SACK TCP Flaws Can Crash, Slow Down Linux-based Systems

Name: BSidesBHAM
Start: 2019-10-12T00:00:00-04:00
End: 2019-10-12T23:59:59-04:00
Location: Birmingham

Posted: 06/25/2019 | Leave a Comment

An engineering manager at Netflix has unearthed several TCP networking vulnerabilities in Linux and FreeBSD kernels that could lead to systems crashing or consuming too many resources and (consequently) slowing down.

https://www.helpnetsecurity.com/2019/06/18/linux-sack-tcp-flaws/

CSIAC Journal - Resilient Industrial Control Systems (ICS) & Cyber Physical Systems (CPS)

This edition of the CSIAC Journal focuses on the topic of cybersecurity of Cyber-Physical Systems (CPS), particularly those that make up Critical Infrastructure (CI).

Read the Journal

CSIAC Report - Evolving Developments in Cyberlaw:
June 2019

CSIAC SME and member of the American Bar Association’s Information Security Committee, Richard “Rick” Aldrich, gives an updated snapshot of evolving developments in cyberlaw, policy, standards, court cases and industry legal frameworks. These slides provide updates to an earlier report on cyberlaw from March of 2019.

View the Slides

CSIAC Journal - Artificial Intelligence

This edition of the CSIAC Journal highlights three very different views of complex situations where AI might, should, and does intersect with our ability to use AI effectively.

Read the Journal

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Report - JFAC/DAU/CSIAC Cyber Experiment (CYBEX)

This report details key concerns discussed during the JFAC/DAU/CSIAC Software Assurance (SwA) Cyber Experiment (CYBEX). In addition to evaluating newly developed SwA guides for program managers and developers, the exchange included addressing/bringing back foundational software/system engineering concepts to address root of fundamental SwA issues as well as adopting common language in the areas of functionality and risk in order to identify issues early.

Read the Report