Secure Boot - What Is It and Do I Need It?
Explore secure boot in IoT: its components, use cases, threats it prevents, and implementation status. Learn key elements for supporting secure boot in connected devices.
New Tales of Wireless Input Devices
Explore security vulnerabilities in wireless input devices and learn about potential attack vectors and countermeasures for enhanced cybersecurity awareness.
Practical and Affordable Side-Channel Attacks
Explore affordable side-channel attacks with practical demonstrations, learning techniques to exploit vulnerabilities in cryptographic implementations and secure systems.
Change is Hard - Securing the Future Today
Explore the socio-technical challenges of implementing modern security practices, blending research and anecdotes to address resistance to change and holistic problem-solving approaches.
Growing SPIFFE and SPIRE in 2023 and Beyond - Secure Identity Management Progress
Explore SPIFFE/SPIRE's latest advancements in secure identity management, including Windows support, SIGSTORE integration, and enhanced hardware security, empowering enterprises with robust infrastructure protection.
Using Argo Project to Secure Elastic - InfoSec Team's Journey
Discover how Elastic's InfoSec team leverages Argo Project tools for efficient K8s cluster management, GitOps-driven workflows, and seamless deployment of security use-cases in cloud environments.
KeyBleed: Attacking the OneKey Mini Cryptocurrency Wallet - Hack In The Box 2023
Revealing vulnerabilities in cryptocurrency hardware wallets, focusing on the OneKey Mini's security flaws. Demonstrates live exploit to extract and crack the seed, recovering stored funds in under one second.
Hardware Backdooring an eScooter - ECU Vulnerabilities and Remote Control
Explore e-scooter ECU vulnerabilities and hardware implant attacks. Learn reverse engineering techniques for CANBUS messages and remote access exploitation in this cybersecurity deep dive.
Timekiller: Escape From QEMU/KVM - Exploiting Asynchronous Clock Vulnerabilities
Demonstrating a novel guest-to-host escape exploit in QEMU/KVM using asynchronous clock vulnerabilities. Introduces "Timekiller" technique to turn heap overflow into arbitrary address write, achieving full VM escape.
Integrity Measurement Architecture in Linux Systems
Explore Linux system integrity with IBM engineer Mimi Zohar, covering key concepts and techniques for ensuring secure and reliable software environments.
TPM: History, Updates, and Future Developments
Explore TPM's history, updates, and future developments with Intel's Jarkko Sakkinen. Learn the basic idea and sequence diagram of this crucial technology.
Design and Implementation of a Security Architecture for Critical Infrastructure Industrial Control Systems
Comprehensive security architecture for critical infrastructure, addressing nation-state cyber threats. Covers hardware roots of trust, secure boot, and integrity measures across various systems and networks.
AMD x86 Memory Encryption Technologies - Secure Memory Encryption and Virtualization
Explore AMD's x86 memory encryption technologies: Secure Memory Encryption for physical access protection and Secure Encrypted Virtualization for isolated encrypted virtual machines. Learn about architecture, security benefits, and Linux implementation.
Security of Heterogeneous Systems
Explore microarchitectural attacks on heterogeneous systems, focusing on GPU vulnerabilities. Learn about covert channels, website fingerprinting, and defense strategies for integrated CPU-GPU architectures.
Computer Security: Past, Present, and Future - Insights from Mikko Hypponen
Explore computer security's evolution, current challenges, and future threats with insights from expert Mikko Hypponen, focusing on securing billions of new online devices.
OpenSSL After Heartbleed - Lessons Learned and Project Improvements
Explore OpenSSL's transformation post-Heartbleed: enhanced team, transparency, development processes, and project vitality. Learn about security improvements and future plans.
Gig Work and the Digital Security Divide
Explores the impact of gig economy on digital security, highlighting how independent workers lack institutional security training and resources, potentially widening the security awareness gap among different social classes.
Loom Security Journey - Getting Over the Finish Line
Explore the security journey of a startup, from building essential functions to navigating a smooth acquisition. Gain insights into critical security measures during rapid growth and M&A processes.
The Road to Developers' Hearts - Bridging the Gap Between Security and Software Engineering
Insights on bridging the gap between security professionals and software engineers, based on experience building security software at scale.
Gadgets II - Advanced Cryptographic Hardware Techniques
Explore advanced cryptographic hardware techniques and implementations in this CHES 2024 session, chaired by Rei Ueno.
TrustZone-M Security Vulnerabilities in Microcontroller TEEs - Lessons Learned
Explore TrustZone-M security vulnerabilities in Arm Cortex-M MCUs. Uncover isolation weaknesses, bypass techniques, and potential exploits in microcontroller Trusted Execution Environments.