Eric Brandwine

Navigate the intersection of AI and security culture in this practical session. Learn how security teams can effectively embrace AI innovation through incremental steps and validation techniques.

Researchers at the DEF CON 33 security conference shared that Amazon RDS successfully defended against their novel attack, despite the underlying open source database engine not releasing patches at the time.

In this session, learn how AWS uses scale and deep ownership of network infrastructure to deliver unique protections for customers. Explore how AWS has instrumented its network, telemetry, and threat intelligence.

Thirty years ago, people were building their own cryptographic solutions; fifteen years ago, people were building their own authentication solutions; today, many people are building their own authorization solutions.

Every day, sites around the world authenticate their callers. That is, they verify cryptographically that the requests are actually coming from who they claim to come from.

The AWS Automated Reasoning Group focuses on strengthening the security foundations of AWS and provides customers with tools to verify their own security posture. In this session, we discuss the evolution of automated reasoning technology at AWS and how it works in the services in which it is embedded, including Amazon Simple Storage Service (Amazon S3), AWS Config, and Amazon Macie.

In January 2018, the world learned about Spectre and Meltdown, a new class of issues that affects virtually all modern CPUs via nearly imperceptible changes to their micro-architectural states and can result in full access to physical RAM or leaking of state between threads, processes, or guests. In this session, we examine one of these side-channel attacks in detail and explore the...