THREADS Conference

Cyber Security Awareness Week (CSAW) is the largest student-run cyber security event in the nation, with a research conference that attracts some of the biggest names in the industry, and a career fair with an impressive list of corporate partners. It’s a weekend of competitions, keynote talks and cyber security events, designed to prepare best-performing students with the skills and knowledge to shape the future of the industry.THREADSTHREADS is an annual conference that focuses on pragmatic security research and new discoveries in network attack and defense. Held each year during NYU-Poly's Cyber Security Awareness Week (CSAW) in Brooklyn, NY, THREADS is organized by NYU-Poly Hacker in Residence Dan Guido with the help of cyber security students at the university.THREADS aims to present and discuss cutting edge, peer reviewed, industrial and academic research in computer and network security. THREADS focuses on developments and advances in attack techniques and attacker methodologies. We want to discuss what vulnerabilities exist and how attackers of today and tomorrow exploit those vulnerabilities.

NYU-Poly CSAW

<H2>THREADS 2014: Scaling Security</H2>
Every day we trust more about our lives and our society to internetworked information systems. The development of these systems is accelerating in pace and increasing in complexity -- it is now common to deploy code multiple times per minute to worldwide production systems. To cope with this increasing complexity, more development and deployment tasks are becoming fully automated.
Security must be a core part of our new technology and fully integrated into an increasingly automated development and deployment model. THREADS will present new research and workshops about integrating security into modern software development and operations.
<H2>Security Automation</H2>
Companies such as Amazon and Netflix deploy code to worldwide production systems several times per hour. Tesla automobiles download software updates over the Internet to provide new functionality. An Internet-connected thermostat is a best-selling home automation gadget.
Traditional models of security are increasingly irrelevant in a rapidly updated world of Internet-connected devices. Gating deployments by manual security assessments would erase the point of agile development and continuous deployment. Endpoint security products can’t target rapidly updated customized embedded platforms like cars and thermostats. The new model of security has to focus on automation, integration, detection and response time.
This year’s THREADS conference will focus on how to automate security. The goal of automating security is to ensure that security is never a roadblock, but a core part of development and operations. The success of automated security is essential to our ever more internetworked society and devices.
<H3>Thursday, November 13 - Research</H3>
The research portion of THREADS will discuss the latest academic and industrial advances in security automation for the identification of errors in programs and intrusions in networks. This will include dynamic and static analysis, symbolic execution and constraint solving, data flow tracking and fuzz testing, host and network monitoring, and related technologies. This research advances the state of the art in reasoning about applications and systems to discover security vulnerabilities, identify flaws in applications, and formulate effective defenses.
<UL>
<LI>Static Translation of X86 Instruction Semantics to LLVM With McSema (Trail of Bits)</LI>
<LI>Smten and the Art of Satisfiability-based Search (SRI Internation)</LI>
<LI>Reverse All the Things with PANDA (Columbia University)</LI>
<LI>Transparent ROP Detection using CPU Performance Counters (Intel & Harvard University)</LI>
<LI>Code Pointer Integrity (Stony Brook University)</LI>
<LI>Reasoning about Optimal Solutions to Automation Problems (Veracode)</LI>
<LI>Improving Scalable, Automated Baremetal Malware Analysis (GTISC)</LI>
</UL>
<H3>Friday, November 14 - Development</H3>
The development portion of THREADS will discuss strategies to integrate security into your development pipeline: what automated analysis tools are available, how to integrate them with developers, and how to provide feedback to developers that encourage reporting instead of assigning blame. Other talks will show you how to add security monitoring triggers to existing monitoring infrastructure, and how to tune these triggers to information attackers want to steal. Our focus is on practical examples and lessons learned when automating security.
<UL>
<LI>Building Your Own DFIR Sidekick (Github)</LI>
<LI>CRITs: Collaborative Research Into Threats (MITRE)</LI>
<LI>Cleaning Up the Internet with Scumblr and Sketchy (Netflix)</LI>
<LI>GitHub AppSec: Keeping up with 111 prolific engineers (Github)</LI>
<LI>Augmenting Binary Analysis with Python and Pin (Etsy & NYU-Poly)</LI>
<LI>Are attackers using automation more efficiently than defenders? (ESET)</LI>
<LI>Automatic Application Security @twitter (twitter)</LI>
<LI>Operating system analytics and host intrusion detection at scale (Netflix)</LI>
<LI>How Yelp Makes Sense of CSP Reports @ Scale (Yelp)</LI>
</UL>

Pfizer Auditorium

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

THREADS Conference

More events from NYU-Poly CSAW

Discover more events from NYU-Poly CSAW, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all events in Brooklyn and filter by date, category, and more to find the perfect fit.

THREADS Conference

More events from NYU-Poly CSAW

Discover more events from NYU-Poly CSAW, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all events in Brooklyn and filter by date, category, and more to find the perfect fit.