Schedule: Building Secure Systems sessions

Liz Rice empowers you to start writing extended Berkeley Packet Filter (eBPF) programs so you can unleash what has been described as superpowers for Linux. Read more.

Build pipelines are commonly used in the industry to build and roll out changes to cloud accounts. Typically, wide permissions are granted to those systems, making them an interesting attack vector. Take a look with Andreas Sieferlinger at typical vulnerabilities and examine the case of the confused deputy—a trusted third-party party—and how these vulnerabilities can be mitigated in real-life. Read more.

Time and money are generally the resources we focus on when building applications. Yet we can’t buy trust; it builds slowly and can be broken quickly when we don’t factor it in to our development process. Jennifer Davis examines how to leverage security practices to enable an all-team approach to security. Read more.

GDPR was likely one of the biggest challenges in data management that occurred in 2018. Yulia Trakhtenberg dives into a one-year retrospective about how it was executed in reality at a large-scale data organization. Read more.