Exposing Security Flaws in Trading Technologies
Uncovers vulnerabilities in popular trading platforms, highlighting risks in electronic trading. Discusses security gaps in websites, desktop apps, and mobile apps used for stock and cryptocurrency trading.
Systematically Breaking and Fixing OpenID Connect
Explore systematic vulnerabilities and fixes in OpenID Connect, covering attack types, threat models, and countermeasures for improved authentication security.
A Developer's Guide to SAML
Learn SAML protocol essentials, implementation in modern applications, and troubleshooting tips. Gain insights into this widely-used identity security standard and its nuances across different applications.
Network Security - Kerberos Authentication Application
Explore Kerberos authentication, including secure message exchanges between clients, servers, and ticket-granting systems. Learn about mutual authentication in network security.
Integrating Identity into APIs with Okta and Kong - Developer Day 2021
Discover powerful authentication and authorization scenarios using Kong and Okta. Learn to implement sophisticated API access and management flows with OIDC and OAuth, including CI/CD pipeline integration.
Insecurity Protocols - An Overview of Modern Authentication
Explore modern authentication protocols like OpenID Connect, SAML, and WebAuthn. Learn their strengths, vulnerabilities, and real-world security implications in this comprehensive overview.
OAuth 2.0 and 2.1 Explained
Comprehensive explanation of OAuth 2.0 and 2.1 protocols, including JWT integration, for secure authorization and authentication in web applications.
Introduction to OAuth and OpenID Connect - Developer Day 2021
Hands-on workshop exploring OAuth and OpenID Connect concepts, focusing on the OAuth Authorization Code flow with PKCE. Learn to obtain access and ID tokens through practical exercises.
Identity in Browsers, Single-Page Apps, and JWT Access Tokens - OAuth Happy Hour
Live Q&A session exploring OAuth and OpenID Connect, covering browser-based apps, JWT tokens, and recent developments in identity protocols. Experts discuss specifications and answer audience questions.
Everything You Ever Wanted to Know About OAuth and OIDC
Comprehensive guide to OAuth and OpenID Connect protocols, covering basics, best practices, security, JWT tokens, scopes, and microservices architecture for developers and IT professionals.
Winning the Game of Active Directory - Securing Against Common Attack Strategies
Master essential Active Directory security strategies, from common attack vectors to implementing robust defensive measures for protecting enterprise environments and preventing network compromises.
Building End-to-End Encryption and User Identity for Video Conferencing - Zoom's Approach
Exploring Zoom's approach to end-to-end encryption and user identity in video conferencing, focusing on security, trust, and user-friendly implementation in a remote-first world.
An Evaluation of ECG Use in Cryptography for Implantable Medical Devices and Body Area Networks
Evaluates ECG-based cryptography for medical devices, discussing security assumptions, randomness extraction, and potential vulnerabilities in authentication protocols using physiological data.
Auth for Encrypted Services with Server Side APT
Explore advanced password authentication techniques for encrypted services, focusing on server-side approaches to enhance security and protect against potential threats.
Anatomy of NTLMv1 - NTLMv1-SSP
Explore the intricacies of NTLMv1 and NTLMv1-SSP authentication protocols, understanding their structure, vulnerabilities, and implications for network security.
The Kerberos Key List Attack - The Return of the Read Only Domain Controllers
Explore a new attack vector against Read Only Domain Controllers using Kerberos Key List requests, uncovering security implications in Azure's passwordless authentication implementation.
Authentication Challenges in SaaS Integration and Cloud Transformation
Explore authentication challenges in SaaS integration and cloud transformation, focusing on security pitfalls, unmanaged cloud identities, and the importance of cloud-based Identity Provider solutions.
Modern and Secure IAM for Modern Applications
Explore modern IAM strategies for enhanced application security, covering OpenID, JSON Web Tokens, SAML, and FIDO protocols, with practical insights and a demo.
Modern Identity Hacking - Have Hackers Really Adjusted to Constant Remote?
Explore modern identity hacking techniques, including MFA bypasses and attacks on authentication protocols, in the context of remote work and cloud-based solutions.
Finding a Needle in an Encrypted Haystack
Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.
Watching the Watchdog - Protecting Kerberos Authentication With Network Monitoring
Explore advanced Kerberos attack detection techniques and learn to protect Windows networks using network monitoring. Includes a novel "Diamond PAC" attack variant and the "Kerberos Leash" tool.