dotSecurity 2017
who it's for
security engineers, web developers, devops engineers, engineering managers, cryptographers, site reliability engineers, product security teams
topics
post-quantum cryptography; McEliece code-based encryption; AES-256 for bulk encryption; DNS-based reputation filtering; response policy zones; TLS 1.3 deployment issues; secure software development lifecycle; static code analysis automation; ember XSS mitigations; custom ESLint and template linting; collective signature protocols; cryptographic randomness beacons
| title | author | length |
|---|---|---|
| Post-Quantum Cryptography | Tanja Lange | 19m |
By 2025 big quantum machines could exist and attackers who record today’s traffic can decrypt it later: Shor’s algorithm breaks RSA DH and elliptic curves, so… | ||
| Names and Security | Paul Mockapetris | 19m |
Names replace addresses as the unit of identity and attackers exploit DNS for amplification, homograph spoofing and fast-changing lookups. A deployed approach… | ||
| Secure Software Development Lifecycle | Jim Manico | 20m |
Advocates publishing a simple SDLC as the Brown M&M — a quick checklist that signals whether safety practices exist, and tailoring ASVS (≈200 requirements)… | ||
| Encryption vs. Inspection | Nick Sullivan | 17m |
Research shows that authorized man‑in‑the‑middle systems including antivirus and corporate proxies measurably reduce TLS security, reintroducing downgrade and… | ||
| Counter-spells and the art of keeping your application safe | Ingrid Epure | 20m |
Intercom runs a four‑year‑old Ember front end with Rails, 55 authors with >250 commits each producing ~2,000 file changes, 30,000 additions and 22,000… | ||
| Collective Authorities: Transparency & Decentralized Trust... | Philipp Jovanovic | 19m |
Claims a working system for collective signatures that aggregates many witness attestations into one compact, efficiently verifiable signature. Uses a… | ||
| Verifiable lotteries | Joseph Bonneau | 20m |
Claims that authorities can produce verifiable random outcomes using a cryptographic randomness beacon backed by public blockchains or alternative public data… | ||
| The Digital Battle | Mikko Hypponen | 21m |
Claims that Yahoo exposes one billion accounts and loses value by 350 million dollars in an acquisition cut; a survey finds only six companies actually fold… | ||
| DevOps and Security | Zane Lackey | 16m |
Argument: security shifts from gatekeeper to enabler by embedding checks in the SDLC and giving teams tools to secure code as they write it. Practicals… | ||
| nothing matches | ||