Full Stack Engineering : Cryptographic Operations and Incident Response

A workshop on the operational lifecycle of cryptographic
infrastructure — what happens after you build it. We cover certificate
lifecycle management at scale, key rotation, revocation (and why it's
broken in practice), recovery and multi-party custody, crypto-agility
and migration patterns, and incident response. Two tabletop exercises
form the backbone: responding to a leaked signing key, and managing a
major CA distrust event. Real case studies (DigiNotar, LastPass,
Heartbleed) are woven throughout. The most operational of the
workshops in the series, and the most likely to leave you with a list
of gaps in your own systems.

Security engineers and architects who own cryptographic
infrastructure, SREs and platform engineers who keep systems running
through cryptographic events, incident responders, compliance and
audit professionals evaluating cryptographic posture, and engineering
leaders budgeting for cryptographic operations. Developers benefit
from this workshop because it illustrates what operations needs from
the code they write. You should be familiar with the cryptographic
primitives covered in the Full Stack Engineering : Cryptography in Practice workshop (KMS, HSMs, signatures,
certificates); you don't need to be a cryptographer.

About Brian Sletten

Brian Sletten is a liberal arts-educated software engineer with a focus on forward-leaning technologies. His experience has spanned many industries including retail, banking, online games, defense, finance, hospitality and health care. He has a B.S. in Computer Science from the College of William and Mary and lives in Auburn, CA. He focuses on web architecture, resource-oriented computing, social networking, the Semantic Web, AI/ML, data science, 3D graphics, visualization, scalable systems, security consulting and other technologies of the late 20th and early 21st Centuries. He is also a rabid reader, devoted foodie and has excellent taste in music. If pressed, he might tell you about his International Pop Recording career.

More About Brian »