LLC Cache Attacks: Applicability and Countermeasures
Exploring Last Level Cache attacks, their applicability across various scenarios, and potential countermeasures to enhance system security and protect user privacy.
Runtime Analysis of Whole-System Provenance
Explore real-time provenance-based auditing techniques for enhanced system security, overcoming limitations of post-hoc analysis in forensic investigations.
Whitfield Diffie - Pioneering Cryptographer and 2015 ACM Turing Award Recipient
Explore cryptography pioneer Whitfield Diffie's life, influences, and contributions to computer security in this insightful interview covering his childhood, education, and career milestones.
Voltage Glitching Raspberry Pi 3 Model B+ with ChipWhisperer-Lite
Explore voltage glitching on Raspberry Pi 3 B+ using ChipWhisperer-Lite. Learn live demonstration, wiring, and testing techniques for hardware security experimentation.
Ethics and Computer Security
Explore ethical considerations in computer security, including disclosure processes, bug bounties, and legal implications, with real-world examples from electronic car locks to medical devices.
Pseudorandom Black Swans: Cache Attacks on CTR_DRBG
Explore vulnerabilities in CTR_DRBG cryptographic algorithm, focusing on cache attacks and key rotation flaws. Learn about potential risks in TLS handshakes and SGX execution.
Blackhat EU 2013- Power Analysis for Cheapskates
Explore power analysis attacks on embedded systems, from basic concepts to advanced techniques. Learn practical methods for implementing these attacks using affordable tools and hardware setups.
Remoticon 2021 - Colin O'Flynn Zaps Chips and They Talk
Explore power analysis and chip glitching techniques with Colin O'Flynn, including practical demonstrations and insights into hardware vulnerabilities and security testing methods.
Perfect Forward Secrecy in TLS Explained
Explore Perfect Forward Secrecy in TLS, a crucial encryption property that safeguards past communications even if server keys are compromised, enhancing overall data security.
Reducing Security Risks in the Hybrid Workplace with Windows 11 and Surface
Discover how Windows-enhanced security settings on Surface devices reduce organizational security risks by 60% in hybrid workplaces, leveraging Microsoft's holistic ecosystem from chip to cloud.
USB Write Blocking with USBProxy - Techniques and Implementation
Explore USB write blocking techniques using USBProxy, including FaceDancer drawbacks, BeagleBone Black implementation, and mass storage blocking methods.
Hardware-Assisted Fine-Grained Control-Flow Integrity - Adding Lasers to Intel's CET/IBT
Explore advanced control-flow integrity techniques, enhancing Intel's CET/IBT with fine-grained protections for improved software security and memory corruption prevention.
100 Bug Bounties and Security Research - Lessons from BSides Tampa 2015
Explore security research, bug bounties, and ethical considerations in cybersecurity with insights from Kevin Johnson's experiences and industry examples.
Malware Analysis Triage for Beginners
Learn essential techniques for initial malware analysis, including static and dynamic analysis methods, to quickly assess potential threats and determine next steps.
Reticle Dropping - An Intelligent F-BOMB
Explore the innovative F-BOMB device for covert network infiltration and data exfiltration, discussing its design, capabilities, and potential applications in cybersecurity.
Project Cerberus: Hardware Root of Trust for Cloud Security
Explore hardware-enforced secure boot and measured boot with Project Cerberus, a cryptographic microcontroller enhancing firmware security for cloud platforms and data centers.
Overview and Recent Developments in TPM - Kernel Space Updates
Explore TPM subsystem updates, recent developments, and security measures against hardware attacks in Linux kernel space with Intel engineer Jarkko Sakkinen.
Protected Execution Facility: Enhancing Security for Virtual Machines
Explore IBM's Protected Execution Facility for enhanced security in cloud computing. Learn about secure virtual machines, architecture modifications, and safeguards against compromised components in Power Architecture servers.
Exploiting Hardware Glitches and Side Channels in Perfect Software
Uncover vulnerabilities in flawless software through hardware glitches and side-channel attacks. Learn advanced exploitation techniques for enhancing cybersecurity defenses.
A DevSecOps Tale of Business, Engineering, and People
Explore DevSecOps through a historical lens, examining its impact on business, engineering, and resilience. Learn from past challenges to build high-performing teams and implement effective DevSecOps strategies.
ReproNow - Saving Time in Reproducing and Triaging Security Bugs
Introducing ReproNow: an open-source tool for efficiently reproducing and triaging security vulnerabilities. This chrome/firefox extension captures researcher's walkthrough, including network requests, streamlining bug validation for security engineers.