I Am AD FS and So Can You - Attacking Active Directory Federated Services
Explore Active Directory Federated Services (AD FS) security, including claims pipeline, tokens, and vulnerabilities. Learn attack techniques, defense strategies, and best practices for securing AD FS deployments.
Medical Device Security - Hack or Hype
Explore medical device security, FDA guidelines, and real-world vulnerabilities. Learn about safety vs. security, continuous measurement, and industry challenges in this comprehensive overview.
Defending the Enterprise Against Network Infrastructure Attacks
Comprehensive exploration of network infrastructure vulnerabilities and defense strategies, covering SNMP, routing protocols, and encryption to protect enterprise systems against sophisticated attacks.
Navigating a Sea of Pwn - Windows Phone 8 Appsec
Explore Windows Phone 8 app security, covering structure, models, restrictions, encryption, and vulnerabilities. Learn about marketplace validation and protection strategies.
Hardware Side Channel Attacks on the Cheapest
Explore side channel attacks on low-cost hardware, covering power analysis, encryption vulnerabilities, and practical demonstrations. Learn acquisition techniques and countermeasures.
Android Malware Targeting Belgian Financial Apps
Explore Android malware's evolution, focusing on banking trojans targeting Belgian apps. Learn about various malware types, their mechanisms, and strategies for protection.
Ant-Forensics AF - Dual Core
Explore anti-forensics techniques for Windows, Linux, and Android, covering memory analysis, encryption, and hardware implants. Learn to protect digital evidence and understand forensic challenges.
The .11 Veil, Camouflage & Covert! Invisible WiFi, Revealed
Unveiling hidden WiFi communication techniques, exploring covert methods, and analyzing security implications of invisible wireless networks.
Biting into the Forbidden Fruit
Exploring JavaScript cryptography's vulnerabilities, debunking myths, and analyzing real-world implementations to provide an updated perspective on its security challenges and potential solutions.
Crypto for the People - Part 2
Explores how cryptography benefits some groups more than others, discussing its impact on finance, cloud computing, and data analytics while examining social implications and power dynamics.
Bringing Usable Crypto to 7 Million Developers
Insights on implementing client-side encryption for databases, covering challenges, solutions, and lessons learned from bringing authenticated encryption to a widely-used NoSQL database.
Trustworthy Elections - Joey Dodds, Galois and Free & Fair - USENIX Enigma Conference - 2020
Exploring challenges in US election systems and innovative solutions for trustworthy voting technology, including ElectionGuard and SSITH projects.
Building a Secure Data Market on Blockchain - USENIX Enigma 2019
Explore blockchain-based secure data markets for privacy-preserving analytics and machine learning, addressing challenges and showcasing real-world applications in healthcare and beyond.
The Great Cryptographic Divide - USENIX Enigma 2018
Exploring the encryption debate: privacy vs. security, government vs. industry. Discusses challenges, impacts, and potential solutions for balancing security and privacy in an encrypted world.
Datenschutz für Aktivist*innen
Leitfaden zur digitalen Selbstverteidigung für Aktivisten: Datenschutz, Verschlüsselung und praktische Tipps zum Schutz der Privatsphäre bei politischer Teilhabe und Demonstrationen.
Quantum Hardening Cryptographic Protocols - DiVOC - 2020
Introduction to quantum hardening in cryptography, exploring the impact of quantum computers on existing protocols and discussing strategies to ensure future security.
Post-Quantum Cryptography - Detours, Delays, and Disasters
Explore challenges in post-quantum cryptography standardization, including design flaws, deployment issues, and potential disasters. Learn about hybrid systems and future implementation strategies.
Practical Brute Force of Military Grade AES-1024 - Sylvain Pelissier, Boi Sletterink
Análisis de vulnerabilidades en el software de cifrado DataVault, revelando fallas en la derivación de claves y encriptación que comprometen la seguridad de productos de almacenamiento de Sony, SanDisk y Lexar.
PKI at Scale Using Short-Lived Certificates - USENIX Enigma 2016
Explore PKI deployment challenges at scale, focusing on short-lived certificates for cloud microservices. Learn about operational hurdles, scaling certificate authorities, and maintaining instance trustworthiness.
Red Teaming en Entornos Industriales - César Cuadra & Hernán Parodi - Ekoparty Security Conference - 2020
Técnicas y herramientas de Red Teaming en entornos industriales, incluyendo ataques remotos, phishing y físicos. Análisis de anatomía de ataques y estrategias de cifrado para evaluar la seguridad empresarial.
Exploitation of a Hardened MSP430-Based Device - Braden Thomas - Ekoparty Security Conference - 2014
Reverse-engineering and exploiting a hardened MSP430 device: techniques for firmware extraction, analysis, and data retrieval from RAM, with focus on overcoming JTAG security measures.