Aaron Bedra
where else to find them
what they talk about
all 10 in the filters
where they keep going back
- GOTO Chicago4 editions2013–2018
all 11 in the filters
on a stage with
- Justin Collinsonce
- Matt Kondaonce
- Michael Feathersonce
who talks about the same things
- Siren Hofvander5 talks
- Chris Riley15 talks
- Niall Merrigan19 talks
- Laura Bell13 talks
- Jim Manico28 talks
- Eleanor Saitta14 talks
| title | conference | date |
|---|---|---|
| One Ring -3 To Secure Them All: Computing with Hardware Enclaves | Craft Conference 2021 | 2021-06-02 |
Trusted execution environments like Intel SGX, ARM TrustZone, Apple Secure Enclave and AWS Nitro Enclaves run sensitive code inside a protected area so the OS… | ||
| Security & Trust in a Microservices World | GOTO Chicago 2018 | 2018-04-24 |
Microservices let teams enforce data flow by classification instead of ad hoc endpoints: services get classification labels in service registry and responses… | ||
| AWS Security Essentials | CodeMash 2018 | 2018-01-09 |
Gives a checklist: enforce automation (Terraform/CloudFormation/Ansible) so humans stop clicking console buttons, restrict console logins and root use with… | ||
| It starts and ends with you | O'Reilly Software Architecture Conference 2017 - New York, New York | 2017-04-02 |
Argues that threat modeling is the concrete decision tool that turns vague security hopes into prioritized actions, using automation to surface where controls… | ||
| Layered Security | WindyCityRails 2016 | 2016-09-15 |
Advocates doing generic checks at the edge (CDN, load balancer, webserver) and specific checks at the data layer, using SSL Labs (aim for B+), HSTS and other… | ||
| Rock 'Em Sock 'Em Robots: Bot Swatting Like the Pros | GOTO Chicago 2015 | 2015-05-11 |
Covers concrete detection and mitigation techniques: detect bots by verb distribution, header order and velocity (one-second intervals in a carding example)… | ||
| Rock ‘Em Sock ‘Em Robots: Bot Swatting Like the Pros | Philly ETE 2015 | 2015-04-07 |
Claims that bot traffic skews analytics, steals data, and causes downtime; detection targets behavioral deviation not UA strings. Uses log centralization… | ||
| Deterministic Memory Management for Managed Runtimes | Strange Loop 2014 | 2014-09-17 |
Following close on the heels of heartbleed we have seen a resurgence in questioning C as the implementation choice for critical infrastructure. With… | ||
| The Future of Security isn't Preventing Attacks | GOTO Chicago 2014 | 2014-05-20 |
This presentation was recorded at GOTO Chicago 2014
http://gotochgo.com
Aaron Bedra - Senior Fellow at Groupon and Co-Author of Programming Clojure, 2nd… | ||
| Tales from the Crypt | RailsConf 2014 | 2014-04-22 |
A contrived Rails app shows concrete failures and fixes: a rollback to reenable CSRF protection after a Doge site triggers unauthorized orders, leaking up to… | ||
| clojure.web/with-security | Clojure/West 2014 | 2014-03-24 |
Clojure web apps lack a few concrete pieces: adopt crypto-password with HMAC and migration for password storage (bcrypt/scrypt/pbkdf2 plus HMAC), standardize… | ||
| Knock Knock: Understanding Who is Using Your Web Applications | GOTO Aarhus 2013 | 2013-09-30 |
Web apps face automated abuse constantly: carding runs of 10,000+ checks and months with ~1,000,000 validation attempts. The talk shows using mod_security… | ||
| Interview with | GOTO Chicago 2013 | 2013-04-23 |
Argues that security must be a cultural, design-first decision not an afterthought, showing concrete tools and incidents: a Ruby zero-day spawned a worm until… | ||
| Sploitin' with Ruby (Point, Click, Root) | RubyConf 2007 | 2007-11-02 |
Metasploit proves a Ruby framework that packages exploits, encoders and payloads so a NetBIOS/WINS ms04-045 exploit runs from ~200 lines of Ruby to a working… | ||
| nothing matches | ||