Securing memcache

•

2 j'aime•2,703 vues

Slides from Todd Ouska's presentation on Secure Memcache at OSCON 2010. To learn more about secure memcache or the CyaSSL embedded SSL library, visit www.yassl.com.

Technologie Formation

Securing memcache or,
Tales from Encryption

Why secure memcache?

•  SASL authenticates
•  yaSSL also encrypts

Who cares?
•  Policy enforcement
•  Sensitive Data
•  Masking Data behind firewall

How it works

N Clients N Servers

memcache client memcached
Tcp/ip Encrypted via streaming cipher

CyaSSL CyaSSL

Tcp/IP Tcp/IP

Future Performance Directions

AES-NI

Hardware offloading

Thanks!

Todd Ouska
todd@yassl.com
www.yassl.com
Open Source Embedded SSL Libraries

Recommandé

yaSSL 2010-2011 Technical and Community UpdatewolfSSL

Securing MySQL with a Focus on SSLwolfSSL

wolfSSL Year In Review, 2013wolfSSL

Secure Communication: Usability and Necessity of SSL/TLSwolfSSL

Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus LinuxCumulus Networks

A Complete Guide to VPS HostingAnurag Sharma

OVHcloud Startup Program : Découvrir l'écosystème au service des startups OVHcloud

Does Hypervisor matter in OpenStackNermina Miller

Recommandé

yaSSL 2010-2011 Technical and Community UpdatewolfSSL

Securing MySQL with a Focus on SSLwolfSSL

wolfSSL Year In Review, 2013wolfSSL

Secure Communication: Usability and Necessity of SSL/TLSwolfSSL

Unlock Your Cloud Potential with Mirantis OpenStack & Cumulus LinuxCumulus Networks

A Complete Guide to VPS HostingAnurag Sharma

OVHcloud Startup Program : Découvrir l'écosystème au service des startups OVHcloud

Does Hypervisor matter in OpenStackNermina Miller

BrownBag - vCloud NetworkingProfessionalVMware

NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...Cisco DevNet

VMUG.IT Meeting Napoli - OpeningAndrea Mauro

Introduction to Internet of ThingsNagasai Arun Panchakarla

Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to KnowStorage Switzerland

Exploring the OVHcloud Hosted Private CloudOVHcloud

Nimbus New Vision (Apr 2010)jrodrigues3

SUTOL 2016 - Secure IBM Traveler for 2017Ales Lichtenberg

Brkcrt 1160 c3-rev2Solomon Abavire Kobina,

$Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...$ $Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...$

Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...Компания УЦСБ

Data models-and-automation-jpMiya Kohno

Discover the OVH Dedicated Cloud WebinarOVHcloud

Using vSAN technology for hosted private cloud storageOVHcloud

VIO30 Technical OverviewJulienne Pham

Tokyo meetup 20160224Takao Setaka

Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...StarWind Software

Webpage Caches - the big picture (WordPress too)Erich

Zaccone Carmelo - IPv6 and security from a user’s point of view IPv6 Conference

Open solaris customer presentationxKinAnx

Ceph Day Shanghai - Hyper Converged PLCloud with Ceph Ceph Community

Difference between ECC and RSA PublicKeytriptigoyaal

Random musings on SSL/TLS configurationextremeunix

Contenu connexe

Tendances

BrownBag - vCloud NetworkingProfessionalVMware

NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...Cisco DevNet

VMUG.IT Meeting Napoli - OpeningAndrea Mauro

Introduction to Internet of ThingsNagasai Arun Panchakarla

Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to KnowStorage Switzerland

Exploring the OVHcloud Hosted Private CloudOVHcloud

Nimbus New Vision (Apr 2010)jrodrigues3

SUTOL 2016 - Secure IBM Traveler for 2017Ales Lichtenberg

Brkcrt 1160 c3-rev2Solomon Abavire Kobina,

Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...Компания УЦСБ

Data models-and-automation-jpMiya Kohno

Discover the OVH Dedicated Cloud WebinarOVHcloud

Using vSAN technology for hosted private cloud storageOVHcloud

VIO30 Technical OverviewJulienne Pham

Tokyo meetup 20160224Takao Setaka

Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...StarWind Software

Webpage Caches - the big picture (WordPress too)Erich

Zaccone Carmelo - IPv6 and security from a user’s point of view IPv6 Conference

Open solaris customer presentationxKinAnx

Ceph Day Shanghai - Hyper Converged PLCloud with Ceph Ceph Community

Tendances (20)

BrownBag - vCloud Networking

NetDevOps for the Network Dude: How to get started with API's, Ansible and Py...

VMUG.IT Meeting Napoli - Opening

Introduction to Internet of Things

Webinar: NVMe, NVMe over Fabrics and Beyond - Everything You Need to Know

Exploring the OVHcloud Hosted Private Cloud

Nimbus New Vision (Apr 2010)

SUTOL 2016 - Secure IBM Traveler for 2017

Brkcrt 1160 c3-rev2

Обзор новой СХД EMC Unity. Планирование обновления с VNX\VNX2, Тимофей Григор...

Data models-and-automation-jp

Discover the OVH Dedicated Cloud Webinar

Using vSAN technology for hosted private cloud storage

VIO30 Technical Overview

Tokyo meetup 20160224

Make your storage work for you: VAAI and ODX offload up to 30% of disk operat...

Webpage Caches - the big picture (WordPress too)

Zaccone Carmelo - IPv6 and security from a user’s point of view

Open solaris customer presentation

Ceph Day Shanghai - Hyper Converged PLCloud with Ceph

Similaire à Securing memcache

Difference between ECC and RSA PublicKeytriptigoyaal

Random musings on SSL/TLS configurationextremeunix

Emily Stamm - Post-Quantum CryptographyCSNP

Crypto Strikes Back! (Google 2009)Nate Lawson

Efficient Spark Analytics on Encrypted Data with Gidon GershinskyDatabricks

Secure Socket Layerdwitigajab

Where Django Caching Bust at the SeamsConcentric Sky

Cloud Data Encryption (Aluhut Edition) - 2019Matthias Grawinkel

DESIGN%20AND%20IMPLEMENTATION%20OF%20DATA%20SECURITY%20USING%20ADVANCED.pptxDharani675311

Unsafe SSL webinarWolfgang Kandek

Yair Hershko - Building Software Defined Storage Cloud Using OpenStackCloud Native Day Tel Aviv

SqlvikingJonn Callahan

MySQL Cluster NoSQL Memcached APIMat Keep

ApacheCon: Apache Commons Crypto 2017Dapeng Sun

Steve Jones - Encrypting DataRed Gate Software

SSL Checklist for Pentesters (BSides MCR 2014)Jerome Smith

Using encryption with_awssaifam

Barbican 1.0 - Open Source Key Management for OpenStackjarito030506

AdGear Use Case with Scylla - 1M Queries Per Second with Single-Digit Millise...ScyllaDB

Reinventing anon emailantitree

Similaire à Securing memcache (20)

Difference between ECC and RSA PublicKey

Random musings on SSL/TLS configuration

Emily Stamm - Post-Quantum Cryptography

Crypto Strikes Back! (Google 2009)

Efficient Spark Analytics on Encrypted Data with Gidon Gershinsky

Secure Socket Layer

Where Django Caching Bust at the Seams

Cloud Data Encryption (Aluhut Edition) - 2019

DESIGN%20AND%20IMPLEMENTATION%20OF%20DATA%20SECURITY%20USING%20ADVANCED.pptx

Unsafe SSL webinar

Yair Hershko - Building Software Defined Storage Cloud Using OpenStack

Sqlviking

MySQL Cluster NoSQL Memcached API

ApacheCon: Apache Commons Crypto 2017

Steve Jones - Encrypting Data

SSL Checklist for Pentesters (BSides MCR 2014)

Using encryption with_aws

Barbican 1.0 - Open Source Key Management for OpenStack

AdGear Use Case with Scylla - 1M Queries Per Second with Single-Digit Millise...

Reinventing anon email

Plus de wolfSSL

FIPS 140-2 Validations in a Secure EnclavewolfSSL

wolfSSL TLS 1.3 Support in 2018wolfSSL

wolfSSL Performance Improvements 2018wolfSSL

wolfSSL and TLS 1.3wolfSSL

Securing Data in Transit - wolfSSL

Kerberos + Android: A Tale of OpportunitywolfSSL

Plus de wolfSSL (6)

FIPS 140-2 Validations in a Secure Enclave

wolfSSL TLS 1.3 Support in 2018

wolfSSL Performance Improvements 2018

wolfSSL and TLS 1.3

Securing Data in Transit -

Kerberos + Android: A Tale of Opportunity

Dernier

TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey

DSPy a system for AI to Write Prompts and Do Fine TuningLars Bell

Powerpoint exploring the locations used in television show Time Clashcharlottematthew16

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada

Gen AI in Business - Global Trends Report 2024.pdfAddepto

Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos

Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed

H2O.ai CEO/Founder: Sri Ambati Keynote at Wells Fargo DaySri Ambati

Human Factors of XR: Using Human Factors to Design XR SystemsMark Billinghurst

Artificial intelligence in cctv survelliance.pptxhariprasad279825

Designing IA for AI - Information Architecture Conference 2024Enterprise Knowledge

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...Fwdays

Advanced Computer Architecture – An IntroductionDilum Bandara

"Debugging python applications inside k8s environment", Andrii SoldatenkoFwdays

How to write a Business Continuity PlanDatabarracks

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays

Developer Data Modeling Mistakes: From Postgres to NoSQLScyllaDB

What's New in Teams Calling, Meetings and Devices March 2024Stephanie Beckett

TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc

Commit 2024 - Secret Management made easyAlfredo García Lavilla

Dernier (20)

TeamStation AI System Report LATAM IT Salaries 2024

DSPy a system for AI to Write Prompts and Do Fine Tuning

Powerpoint exploring the locations used in television show Time Clash

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024

Gen AI in Business - Global Trends Report 2024.pdf

Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)

Scanning the Internet for External Cloud Exposures via SSL Certs

H2O.ai CEO/Founder: Sri Ambati Keynote at Wells Fargo Day

Human Factors of XR: Using Human Factors to Design XR Systems

Artificial intelligence in cctv survelliance.pptx

Designing IA for AI - Information Architecture Conference 2024

"LLMs for Python Engineers: Advanced Data Analysis and Semantic Kernel",Oleks...

Advanced Computer Architecture – An Introduction

"Debugging python applications inside k8s environment", Andrii Soldatenko

How to write a Business Continuity Plan

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack

Developer Data Modeling Mistakes: From Postgres to NoSQL

What's New in Teams Calling, Meetings and Devices March 2024

TrustArc Webinar - How to Build Consumer Trust Through Data Privacy

Commit 2024 - Secret Management made easy

Securing memcache

1. Securing memcache or, Tales from Encryption

2. What's memcache?

3. Who’s big idea?

4. Why secure memcache? •  SASL authenticates •  yaSSL also encrypts

5. Who cares? •  Policy enforcement •  Sensitive Data •  Masking Data behind firewall

6. The Cloud Cares

7. How do I use it? -T

8. When is it available? •  Beta now

9. How it works N Clients N Servers memcache client memcached Tcp/ip Encrypted via streaming cipher CyaSSL CyaSSL Tcp/IP Tcp/IP

10. What's the Cost?

11. Database Performance

12. memcache Performance

13. AES-256 Performance

14. Stream RC4 Performance

15. HC-128 Performance

16. MD5 HC-128 Performance

17. Future Performance Directions AES-NI Hardware offloading

18. Alice Bob

19.

20. Thanks! Todd Ouska todd@yassl.com www.yassl.com Open Source Embedded SSL Libraries