Filippo Berto
This project is part of the CERN OpenLab summer student programme , hosted by the BE-ICS (Beams Department, Industrial Control Systems) group. It falls under the broader Industrial Edge-Cloud and AI-based Agents initiative, a collaboration between CERN and Siemens exploring how AI can integrate with industrial control systems. We are building an AI-powered copilot agent to automate time-consuming…
Yesterday I was migrating my data from an rclone-mounted bucket to a proper OpenCloud setup backed by my home Garage S3 cluster. Things were going smoothly: files copying over, users importing, the new stack finally taking shape. Then the power went out. When the server came back, Garage refused to start. The LMDB metadata database was completely corrupted, rendering the cluster inoperable. The…
Introduction “All of ARPA’s protection has, by design, left the internal AT&T machines untested. A sort of crunchy shell around a soft, chewy center.” William R. Cheswick, The Design of a Secure Internet Gateway (1990) 1 That was 1990. We’re still dealing with the fallout. For decades, network security operated on this exact premise: everything inside the corporate…
In distributed systems, understanding what happens to a single request as it traverses multiple services is notoriously difficult. A user complaint of “the checkout is slow” could originate anywhere: a slow database query in the inventory service, network latency between containers, an overloaded authentication gateway, or a third-party payment processor. Traditional monitoring tools…
Introduction: Why Typst Matters For over four decades, LaTeX has been the gold standard for academic and technical document preparation. Its precise typesetting, excellent mathematics support, and bibliography management made it indispensable for researchers worldwide. However, LaTeX comes with significant drawbacks: a steep learning curve, cryptic error messages, slow compilation times, and…
Nix flakes provide a powerful framework for managing infrastructure as code across heterogeneous systems. In this post, I’ll walk through how I use Nix flakes to manage my infrastructure portfolio using my bertof/nix-dotfiles repository (commit 005a662 ). Understanding the Core Concepts What is Infrastructure as Code? Infrastructure as Code (IaC) is the practice of managing and provisioning…
In the world of distributed systems, managing concurrency, state, and fault tolerance is one of the most challenging problems developers face. Traditional approaches using shared memory and locks often lead to complex, error-prone code that’s difficult to reason about and scale. Actor systems offer a different paradigm that elegantly solves these problems. An actor system treats computation…
Description In today’s complex, distributed systems, effective monitoring is essential for understanding system behavior, identifying performance bottlenecks, and troubleshooting issues. This thesis aims to design, implement, and evaluate a robust metrics, logs, and traces ingestion pipeline within a Kubernetes environment, leveraging popular open-source tools. The current monitoring…
We aim to create probes to verify certain security aspects of AWS . Our scripts will gather information from AWS services and will be used as data sources for analysis. We are in the preliminary stages of our research and are currently exploring what is available and how we can utilise it. The project will cover the major security, monitoring and compliance components of AWS, i.e. CloudWatch , IAM…
Monitoring Distributed Services Filippo Berto SESAR Lab - Università degli Studi di Milano 20/05/2025 Link to the slides Agenda Why monitoring? Means of Monitoring Logging Monitoring Events Handling scalability Extensions Demo Question time Why monitoring? Quality of Service Systems’ healt status and history Alerts and prevention Resource usage Security Implementation errors User misbehavior…
The modern edge-cloud continuum data intensive workflows are increasingly based on 6G edge nodes in order to spread their diffusion relying on public network and enhanced by the use of machine learning (ML) models in order to extend their capabilities. Data intensive workflows are also glowingly used in critical scenarios such as health and IoT. In these scenarios, guarantees on the model…
MUSA Cluster monitoring and Moon Cloud integration Filippo Berto Why monitor a system? Resource allocation How many of each resources are used by each service and how many should each user/service have access to Development & Debugging Execution traces Errors/warnings Resource usage Behavior analysis Network traffic Security & QoS Assurance Enforce strong security and QoS guarantees on the…
Le nuove tecnologie edge, cloud e ibride stanno rivoluzionando il modo in cui le organizzazioni gestiscono le proprie risorse informatiche. La flessibilità e l’elasticità offerte dai servizi cloud permettono di ridurre i costi e di aumentare l’efficienza, ma al contempo introducono nuove sfide in termini di sicurezza e compliance. In questo contesto, la security assurance, ovvero la…
Le moderne architetture distribuite, caratterizzate da decentralizzazione e dalla suddivisione in microservizi, pongono sfide rilevanti nella valutazione del comportamento del sistema . Data la complessità introdotta da tali architetture, vengono richiesti sistemi di monitoraggio avanzati in grado di verificare Proprietà Non-Funzionali per valutare il comportamento dell’infrastruttura. Le…
Distributed systems have become one of the pillars of modern computing, creating the backbone for technologies like cloud computing and the Internet of Things, while supporting many of the services that run on the Internet. However, with the use of this type of systems a unique set of challenges arises, particularly about ensuring properties such as their scalability, performances, reliability,…
The advent of 5G networks has revolutionized wireless communication, offering unprecedented speed, reliability, and capacity. This advancement enables transformative use cases, such as Internet of Things (IoT) applications and satellite-based 5G communication, which extend connectivity into remote and rural areas. However, the increasing complexity of 5G network infrastructures introduces…
In the constantly evolving landscape of continuously integrated cloud-native applications, the process of security assurance has a consistently increasing importance. In order to ensure that systems are secure and behave as expected, the assurance process has to be included in the whole software lifecycle, from development to operations. Verifying non-functional security properties on assurance…
MUSA Monitoring Solution Transparent monitoring solution for multi-cluster service deployment systems Why monitor a system? Resource allocation How many of each resources are used by each service and how many should each user/service have access to Development & Debugging Execution traces Errors/warnings Resource usage Behavior analysis Network traffic Security & QoS Assurance Enforce strong…
The 1 Billion Rows Challenge is a fun optimization experiment that pushes developers to write a program in the language they prefer to solve a problem in the lowest execution time possible. You are tasked with designing and implementing a program to analyze a large-scale dataset of temperature measurements. The dataset, comprising one billion records and occupying approximately 13GB of storage,…
The environment for the Computer Network course is centered around the use of the IMUNES (Integrated Multiprotocol Network Emulator/Simulator) , which is a versatile tool for creating realistic virtual network topologies. The course utilizes a specific version of IMUNES, identified by the commit 1a9d4834baca6e31743db9e3acd2b461290e00e0 , which is significant because it’s the last version to…
Il progetto definito da questa tesi appunta uno specifico obiettivo da raggiungere, ovvero determinare la fattibilità di utilizzare un modello di linguaggio per generare configurazioni o variabili da utilizzare all’interno di una configurazione. In particolare, per questa tesi, si considera come obiettivo la generazione di configurazioni dette “Malleable C2 Profile” per il tool di red…
Nel contesto attuale della sicurezza informatica, si osserva un costante incremento degli attacchi informatici, con Ransomware e Trojan tra i più diffusi. Una caratteristica comune di questi attacchi è l’inclusione di una shellcode all’interno del loro payload. La shellcode rappresenta un elemento fondamentale del malware, e in questa sperimentazione si mostra la semplicità nel crearla…
Durante il periodo di tirocinio è stato sviluppato un tool per la rilevazione delle vulnerabilità di tipo web cache deception. Parallelamente allo sviluppo sono state studiate varianti di web cache deception specifiche, alcune delle quali mai discusse prima in letteratura, la cui metodologia di ricerca è stata implementata nel tool. Successivamente allo sviluppo, il tool è stato testato su più di…
Il numero crescente di dispositivi e sensori che richiedono connessione tra di loro, sta causando un notevole aumento delle sfide per le attuali infrastrutture di rete. Le tecnologie esistenti faticano a tenere il passo con questa progressiva domanda, che include la necessità di trasmissioni dati ad altissima velocità e latenze estremamente basse. La transizione dai sistemi monolitici (come le…
The idea behind this thesis originates from the perceived need in various sectors of the Italian economy to establish a data platform that can manage, organize, and connect different company information assets, making them available to internal or external expertise through contracts. The requirement is for a ``single point of truth’’ capable of connecting Proof of Concepts (PoCs)…