Brandon Wagner

To Appear in 1st IEEE Workshop on Cyber Resilience Economics, August 2016: Abstract—Today’s computer systems must meet and maintain service availability, performance, and security requirements. Each of these demands requires redundancy and some form of isolation. When service requirements are implemented separately, the system architecture cannot easily share common components of redundancy and isolation. We will present these service traits collectively as cyber resilience with a system called… Show more

To Appear in 1st IEEE Workshop on Cyber Resilience Economics, August 2016: Abstract—Today’s computer systems must meet and maintain service availability, performance, and security requirements. Each of these demands requires redundancy and some form of isolation. When service requirements are implemented separately, the system architecture cannot easily share common components of redundancy and isolation. We will present these service traits collectively as cyber resilience with a system called Self-Cleansing Intrusion Tolerance (SCIT). Further, we will demonstrate that SCIT provides an effective resilient cloud implementation making cost effective utilization of cloud’s excess capacity and economies of scale. Lastly, we will introduce the notion of serverless applications utilizing AWS Lambda and how a stateless architecture can drastically reduce operational costs by utilizing cloud function services. Show less

The cloud (IaaS) and DevOps has changed the way development and operations iterate. This paper explains the necessary shift in traditional security tools related to forensics and incident response. Further, I developed a preconfigured environment with docker to bootstrap a "cloud-scale" distributed incident response system called Mozilla InvestiGator (MIG).

This paper explains the importance of REST architectures exposed through public REST APIs and security mechanisms to protect access. We investigate HTTP/1.0 Basic Authentication, Token-Based Basic Authorization with JWTs, Digest Access Authentication, Custom PKI Authorization with PGP keys, and OAuth (1.0a and 2.0).

This paper presents the strengths and weaknesses of OAuth. It also investigates the controversies of OAuth 2 and recommends implementations of a specific OAuth version or another authorization protocol/framework in specific architectural situations.

Many companies are concerned about the security implications of running their servers on the Internet and relinquish direct control of their machines. This paper discusses the security implications and responsibilities of stakeholders who are migrating IT resources to the cloud. The paper focuses on AWS's shared security model and available services offered by AWS as well as security features of those services.

EdTech project that converts an informational syllabus to an interactive time management and calendar system.

A kubernetes daemonset to gracefully drain and cordon EC2 instances when EC2 scheduled maintenance events or spot interruption termination notices are received.