Posts tagged ‘Akamai Edge’

Video: TLS/SSL – The evolving TLS standard, new ciphers and more

November 3, 2014 8:14 pm


Akamai Chief Security Architect Brian Sniffen reviews the evolution of TLS/SSL during a presentation at Akamai Edge 2014. Following the Heartbleed vulnerability, attention turned to TLS, the fundamental...

Continue Reading

Akamai Edge 2014: Shellshock and Heartbleed Resources

October 6, 2014 3:40 am


Akamai Edge attendees will hear the names of two security vulnerabilities a lot this week: Shellshock and Heartbleed. Both shook the security industry to the core this year, and Akamai security staff spent countless hours working to protect customers against these threats.

Before Edge gets underway, here are some resources to get familiar with what we’ve done to address the threats.
More on the Web Security Track at Akamai Edge 2014:


This set of vulnerabilities is fresh on our minds. It has consumed much of the last two weeks. To keep customers informed of Akamai’s defensive measures, we created a series of articles and blog posts:

A look at two of six security holes summarized last week in six CVE advisories. These were the last two to be published late last week.

Shellshock Update
CSO Andy Ellis’ update to customers on the Shellshock situation, published Thursday afternoon.

Environment Bashing
CSO Andy Ellis’ first post regarding the threat.

Akamai Launches New Protection for Shellshock-Bash
An update on what Akamai is doing to protect customers from the Shellshock-Bash vulnerability, by Akamai Director of Product Marketing Daniel Shugrue.

Shellshock-Bash CVE List: Where Akamai Fits In
A look at all of the CVE advisories now in circulation, and how they relate to Akamai’s mitigation strategies, by Akamai CSO Andy Ellis, Akamai Chief Security Architect Brian Sniffen, and Akamai Senior Program Manager Bill Brenner.

Shellshock Bash Explained
In this podcast, Akamai’s Martin McKeay, Michael Smith and Bill Brenner discuss the Shellshock Bash bug and what Akamai is doing to keep customers secure.

Through The Bashdoor
The Shellshock story as told by Akamai’s Security Platform Statistics, by Ezra Caltum, Adi Ludmer and Ory Segal

The world awoke to the danger of Heartbleed in April, and it’s been a top-of-mind topic for Akamai and its customers ever since. The first thing worth mentioning for Edge attendees is that Akamai Chief Security Architect Brian Sniffen will give a talk on the lessons of Heartbleed. Here is the talk description:

The Evolution of TLS/SSL – Improving the Foundations of Internet Security: In the wake of the Heartbleed vulnerability, attention has turned to TLS, the fundamental building block of Internet encryption and authentication. In this session we’ll look at the evolving TLS standard and concentrate on new ciphers, authentication mechanisms, and asymmetric key changes – how they propose to impact the security of our data, and considerations for implementation and performance.

In recent months we’ve also released blog posts and a podcast outlining what Akamai has been doing to mitigate the vulnerability. All posts were written by CSO Andy Ellis:

The Brittleness of the SSL/TLS Certificate System
Despite the time and inconvenience caused to the industry by Heartbleed, its impact does provide some impetus for examining the underlying certificate hierarchy.

Podcast: CSO Andy Ellis on Heartbleed
My “lessons learned” interview with Andy.

Heartbleed: A History
A history of Heartbleed.

Heartbleed Update
During the Heartbleed crisis, we gave a series of updates in The Akamai Blog. This was the third such update, which captured all the important points.

The Power of the Community

October 3, 2014 5:38 am


A couple weeks ago, I had the pleasure to deliver an Ignite session at WebPerfDays NY. In my talk, I explained how humans have reached the top of the food chain by managing knowledge in better ways than other species (slides). One of the key differentiators in human management of knowledge is how we interact with one another socially. Bees don’t tell bees from a different beehive where to find food, but humans like to share and learn from others. This is one of the reasons why we love Internet as much as we do – wikis, social updates and blogs all provide us with real-time shared information at our fingertips.
The outcome of communities goes beyond teaching and learning interactions. It creates new ideas and leads to innovation. Think of how many ideas or solutions you can collect from just attending a conference or a Meet-Up. We can use the ideas from the presenters to solve issues we are experiencing in our environment. In addition, sharing knowledge leads to the development of new use cases for existing applications as well as the genesis of new ones. It is amazing to see what we can do when we step out of our everyday activities and have discussions about our passions and interests.

I am passionate about creating a strong technical community around Akamai where ideas can flow freely and become reality. This community is the Akamai Meet-Ups. Over the last 12-month we hosted technical discussions in more than 13 cities around the world. Each Meet-Up had a life of its own and sometimes ended up in conversations that were way beyond the original topic. It is brainpower at its best.

Join this growing community at the Akamai Edge and attend our Meet-Ups lunch on Oct 9th. During these birds of a feather sessions you can learn from experts, share experiences with other Akamai customers, discuss innovative ideas, and anything in between. Simply grab a chair at any of the thematic tables below and let us know what’s on your mind.

  • Keeping pace with attack trends and defense strategies
  • Hidden Features of the Edge: Offload
  • Responsive Web Design
  • Is your website ready for an onrush of traffic?
  • Addressing the Challenges of Online Media (Media Workflow)
  • Object Store (New NetStorage)
  • Front End Optimization
  • Mobile Optimization

See you soon!

Our Strongest Lineup Yet: Digital Entertainment at Akamai Edge 2014

September 23, 2014 8:45 am


We are so excited about Akamai Edge this year that we simply can’t wait to share some details.

The 2014 Digital Entertainment lineup at Akamai Edge boasts world-class speakers ready to share their knowledge and expertise starting Wednesday October 8. The program will cover live events, monetization, devices and much more.
Here is a preview of the confirmed lineup for the Media & Entertainment track:

Keynote: Delivering the World Cup – FIFA called it “the biggest multimedia sporting event in history.” Hear Alexander Leschinsky, co-founder, managing director at G&L, talk about the services used for video delivery, live encoding architecture, device distribution, traffic patterns and peak usage challenges.

Panel Discussion: The Return on Quality in Video – Delivering content at the highest possible quality comes with a cost – so what’s the return? This panel will feature leading media companies sharing their strategies to ensure the video they deliver looks its best across devices and networks, how they measure quality and its impact, and how to optimize the viewing experience to the benefit of their bottom line.

Keynote: Keeping the Internet from breaking – BBC’s Neil Drennan takes a look at the explosive growth of video on the internet and what it means for ISPs, CDNs and content providers. While reviewing the current evolution in technology to support video growth he asks the question: Are the planned changes enough and what else can we do as technologists/content providers to improve user experience?

Panel Discussion: Taking Advantage of New Opportunities in Video Monetization – Join a select group of experts who will examine current monetization methods such as subscriptions and advertising, identify the challenges that these models present, and explore new and innovative strategies that may emerge as consumption of online content continues its exponential growth.

Keynote: Designing a Next-Gen Live Streaming Platform – Mike Sepso, co-founder and president of Major League Gaming (MLG), will discuss the creation of, the next-gen live streaming platform reaching a hyper-engaged audience of millions in 170 countries. Join him to learn how MLG has been able to scale throughput/consumption by 1,700% over the first six months and make them the industry leader in their space.

In addition to those you can join the Digital Entertainment track to hear a discussion around devices, a session on the evolution of video workflows, and an in-depth look at MPEG-DASH, plus a couple of technical sessions and even a Media-focused luncheon. Look for descriptions in the mobile app.

We look forward to seeing you in Miami!


September 17, 2014 6:12 am


It’s that time of year, and again I have the pleasure of participating in two Edge conferences: The panel-based EdgeConf conference in San Francisco this Saturday (Sep 20th) and the Akamai customer conference, Akamai Edge, in Miami on Oct 8-10.

Both conferences are going to be a blast, and I’m looking forward to both.

EdgeConf – Panels FTW!

If you can make it to SF on the 20th, you can try to get one of the last EdgeConf tickets – but you should move quickly! You’re guaranteed to get a series of thought provoking panels, some great networking opportunities, and a fun after party at the Akamai offices :).

If you can’t be there in person, I’d encourage you to help influence the topics we’ll discuss by submitting or voting on questions on Google Moderator.

Akamai Edge – Technologist Track

If you’re an Akamai customer, or considering becoming one, you should check out Akamai Edge. There’ll be lots of great presentations both from Akamai about our technologies and data and from Akamai customers sharing their business and technology stories.

In addition, I’m happy to share we’re dramatically expanding the thought leader track this year. Last year, we had 4 great presentations in the “Developer Track” by Gene Kim, Jason Grigsby, Josh Clark and Geoff Moore. The talks were so well received that this year we doubled the length of the track!

Here’s what we have lined up for the upcoming and awesome (newly named) 2014 Technologist Track:

  • The Perfect Image Optimization Toolbox – Kornel Lesinski (@pornelski) will teach us all about image compression, the value it brings and the tools that can get it done.
  • Responsive & Fast: Iterating Live on a Modern RWD Site – Colin Bendell (@colinbendell) will take an RWD site suffering from typical performance problem and optimize it, live, in an hour and half, demonstrating how you can be responsive & fast.
  • A Modern Approach to Application Monitoring – Cliff Crocker (@cliffcrocker) will help us determine how fast or slow we really are, and how to combine RUM and synthetic monitoring to do so.
  • Keeping It Real: Sustainable Infrastructure – Mike Rembetsy (@mrembetsy) & Katie Hunt-Morr (@HuntMorr) will show us how Etsy stays environmentally responsive alongside excelling at ops, and how they’re pushing their vendors to do the same.
  • The Future of Web Performance: Are Today’s Good Practices Tomorrow’s Performance Anti Patterns? – Andy Davies (@andydavies) will explain how web innovations such as mobile and HTTP2 affect our coding best practices, and what we should do to be future friendly.
  • IPv6: What You Need To Know – Erik Nygren will show how IPv6 adoption has turned a corner, and point out what are the most important things we should know and do about it.
  • Making HTTP2 Operable and Performant – Jeff Zitomer will help set us up for the upcoming availability of HTTP2, and show us how to make the most of this first major evolution of HTTP in years.

As you can see, some amazing speakers and amazing topics, which I’m sure will keep building up this thought leadership track within Akamai Edge.

If you’re an Akamai customer (or talking to someone about becoming one) and haven’t registered for Edge yet, you can fix that right now! Register today!

Akamai Edge 2014: A Look at the Web Security Track

September 8, 2014 3:29 am


This time next month, I’ll be at the Akamai Edge customer conference. It’s a terrific opportunity to meet face-to-face with a lot of our customers and get their feedback on what’s working for them and what we can improve upon. A robust Web Security track of talks is planned, and I’ll be blogging about it.

Before that, I’ll be preparing some advance blog posts to give attendees a preview. This is the first such post — a glimpse at what’s on the schedule. Going forward, I’ll do previews of specific talks.

The security track will run each day of Edge. Here’s a partial list of what’s planned:

Wednesday, Oct. 8:

1:30-2 p.m.

  • Million Browser Botnet – Live Demonstration
  • DDoS Simulation LAB – How To Conduct a Live DDoS Simulation

2:20-3 p.m.

  • Incident Response Panel – From Theory to Reality
  • SSL LAB – What App Owners and Security Professionals Need To Do to Prepare for SSL Evolution

3:10-3:50 p.m.

  • The Evolution of SSL – Improving the Foundations of Internet Security, with Akamai PLXsert Manager David Fernandez
  • Security API LAB – Controlling Security at Akamai’s Edge

4-4:40 p.m.

  • The Growing Importance of Cybersecurity

Thursday, Oct. 9:

1:30-2:10 p.m.

  • Disruptive Trends in Security, with Securosis CTO Adrian Lane
  • SSL LAB – What App Owners and Security Professionals Need To Do to Prepare for SSL Evolution

2:20-3 p.m.

  • Security API LAB – Controling Security at Akamai’s Edge
  • Security Panel – Towards Security and Operations Harmony

3:10-3:50 p.m.

  • DDoS Simulation LAB – How To Conduct a Live DDoS Simulation
  • Using Client Reputation to Enhance Security, with Akamai Director of Threat Research Ory Segal

Friday, Oct. 10:

9-9:40 a.m.

  • SSL LAB – What App Owners and Security Professionals Need To Do to Prepare for SSL Evolution
  • Bypass Surgery – Akamai’s Heartbleed Response Case Study, with Akamai Chief Security Architect Brian Sniffen

9:50-10:30 a.m.

  • 2014 DDoS Threat Report, with Akamai PLXsert Manager David Fernandez