The Risks of RDP and How to Mitigate Them
Explore RDP security risks, attacks, and mitigation strategies. Learn to deploy secure RDP servers and detect potential threats in Windows remote environments.
Breaking Fraud and Bot Detection Solutions
Demystifying browser fingerprinting and user behavior tracking in fraud detection, exploring vulnerabilities, and demonstrating proof-of-concept attacks against these defense mechanisms.
A Comprehensive Formal Security Analysis of OAuth 2.0
Comprehensive formal security analysis of OAuth 2.0, examining authorization, authentication, and session integrity properties, and discussing potential attacks and mitigations.
Securing Linux VM Boot with AMD SEV Measurement
Explore AMD SEV measurement for securing Linux VM boot, covering vulnerabilities, solutions, and future plans in confidential computing environments.
JavaScript Skimmers, Formjacking and Magecart - All You Need to Know
Explore JavaScript skimmers, formjacking, and Magecart attacks. Learn detection techniques, infection methods, and mitigation strategies to protect against data theft and financial penalties.
Red Vs. Blue - Modern Active Directory Attacks, Detection, And Protection
Explore advanced Active Directory attack methods, detection techniques for Golden and Silver Tickets, and effective mitigation strategies. Learn to identify and protect against sophisticated network intrusions.
One Year After a Major Attack at DefCamp 2018
Análisis retrospectivo de un ataque cibernético significativo ocurrido en DefCamp 2018, examinando sus consecuencias y lecciones aprendidas un año después.
Gattacking Bluetooth Smart Devices - Introducing a New BLE Proxy Tool
Explore BLE security vulnerabilities and learn to intercept communication between smart devices using a new open-source MITM proxy tool. Discover common flaws and best practices for IoT device security.
Scatter and Split Securely - Defeating Cache Contention and Occupancy Attacks
Learn techniques to protect against cache contention and occupancy attacks, enhancing system security through innovative data scattering and splitting methods.
Social Engineering - Phishing Stories
Explore real-world phishing stories and their impact on social engineering engagements, covering attack basics and types for effective cybersecurity awareness.
Multiple Handshakes Security of TLS 1.3 Candidates
Explores security aspects of TLS 1.3 candidates, focusing on multiple handshake protocols. Introduces a multi-level security model and proves the soundness of TLS 1.3 security design.
Method Confusion Attack on the Bluetooth Pairing Process
Uncover vulnerabilities in Bluetooth pairing through method confusion attacks, exploring potential security risks and implications for wireless device connections.
Runtime Recovery of Web Applications under Zero-Day ReDoS Attacks
Explore techniques for protecting web applications against zero-day ReDoS attacks, focusing on runtime recovery strategies to maintain system functionality and security.
Point of Sale System Architecture and Security
Explore POS system architecture, integrated payment processing, and security vulnerabilities. Learn attack vectors and mitigation strategies to protect businesses from financial breaches.
You Got Your SQL Attacks In My Honeypot
Explore SQL injection attacks and honeypot defense strategies with insights on detecting, analyzing, and mitigating database vulnerabilities in web applications.
Horizontal Side Channel Attacks and Countermeasures on the ISW Masking Scheme
Explore horizontal side channel attacks on ISW masking scheme, examining vulnerabilities and potential countermeasures to enhance cryptographic security.
Owned By Statistics - How Kubeflow & MLOps Can Help Secure Your ML Workloads
Explore MLOps and Kubeflow to secure machine learning workflows, mitigate risks, and enhance reproducibility, validation, and deployment in production environments.