI enables automated container networking and policy mapping without requiring network configuration. It provides structure to container networking and allows direct policy mapping between switch configuration and container usage. The document demonstrates a demo topology using ACI fabric with Contiv plugins to launch a multi-tier application across web and database containers with automated network and policy creation.
Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...
Hypervisor CPU and Networking overhead is a common issue for operations like VM provisioning, migration, and cloning. There should be a way to enhance performance by offloading the unnecessary CPU load and shrinking the SAN traffic. ODX and VAAI features do exactly this by offloading routine disk tasks to the storage array so they will be executed more effectively.
Webpage Caches - the big picture (WordPress too)
Caches at various levels help speed up websites for users by storing content so it doesn't need to be repeatedly generated. Caches include browser caches local to each user's device, web server caches, content delivery network caches, proxy caches, application caches like PHP opcode caches, and database caches like MySQL query caches that store the results of queries. Together these caches improve performance by reducing the processing needed to serve common requests.
Zaccone Carmelo - IPv6 and security from a user’s point of view
This document discusses the IPv6 deployment at AWT.be from a security perspective. It describes how AWT.be initially deployed IPv6 separately from IPv4 using dedicated firewalls and networks. They then transitioned to dual-stack deployment after gaining experience. Key lessons included ensuring firewall and application support for IPv6, careful address configuration to avoid errors, and awareness that dual-stack hosts are more vulnerable without personal firewalls that support IPv6. The deployment approach aimed to safely gain experience with IPv6 before integrating it fully into production networks and services.
Open solaris customer presentation
OpenSolaris is an open source version of the Solaris operating system. It provides a unified platform from desktop to datacenter. Key features include virtualization, ZFS storage, DTrace monitoring, and networking capabilities. The latest 2009.06 release provides enhancements for developers, the desktop, and datacenter use including improved performance, tools, and support options. OpenSolaris aims to deliver differentiated solutions while leveraging industry-standard hardware and an open development model.
Ceph Day Shanghai - Hyper Converged PLCloud with Ceph
Hyper Converged PLCloud with CEPH
This document discusses PowerLeader Cloud (PLCloud), a cloud computing platform that uses a hyper-converged infrastructure with OpenStack, Docker, and Ceph. It provides an overview of PLCloud and how it has adopted OpenStack, Ceph, and other open source technologies. It then describes PLCloud's hyper-converged architecture and how it leverages OpenStack, Docker, and Ceph. Finally, it discusses a specific use case where Ceph RADOS Gateway is used for media storage and access in PLCloud.
Difference between ECC and RSA PublicKey
Difference between ECC and RSA Public Key Cryptography.
ECC (Elliptic Curve Cryptography) and RSA (Rivest-Shamir-Adleman) are two different public key cryptography algorithms.
Random musings on SSL/TLS configuration
The document discusses securing applications with SSL/TLS. It recommends disabling SSL v2.0, using ECDHE cipher suites where possible as they provide both fast performance and forward secrecy. Additionally, it advises not trusting default SSL/TLS configurations that come with software packages.
More Related Content
What's hot
BrownBag - vCloud Networking
The document discusses vCloud Networking concepts including external networks, organization networks, vApp networks, and network pools. External networks connect the organization to the physical network, organization networks belong to a tenant organization, and vApp networks are available to a single application. Network pools give users control over layer 2 networks and include port-group, VLAN, and vCD-NI (VMware's proprietary encapsulation protocol) types. The document also covers considerations for the physical network design and configuration of external and organization networks.
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
This document provides an agenda and overview for a presentation on network automation using APIs, Ansible, and Python. The presentation introduces network programmability and automation tools like Ansible, discusses using infrastructure as code approaches, and provides examples of automating network device configurations and modules using Python and Jinja templates. It aims to help network engineers get started with network automation.
VMUG.IT Meeting Napoli - Opening
The document is a presentation for a VMUG IT Meeting in Naples on April 6, 2016. It discusses VMUG, an independent global organization for VMware customers with over 195 local groups and 100,000 members worldwide. It outlines the agenda for the meeting which includes presentations on software-defined data centers, network virtualization with NSX, vRealize Automation with NSX, Nutanix, always-on enterprises with Veeam, software-defined storage, and a panel discussion. It promotes VMUG membership advantages like discounts on VMware software and events.
Introduction to Internet of Things
This document provides an introduction to the Internet of Things (IoT). It discusses key concepts and challenges for IoT including scalability, power constraints, security, and standardization. It describes the IoT protocol stack including 6LoWPAN for IPv6 connectivity over low-power wireless networks and CoAP as a RESTful protocol. Popular IoT operating systems like Contiki and hardware platforms are also covered. Delay-tolerant networking and efficient XML interchange are discussed as approaches for challenged IoT networks and data encoding.
Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to Know
The document discusses NVMe, NVMe over Fabrics, and the future of composable storage. It begins by explaining that NVMe is a protocol designed for solid state storage that improves upon SCSI. NVMe over Fabrics allows networked NVMe to provide near in-server performance for shared storage. This paves the way for composable storage, which uses orchestration to dynamically allocate independent storage resources according to application needs. Kaminario was presented as offering a converged NVMe and NVMe-over-Fabrics all-flash array that preserves full functionality while improving agility.
Exploring the OVHcloud Hosted Private Cloud
Join OVHcloud expert Antoine Ruelle for a hands-on demonstration of our Hosted Private Cloud solution, exploring how a foundation of cutting-edge VMware technology allows for the creation of secure, scalable, multi-local cloud infrastructures, while maintaining full transparency and reversibility at all times.
Nimbus New Vision (Apr 2010)
The document introduces Nimbus Data Systems' new Enterprise Flash Array, which provides 10x the performance of traditional storage arrays through its use of 100% flash memory. It achieves 95% greater energy efficiency through inline data deduplication. The array offers unmatched simplicity through its full enterprise software suite and easy web management. It will be available for mainstream deployment starting at under €20K for 2.5TB of raw storage.
SUTOL 2016 - Secure IBM Traveler for 2017
Minimum HTTPS / TLS connection and certificate security requirements for IBM Verse for iOS, IBM Verse for Android, IBM Traveler Companion and IBM Traveler To Do mobile apps.
Brkcrt 1160 c3-rev2
This document provides an overview and agenda for a training session on securing networks with Cisco ASA VPN solutions for the CCNP Security certification. The session will cover ASA VPN architecture and fundamentals, IPSec fundamentals, site-to-site and remote access VPN configurations using IPSec and SSL, advanced VPN concepts, and provide a Q&A. Attendees are advised that the session will adhere to Cisco's confidentiality rules and cannot address specific exam questions.
Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...
The document discusses EMC's Unity family of all-flash and hybrid storage arrays. It provides details on the specifications and capabilities of the Unity 300, 400, 500, and 600 models. Key features highlighted include the new 64-bit Unity file system, FAST cache technology, quality of service controls, and the Unisphere management interface.
Data models-and-automation-jp
This document discusses YANG data models and automation. It provides background on the speaker and their focus on manageability. It describes how automation is required for today's large, dynamic networks. YANG is introduced as the standard data modeling language that can be used to define management information for protocols like NETCONF and RESTCONF. Examples of organizations developing YANG models are provided. The document emphasizes that data model-driven APIs are key to enabling automation.
Discover the OVH Dedicated Cloud Webinar
1) The webinar provides an overview of the OVH Dedicated Cloud product, including a vSphere demonstration and Q&A session.
2) Key features of the Dedicated Cloud include vMotion for live migration of VMs, HA clusters for high availability, and DRS for load balancing. It also includes advanced functions like fault tolerance.
3) Attendees can ask questions about pricing, migration options, performance, and support for technologies like Zerto for disaster recovery between locations. Additional options like load balancing and backups with Veeam are also discussed.
Using vSAN technology for hosted private cloud storage
Storage represents an increasingly complex challenge for growing organisations. In this session, Daniel Pascua and Timo Sugliani demonstrate how vSAN technology can provide both minimal latency and high performance for specific workloads, including hands-on examples of configuring and operating clusters.
VIO30 Technical Overview
VMware Integrated OpenStack (VIO) 3.0 provides an enterprise solution for OpenStack that leverages VMware's data center technologies. VIO 3.0 is based on the latest OpenStack Mitaka release and features a more compact control plane architecture. It allows existing vSphere workloads to be imported and managed through OpenStack APIs. Troubleshooting tools like vRealize Log Insight and vRealize Operations Manager provide visibility into the OpenStack and NSX environments through dedicated content packs.
Tokyo meetup 20160224
The document discusses integrating Cisco Application Centric Infrastructure (ACI) with container networking using OpenStack. ACI enables automated container networking and policy mapping without requiring network configuration. It provides structure to container networking and allows direct policy mapping between switch configuration and container usage. The document demonstrates a demo topology using ACI fabric with Contiv plugins to launch a multi-tier application across web and database containers with automated network and policy creation.
Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...
Hypervisor CPU and Networking overhead is a common issue for operations like VM provisioning, migration, and cloning. There should be a way to enhance performance by offloading the unnecessary CPU load and shrinking the SAN traffic. ODX and VAAI features do exactly this by offloading routine disk tasks to the storage array so they will be executed more effectively.
Webpage Caches - the big picture (WordPress too)
Caches at various levels help speed up websites for users by storing content so it doesn't need to be repeatedly generated. Caches include browser caches local to each user's device, web server caches, content delivery network caches, proxy caches, application caches like PHP opcode caches, and database caches like MySQL query caches that store the results of queries. Together these caches improve performance by reducing the processing needed to serve common requests.
Zaccone Carmelo - IPv6 and security from a user’s point of view
This document discusses the IPv6 deployment at AWT.be from a security perspective. It describes how AWT.be initially deployed IPv6 separately from IPv4 using dedicated firewalls and networks. They then transitioned to dual-stack deployment after gaining experience. Key lessons included ensuring firewall and application support for IPv6, careful address configuration to avoid errors, and awareness that dual-stack hosts are more vulnerable without personal firewalls that support IPv6. The deployment approach aimed to safely gain experience with IPv6 before integrating it fully into production networks and services.
Open solaris customer presentation
OpenSolaris is an open source version of the Solaris operating system. It provides a unified platform from desktop to datacenter. Key features include virtualization, ZFS storage, DTrace monitoring, and networking capabilities. The latest 2009.06 release provides enhancements for developers, the desktop, and datacenter use including improved performance, tools, and support options. OpenSolaris aims to deliver differentiated solutions while leveraging industry-standard hardware and an open development model.
Ceph Day Shanghai - Hyper Converged PLCloud with Ceph
Hyper Converged PLCloud with CEPH
This document discusses PowerLeader Cloud (PLCloud), a cloud computing platform that uses a hyper-converged infrastructure with OpenStack, Docker, and Ceph. It provides an overview of PLCloud and how it has adopted OpenStack, Ceph, and other open source technologies. It then describes PLCloud's hyper-converged architecture and how it leverages OpenStack, Docker, and Ceph. Finally, it discusses a specific use case where Ceph RADOS Gateway is used for media storage and access in PLCloud.
What's hot (20)
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...
Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to Know
Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to Know
Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...
Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...
Using vSAN technology for hosted private cloud storage
Using vSAN technology for hosted private cloud storage
Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...
Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...
Zaccone Carmelo - IPv6 and security from a user’s point of view
Zaccone Carmelo - IPv6 and security from a user’s point of view
Ceph Day Shanghai - Hyper Converged PLCloud with Ceph
Ceph Day Shanghai - Hyper Converged PLCloud with Ceph
Similar to Securing memcache
Difference between ECC and RSA PublicKey
Difference between ECC and RSA Public Key Cryptography.
ECC (Elliptic Curve Cryptography) and RSA (Rivest-Shamir-Adleman) are two different public key cryptography algorithms.
Random musings on SSL/TLS configuration
The document discusses securing applications with SSL/TLS. It recommends disabling SSL v2.0, using ECDHE cipher suites where possible as they provide both fast performance and forward secrecy. Additionally, it advises not trusting default SSL/TLS configurations that come with software packages.
Emily Stamm - Post-Quantum Cryptography
This document provides an introduction to post-quantum cryptography. It discusses how quantum computers could break current public key cryptography and outlines several approaches to post-quantum cryptography, including lattice-based, code-based, multivariate, hash-based, and isogeny-based cryptography. It summarizes the National Institute of Standards and Technology's post-quantum cryptography standardization project and competition, which is evaluating these approaches.
Crypto Strikes Back! (Google 2009)
Encrypting and decrypting, choosing a random number, signing and verifying -- it all seems so logical. But the road to hell is paved with good intentions and a copy of "Applied Cryptography".
This talk will cover recent crypto vulnerabilities in widely-deployed systems and how the smallest oversight resulted in catastrophe. You'll learn why public key crypto is like a Ford Pinto in a demolition derby, the meaning of "PBKDF2", and how Web 2.0 reinvented 1970's-style password hashing, badly. And maybe, just maybe, you'll leave with a newfound respect for the utter brittleness of even the simplest crypto.
Nate Lawson is the founder of Root Labs, which specializes in the design and analysis of embedded security and cryptography. Previously, he worked at Cryptography Research, analyzing cryptographic products and co-designing the Blu-ray content protection layer known as BD+.
Efficient Spark Analytics on Encrypted Data with Gidon Gershinsky
This document discusses efficient Spark analytics on encrypted data using Parquet modular encryption. It provides an overview of the problem of protecting sensitive data at rest while preserving analytics performance. It then describes Parquet modular encryption which enables columnar projection, predicate pushdown and fine-grained access control on encrypted Parquet data. Finally, it demonstrates a connected car use case and shows the performance implications of encryption on Spark analytics are minimal.
Secure Socket Layer
This presentation summarizes Secure Socket Layer (SSL) technology. It discusses how SSL uses encryption to provide security and integrity for data transmission. The presentation covers SSL architecture, including the certificate and hashing components. It also describes the SSL handshake process and how symmetric and asymmetric encryption algorithms are used to securely transfer data. Common algorithms like RSA, Diffie-Hellman, DES, and AES are also mentioned.
Where Django Caching Bust at the Seams
Most mid-sized Django websites thrive by relying on memcached. Though what happens when basic memcached is not enough? And how can one identify when the caching architecture is becoming a bottleneck? We'll cover the problems we've encountered and solutions we've put in place.
Cloud Data Encryption (Aluhut Edition) - 2019
Want to store your data to the cloud? This presentation gives an overview of multiple encrypted storage solutions.
DESIGN%20AND%20IMPLEMENTATION%20OF%20DATA%20SECURITY%20USING%20ADVANCED.pptx
This document proposes adding an additional layer of encryption to the AES algorithm to increase security. It describes encrypting each letter of a message with a customized Caesar cipher before applying the standard AES encryption process. The system would encrypt data, store it in a database, and allow decryption in reverse. Military and intelligence agencies could use this highly secure application to exchange encrypted messages. The document also discusses optimizing AES performance through pipelined architectures that process multiple blocks simultaneously through parallel round units.
Unsafe SSL webinar
The document discusses SSL/TLS security issues including:
- Common vulnerabilities in SSL/TLS implementations like Heartbleed, POODLE, and FREAK.
- Tools for analyzing SSL/TLS server configurations like Qualys SSL Labs and its new API.
- Issues caused by third parties like browser-trusted certificate authorities (CAs) improperly issuing certificates or companies pre-installing software like Superfish that undermine SSL/TLS encryption.
Yair Hershko - Building Software Defined Storage Cloud Using OpenStack
Zadara Storage provides software defined storage as a service using OpenStack. Their solution involves deploying virtual private storage arrays for each tenant on commodity hardware. This provides tenants with consistent performance, high availability, control over storage, and flexibility while allowing the storage infrastructure to automatically scale and be managed at cloud scale. Zadara aims to deliver traditional enterprise storage benefits with the elasticity and ecosystem of the cloud.
Sqlviking
SQLViking is a post exploitation tool written in Python focused on leveraging unencrypted connections between database and web servers. It is comprised of two pieces: one passive and one active. The passive piece, dubbed Scout, sits on the wire and silently collects information passed between database servers and clients. The active piece, Pillage, leverages TCP injection to run arbitrary queries against a database without credentials or man in the middling. SQLViking was designed with extensibility in mind allowing the open source community to easily add support for new databases without needing to touch any of the actual logic of the tool itself via Python's abstract base classes.
This talk will cover how the tool works from a functional perspective as well as existing and future features. It will also discuss the root issue which allows this tool to work and how to protect yourself against such an attack.
MySQL Cluster NoSQL Memcached API
MySQL Cluster 7.2 added support for the Memcached API, enabling web services to directly query MySQL Cluster using the Memcached API, and adding a persistent, scalable, fault tolerant backend to Memcached.
The slides take you through the design concepts and introduce a sample social media app built using memcached and MySQL Cluster
ApacheCon: Apache Commons Crypto 2017
Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Apache Commons Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms.
Steve Jones - Encrypting Data
This document provides an overview of encryption in SQL Server, including:
- Transparent Data Encryption allows encrypting data at rest on disk for increased security.
- Communications can be encrypted using SSL or IPSec to encrypt data in transit.
- Hashing provides a way to index and search encrypted data faster than decryption.
- SQL Server uses a hierarchy of keys including symmetric, asymmetric, and certificates to manage encryption.
SSL Checklist for Pentesters (BSides MCR 2014)
This document provides a summary of checks that a pentester should perform when evaluating the security of SSL/TLS implementations. It discusses checking for support of outdated and insecure protocols like SSLv2 and SSLv3. It also recommends validating support for newer, more secure versions like TLSv1.1 and TLSv1.2. The document outlines steps to check for vulnerabilities like Heartbleed, BEAST, and CRIME. It also provides guidance on evaluating certificate validity, cipher suites, and renegotiation support. Web application considerations like mixed content and HTTP Strict Transport Security are also covered at a high level. The presenter provides these checks and recommendations from the perspective of a pentester to identify potential issues to consider reporting
Using encryption with_aws
Scott Hogg's presentation covered encryption methods when using Amazon Web Services (AWS). It discussed the importance of encryption for cloud infrastructure and described AWS services that provide encryption such as AWS Key Management Service (KMS) for encrypting keys, AWS CloudHSM for hardware security modules, and server-side encryption options for services like S3, EBS, EFS, RDS, DynamoDB, and SQS. The presentation also reviewed the AWS shared responsibility model and concerns about AWS security.
Barbican 1.0 - Open Source Key Management for OpenStack
This document provides an overview of Barbican, an open source key management service for OpenStack. Barbican allows developers to securely generate, store, distribute, and revoke cryptographic keys and secrets. It supports various key storage and interaction models including transparent encryption, federated keys, and on-premise key management. Barbican also provides APIs and client libraries to integrate encryption services into applications and OpenStack services such as Swift, Glance, and Nova.
AdGear Use Case with Scylla - 1M Queries Per Second with Single-Digit Millise...
This session covers what is ScyllaDB, why use ScyllaDB, how ScyllaDB helps AdGear win, and what’s under the hood that allows that to happen
Reinventing anon email
Comparison of TAILS vs Liberte and their popularity counterparts Cables and Bitmessage. Presented at Rochester 2600.
Similar to Securing memcache (20)
Efficient Spark Analytics on Encrypted Data with Gidon Gershinsky
Efficient Spark Analytics on Encrypted Data with Gidon Gershinsky
DESIGN%20AND%20IMPLEMENTATION%20OF%20DATA%20SECURITY%20USING%20ADVANCED.pptx
DESIGN%20AND%20IMPLEMENTATION%20OF%20DATA%20SECURITY%20USING%20ADVANCED.pptx
Yair Hershko - Building Software Defined Storage Cloud Using OpenStack
Yair Hershko - Building Software Defined Storage Cloud Using OpenStack
Barbican 1.0 - Open Source Key Management for OpenStack
Barbican 1.0 - Open Source Key Management for OpenStack
AdGear Use Case with Scylla - 1M Queries Per Second with Single-Digit Millise...
AdGear Use Case with Scylla - 1M Queries Per Second with Single-Digit Millise...
More from wolfSSL
FIPS 140-2 Validations in a Secure Enclave
Secure enclaves are becoming a popular way to separate and protect sensitive code and data from other processes running on a system. A FIPS 140-2 validated cryptographic software module is currently required to run power-on self tests when loaded, but security of the module can be taken one step further by validating the module inside a secure enclave, such as Intel SGX.
wolfSSL has been working on FIPS 140-2 validating the wolfCrypt library running inside an Intel SGX enclave. This session will discuss the advantages, challenges, and process of FIPS 140-2 validating a cryptographic software module inside Intel SGX and how the same process could be applied to other secure enclave environments.
wolfSSL TLS 1.3 Support in 2018
This presentation covers the current status of TLS 1.3 in the wolfSSL embedded TLS library (as of the time it was presented). It talks about the Draft status of TLS 1.3, middlebox compatibility, extensions, RSA-PSS negotiation and the specification's progress in the TLSWG (TLS Working Group).
www.wolfssl.com
www.wolfssl.com/tls13
wolfSSL Performance Improvements 2018
The wolfSSL team meeting discussed performance enhancements to wolfSSL including single precision implementations of asymmetric algorithms, Intel assembly optimizations, and benchmarking improvements. Single precision implementations reduce code size but improve performance for embedded systems that only use one key size. Benchmarking was updated to match OpenSSL for apples-to-apples comparisons. Intel assembly optimizations were shown to significantly speed up algorithms like AES-GCM, ChaCha20, SHA-2, and Curve25519 compared to the C implementations. Future work may include more algorithm optimizations and exploiting new Intel instruction sets.
wolfSSL and TLS 1.3
This document summarizes a talk given by Chris Conlon from wolfSSL on September 15, 2017 in Tokyo, Japan about TLS 1.3. It provides background on Chris Conlon and his role at wolfSSL, an overview of wolfSSL's products and services including their lightweight SSL/TLS library. It also discusses the history and components of the SSL/TLS protocol, common vulnerabilities, and the goals of the new TLS 1.3 specification.
Securing Data in Transit -
This document provides an overview of securing data in transit using TLS in constrained devices. It begins with introducing the presenters from wolfSSL Inc. and the topics that will be covered, which include an introduction to wolfSSL, an overview of SSL/TLS and cryptography, enabling TLS for a simple HTTP client, emerging ciphers and algorithms, and time for Q&A. It then discusses wolfSSL's history and products. The remainder of the document focuses on explaining SSL/TLS protocols, cipher suites, X.509 certificates, implementing TLS on embedded devices using wolfSSL and the FRDM-K64F board as an example, and emerging ciphers like ChaCha20 and Poly1305.
Kerberos + Android: A Tale of Opportunity
Slides from Chris Conlon's presentation about yaSSL's work porting the CyaSSL embedded SSL library, the MIT Kerberos library, and the Kerberos GSS-API to the Android platform.
To learn more, visit www.yassl.com.
More from wolfSSL (6)
Recently uploaded
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
June Patch Tuesday
Ivanti’s Patch Tuesday breakdown goes beyond patching your applications and brings you the intelligence and guidance needed to prioritize where to focus your attention first. Catch early analysis on our Ivanti blog, then join industry expert Chris Goettl for the Patch Tuesday Webinar Event. There we’ll do a deep dive into each of the bulletins and give guidance on the risks associated with the newly-identified vulnerabilities.
Essentials of Automations: Exploring Attributes & Automation Parameters
Building automations in FME Flow can save time, money, and help businesses scale by eliminating data silos and providing data to stakeholders in real-time. One essential component to orchestrating complex automations is the use of attributes & automation parameters (both formerly known as “keys”). In fact, it’s unlikely you’ll ever build an Automation without using these components, but what exactly are they?
Attributes & automation parameters enable the automation author to pass data values from one automation component to the next. During this webinar, our FME Flow Specialists will cover leveraging the three types of these output attributes & parameters in FME Flow: Event, Custom, and Automation. As a bonus, they’ll also be making use of the Split-Merge Block functionality.
You’ll leave this webinar with a better understanding of how to maximize the potential of automations by making use of attributes & automation parameters, with the ultimate goal of setting your enterprise integration workflows up on autopilot.
The Microsoft 365 Migration Tutorial For Beginner.pptx
This presentation will help you understand the power of Microsoft 365. However, we have mentioned every productivity app included in Office 365. Additionally, we have suggested the migration situation related to Office 365 and how we can help you.
You can also read: https://www.systoolsgroup.com/updates/office-365-tenant-to-tenant-migration-step-by-step-complete-guide/
Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors
Join us to learn how UiPath Apps can directly and easily interact with prebuilt connectors via Integration Service--including Salesforce, ServiceNow, Open GenAI, and more.
The best part is you can achieve this without building a custom workflow! Say goodbye to the hassle of using separate automations to call APIs. By seamlessly integrating within App Studio, you can now easily streamline your workflow, while gaining direct access to our Connector Catalog of popular applications.
We’ll discuss and demo the benefits of UiPath Apps and connectors including:
Creating a compelling user experience for any software, without the limitations of APIs.
Accelerating the app creation process, saving time and effort
Enjoying high-performance CRUD (create, read, update, delete) operations, for
seamless data management.
Speakers:
Russell Alfeche, Technology Leader, RPA at qBotic and UiPath MVP
Charlie Greenberg, host
Main news related to the CCS TSI 2023 (2023/1695)
An English 🇬🇧 translation of a presentation to the speech I gave about the main changes brought by CCS TSI 2023 at the biggest Czech conference on Communications and signalling systems on Railways, which was held in Clarion Hotel Olomouc from 7th to 9th November 2023 (konferenceszt.cz). Attended by around 500 participants and 200 on-line followers.
The original Czech 🇨🇿 version of the presentation can be found here: https://www.slideshare.net/slideshow/hlavni-novinky-souvisejici-s-ccs-tsi-2023-2023-1695/269688092 .
The videorecording (in Czech) from the presentation is available here: https://youtu.be/WzjJWm4IyPk?si=SImb06tuXGb30BEH .
Taking AI to the Next Level in Manufacturing.pdf
Read Taking AI to the Next Level in Manufacturing to gain insights on AI adoption in the manufacturing industry, such as:
1. How quickly AI is being implemented in manufacturing.
2. Which barriers stand in the way of AI adoption.
3. How data quality and governance form the backbone of AI.
4. Organizational processes and structures that may inhibit effective AI adoption.
6. Ideas and approaches to help build your organization's AI strategy.
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
At this talk we will discuss DDoS protection tools and best practices, discuss network architectures and what AWS has to offer. Also, we will look into one of the largest DDoS attacks on Ukrainian infrastructure that happened in February 2022. We'll see, what techniques helped to keep the web resources available for Ukrainians and how AWS improved DDoS protection for all customers based on Ukraine experience
Columbus Data & Analytics Wednesdays - June 2024
Columbus Data & Analytics Wednesdays, June 2024 with Maria Copot 20
5th LF Energy Power Grid Model Meet-up Slides
5th Power Grid Model Meet-up
It is with great pleasure that we extend to you an invitation to the 5th Power Grid Model Meet-up, scheduled for 6th June 2024. This event will adopt a hybrid format, allowing participants to join us either through an online Mircosoft Teams session or in person at TU/e located at Den Dolech 2, Eindhoven, Netherlands. The meet-up will be hosted by Eindhoven University of Technology (TU/e), a research university specializing in engineering science & technology.
Power Grid Model
The global energy transition is placing new and unprecedented demands on Distribution System Operators (DSOs). Alongside upgrades to grid capacity, processes such as digitization, capacity optimization, and congestion management are becoming vital for delivering reliable services.
Power Grid Model is an open source project from Linux Foundation Energy and provides a calculation engine that is increasingly essential for DSOs. It offers a standards-based foundation enabling real-time power systems analysis, simulations of electrical power grids, and sophisticated what-if analysis. In addition, it enables in-depth studies and analysis of the electrical power grid’s behavior and performance. This comprehensive model incorporates essential factors such as power generation capacity, electrical losses, voltage levels, power flows, and system stability.
Power Grid Model is currently being applied in a wide variety of use cases, including grid planning, expansion, reliability, and congestion studies. It can also help in analyzing the impact of renewable energy integration, assessing the effects of disturbances or faults, and developing strategies for grid control and optimization.
What to expect
For the upcoming meetup we are organizing, we have an exciting lineup of activities planned:
-Insightful presentations covering two practical applications of the Power Grid Model.
-An update on the latest advancements in Power Grid -Model technology during the first and second quarters of 2024.
-An interactive brainstorming session to discuss and propose new feature requests.
-An opportunity to connect with fellow Power Grid Model enthusiasts and users.
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Webinar Recording: https://www.panagenda.com/webinars/hcl-notes-und-domino-lizenzkostenreduzierung-in-der-welt-von-dlau/
DLAU und die Lizenzen nach dem CCB- und CCX-Modell sind für viele in der HCL-Community seit letztem Jahr ein heißes Thema. Als Notes- oder Domino-Kunde haben Sie vielleicht mit unerwartet hohen Benutzerzahlen und Lizenzgebühren zu kämpfen. Sie fragen sich vielleicht, wie diese neue Art der Lizenzierung funktioniert und welchen Nutzen sie Ihnen bringt. Vor allem wollen Sie sicherlich Ihr Budget einhalten und Kosten sparen, wo immer möglich. Das verstehen wir und wir möchten Ihnen dabei helfen!
Wir erklären Ihnen, wie Sie häufige Konfigurationsprobleme lösen können, die dazu führen können, dass mehr Benutzer gezählt werden als nötig, und wie Sie überflüssige oder ungenutzte Konten identifizieren und entfernen können, um Geld zu sparen. Es gibt auch einige Ansätze, die zu unnötigen Ausgaben führen können, z. B. wenn ein Personendokument anstelle eines Mail-Ins für geteilte Mailboxen verwendet wird. Wir zeigen Ihnen solche Fälle und deren Lösungen. Und natürlich erklären wir Ihnen das neue Lizenzmodell.
Nehmen Sie an diesem Webinar teil, bei dem HCL-Ambassador Marc Thomas und Gastredner Franz Walder Ihnen diese neue Welt näherbringen. Es vermittelt Ihnen die Tools und das Know-how, um den Überblick zu bewahren. Sie werden in der Lage sein, Ihre Kosten durch eine optimierte Domino-Konfiguration zu reduzieren und auch in Zukunft gering zu halten.
Diese Themen werden behandelt
- Reduzierung der Lizenzkosten durch Auffinden und Beheben von Fehlkonfigurationen und überflüssigen Konten
- Wie funktionieren CCB- und CCX-Lizenzen wirklich?
- Verstehen des DLAU-Tools und wie man es am besten nutzt
- Tipps für häufige Problembereiche, wie z. B. Team-Postfächer, Funktions-/Testbenutzer usw.
- Praxisbeispiele und Best Practices zum sofortigen Umsetzen
Principle of conventional tomography-Bibash Shahi ppt..pptx
before the computed tomography, it had been widely used.
What is an RPA CoE? Session 1 – CoE Vision
In the first session, we will review the organization's vision and how this has an impact on the COE Structure.
Topics covered:
• The role of a steering committee
• How do the organization’s priorities determine CoE Structure?
Speaker:
Chris Bolin, Senior Intelligent Automation Architect Anika Systems
AppSec PNW: Android and iOS Application Security with MobSF
Mobile Security Framework - MobSF is a free and open source automated mobile application security testing environment designed to help security engineers, researchers, developers, and penetration testers to identify security vulnerabilities, malicious behaviours and privacy concerns in mobile applications using static and dynamic analysis. It supports all the popular mobile application binaries and source code formats built for Android and iOS devices. In addition to automated security assessment, it also offers an interactive testing environment to build and execute scenario based test/fuzz cases against the application.
This talk covers:
Using MobSF for static analysis of mobile applications.
Interactive dynamic security assessment of Android and iOS applications.
Solving Mobile app CTF challenges.
Reverse engineering and runtime analysis of Mobile malware.
How to shift left and integrate MobSF/mobsfscan SAST and DAST in your build pipeline.
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...Pitangent Analytics & Technology Solutions Pvt. Ltd
Discover top-tier mobile app development services, offering innovative solutions for iOS and Android. Enhance your business with custom, user-friendly mobile applications.GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
Tomaz Bratanic
Graph ML and GenAI Expert - Neo4j
Generating privacy-protected synthetic data using Secludy and Milvus
During this demo, the founders of Secludy will demonstrate how their system utilizes Milvus to store and manipulate embeddings for generating privacy-protected synthetic data. Their approach not only maintains the confidentiality of the original data but also enhances the utility and scalability of LLMs under privacy constraints. Attendees, including machine learning engineers, data scientists, and data managers, will witness first-hand how Secludy's integration with Milvus empowers organizations to harness the power of LLMs securely and efficiently.
Mutation Testing for Task-Oriented Chatbots
Conversational agents, or chatbots, are increasingly used to access all sorts of services using natural language. While open-domain chatbots - like ChatGPT - can converse on any topic, task-oriented chatbots - the focus of this paper - are designed for specific tasks, like booking a flight, obtaining customer support, or setting an appointment. Like any other software, task-oriented chatbots need to be properly tested, usually by defining and executing test scenarios (i.e., sequences of user-chatbot interactions). However, there is currently a lack of methods to quantify the completeness and strength of such test scenarios, which can lead to low-quality tests, and hence to buggy chatbots.
To fill this gap, we propose adapting mutation testing (MuT) for task-oriented chatbots. To this end, we introduce a set of mutation operators that emulate faults in chatbot designs, an architecture that enables MuT on chatbots built using heterogeneous technologies, and a practical realisation as an Eclipse plugin. Moreover, we evaluate the applicability, effectiveness and efficiency of our approach on open-source chatbots, with promising results.
JavaLand 2024: Application Development Green Masterplan
My presentation slides I used at JavaLand 2024
Recently uploaded (20)
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Energy Efficient Video Encoding for Cloud and Edge Computing Instances
Essentials of Automations: Exploring Attributes & Automation Parameters
Essentials of Automations: Exploring Attributes & Automation Parameters
The Microsoft 365 Migration Tutorial For Beginner.pptx
The Microsoft 365 Migration Tutorial For Beginner.pptx
Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors
Connector Corner: Seamlessly power UiPath Apps, GenAI with prebuilt connectors
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
"Frontline Battles with DDoS: Best practices and Lessons Learned", Igor Ivaniuk
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
HCL Notes und Domino Lizenzkostenreduzierung in der Welt von DLAU
Principle of conventional tomography-Bibash Shahi ppt..pptx
Principle of conventional tomography-Bibash Shahi ppt..pptx
AppSec PNW: Android and iOS Application Security with MobSF
AppSec PNW: Android and iOS Application Security with MobSF
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...
Crafting Excellence: A Comprehensive Guide to iOS Mobile App Development Serv...
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
GraphRAG for LifeSciences Hands-On with the Clinical Knowledge Graph
Generating privacy-protected synthetic data using Secludy and Milvus
Generating privacy-protected synthetic data using Secludy and Milvus
JavaLand 2024: Application Development Green Masterplan
JavaLand 2024: Application Development Green Masterplan
Securing memcache
- 1. Securing memcache or, Tales from Encryption
- 4. Why secure memcache? • SASL authenticates • yaSSL also encrypts
- 5. Who cares? • Policy enforcement • Sensitive Data • Masking Data behind firewall
- 7. How do I use it? -T
- 8. When is it available? • Beta now
- 9. How it works N Clients N Servers memcache client memcached Tcp/ip Encrypted via streaming cipher CyaSSL CyaSSL Tcp/IP Tcp/IP
- 10. What's the Cost?
- 17. Future Performance Directions AES-NI Hardware offloading
- 18. Alice Bob
- 20. Thanks! Todd Ouska todd@yassl.com www.yassl.com Open Source Embedded SSL Libraries