AUDACIOUS - User-Driven Access Control with Unmodified Operating Systems
Explore user-driven access control for unmodified operating systems, enhancing security without system modifications. Learn about AUDACIOUS and its implementation for improved data protection.
Draco - A System for Uniform and Fine-grained Access Control for Web Code on Android
Explore Draco, a system for fine-grained access control of web code on Android, enhancing security and privacy for mobile applications and users.
Investigating and Breaking Widevine on QTEE
Explore vulnerabilities in Widevine DRM on Qualcomm's QTEE, uncovering security flaws and exploiting them to extract sensitive data from trusted storage. Learn advanced techniques in reverse engineering and exploit development.
Docker Security
Explore Docker's impact on DevOps, its benefits, and security concerns. Learn about container technology, identity management, and emerging solutions in the Docker ecosystem.
Towards Security and Privacy for Multi-User Augmented Reality - Foundations with End Users
Exploring security and privacy challenges in multi-user augmented reality through a qualitative study with HoloLens, revealing unique concerns and design implications for immersive AR technologies.
Network Security - What About the Data
Explore network security beyond firewalls, focusing on data protection strategies like role-based access, DLP, and data classification to safeguard valuable information assets.
Vault 활용 및 통합사례 - HashiCorp Strategy Day Korea 2024
Vault의 활용 사례와 다양한 솔루션과의 통합을 통한 접근제어 고도화 방법을 소개하는 23분 길이의 영상. 실제 사례를 통해 Vault의 실용적인 적용 방법을 학습할 수 있습니다.
Babar-ians at the Gate - Data Protection at Massive Scale
Explore data protection challenges and solutions for Big Data environments, focusing on security considerations for Hadoop and emerging vulnerabilities in large-scale data management systems.
Hardening Windows 8 Apps for the Windows Store
Explore security considerations for Windows 8 Store apps, covering HTML5, backend services, cloud computing, and WinRT to ensure robust and privacy-focused mobile development.
Defense in Depth - Winning in Spite of Yourself - Foiling JD
Comprehensive Windows security strategies: from email protection to advanced IP filtering. Learn to secure systems, disable vulnerable services, and implement robust defense measures.
OAuth Tokens As Your Identity API
Explore OAuth and OpenID Connect for secure, scalable identity management in distributed systems. Learn to leverage tokens for user permissions, tracing, and delegation across complex networks.
The Jump to Hyperspace - Light Speed, User Agency, & Moving Past the Cloud
Explore local-first software architecture for simpler, faster app development. Learn about CRDTs, cryptography, and auth advancements enabling offline, peer-to-peer, and federated experiences beyond traditional cloud computing.
Access Control in Message-Driven Systems
Securing message-driven architectures: Implementing token-based access control with Open Policy Agent for asynchronous communication flows, addressing challenges of different message types and zero trust principles.
Improving Logging to Reduce Permission Over-Granting Mistakes
Explores techniques to enhance logging in server applications, aiming to reduce permission over-granting mistakes by system administrators when resolving access-deny issues.
Fun with Dr Brown Spencer McIntyre
Explore offensive techniques to bypass Windows' Enhanced Mitigation Experience Toolkit (EMET) protections, including application profiles, configuration options, and vulnerability selection.
Got Software - Need a Security Test Plan - Got You Covered
Learn to create a comprehensive security test plan for software, covering OAuth, layered security, and best practices for various security aspects.
OWASP 2014 Top 10 Proactive Web Application Controls
Explore proactive web application security controls, focusing on preventing SQL injection, XSS attacks, and implementing robust access controls and password policies.
Maturing Information Security When Compliance Doesn't Cut It
Explore strategies for maturing information security beyond compliance, focusing on business alignment, social engineering, access control, and building a robust security awareness program.
Using Behavior to Protect Cloud Servers
Explore cloud server protection through user behavior analysis, covering challenges, threats, and innovative solutions like SSH proxies and machine learning-based classification systems.
Access Control in 2016 Deep Dive
Comprehensive exploration of modern access control systems, examining current challenges, emerging technologies, and best practices for robust security implementation.
Introducing the OWASP API Security Project
Explore OWASP API Security Project, covering key vulnerabilities and best practices for securing APIs. Learn about data sanitization, access control, and preventing sensitive data exposure.