Common Attacks on IoT Devices
Explore common IoT device vulnerabilities, attack strategies, and defensive measures. Learn to design secure embedded systems and stay ahead of evolving threats in the IoT landscape.
The Kernel Report
Explore recent Linux kernel developments, hardware vulnerabilities, stable releases, and BPF technology with insights from LWN.net's Executive Editor Jonathan Corbet.
Host of Troubles - Multiple Host Ambiguities in HTTP Implementations
Explores HTTP host ambiguities in implementations, revealing vulnerabilities in caching, firewalls, and WAFs. Presents attacks exploiting these issues and discusses prevalence and mitigation strategies.
The Shadow Nemesis - Inference Attacks on Efficiently Deployable, Efficiently Searchable Encryption
Explore inference attacks on searchable encryption, focusing on Bloom filters and graph matching techniques to compromise data confidentiality in encrypted databases.
A Unilateral-to-Mutual Authentication Compiler for Key Exchange - with Applications to Client Authentication in TLS 1.3
Explore unilateral-to-mutual authentication in key exchange, focusing on client authentication in TLS 1.3. Learn about the SIGMAC compiler, security definitions, and post-handshake protocols.
Practical Non-Malleable Codes from I-More Extractable Hash Functions
Explore practical non-malleable codes using I-more extractable hash functions, covering security, error correction, and applications in cryptography and data integrity.
Order-Revealing Encryption - New Constructions, Applications, and Lower Bounds
Explore new constructions, applications, and lower bounds of Order-Revealing Encryption, focusing on encrypted data searching and range queries with enhanced security and performance.
POPE - Partial Order Preserving Encoding
Explore partial order preserving encoding for secure data management, covering introduction, space analysis, security considerations, and addressing audience questions.
Covert Channels through Random Number Generator - Mechanisms, Capacity Estimation and Mitigations
Explore covert channels in random number generators, their mechanisms, capacity estimation, and mitigation strategies for enhanced computer security.
Efficient Batched Oblivious PRF with Applications to Private Set Intersection
Explores efficient batched oblivious PRF for private set intersection, presenting novel protocols and discussing security implications and comparisons with existing methods.
Garbling Gadgets for Boolean and Arithmetic Circuits
Explore innovative garbling techniques for Boolean and arithmetic circuits, enhancing cryptographic protocols and secure computation methods.
Practical Detection of Entropy Loss in Pseudo-Random Number Generators
Explore techniques for detecting entropy loss in pseudo-random number generators, crucial for cryptographic security. Learn analysis procedures and implementation strategies.
MERS - Statistical Test Generation for Side-Channel Analysis Based Trojan Detection
Learn statistical test generation techniques for detecting hardware Trojans through side-channel analysis, focusing on rare nodes and security metrics in combinational circuits.
On the Practical - In-Security of 64-bit Block Ciphers - Collision Attacks on HTTP over TLS and OpenVPN
Explore practical security vulnerabilities in 64-bit block ciphers, focusing on collision attacks in HTTP over TLS and OpenVPN. Learn about countermeasures and implications for network security.
Message-Recovery Attacks on Feistel-Based Format Preserving Encryption
Explore message-recovery attacks on Feistel-based format preserving encryption, examining technical challenges, known plaintext attacks, and theoretical implications for cryptographic security.
MPC-Friendly Symmetric Key Primitives
Explore MPC-friendly symmetric key primitives for secure computation, focusing on PRFs, secure sharing, and efficient preprocessing techniques in cryptography.
ProvUSB - Block-level Provenance-Based Data Protection for USB Storage Devices
Block-level provenance-based data protection for USB storage devices, enhancing security in sensitive organizations through remote TPM, integrity models, and access control.
Safe Serializable Secure Scheduling - Transactions and the Trade-Off Between Security and Consistency
Explore the trade-offs between security and consistency in transaction scheduling, with real-world examples and attack demonstrations in information flow control systems.
Enforcing Least Privilege Memory Views for Multithreaded Applications
Explore memory isolation techniques for multithreaded applications, focusing on enforcing least privilege memory views to enhance security and prevent unauthorized access.
Upcoming x86 Technologies for Malicious Hypervisor Protection
Explore AMD SEV-SNP, the next-gen x86 virtualization isolation tech, designed to protect VMs from malicious hypervisors. Learn about new security features, threat models, and impacts on open source ecosystems.
MDS, Fallout, Zombieland & Linux
Explore recent CPU vulnerabilities, their impact on Linux, and security fixes with kernel developer Greg Kroah-Hartman in this insightful keynote address.