WireGuard - Next Generation Secure Network Tunnel
Explore WireGuard, a modern VPN protocol offering improved security, performance, and simplicity compared to traditional options like IPsec and OpenVPN. Learn about its innovative design and benefits.
Remote Timing Attacks on TPMs - AKA TPM-Fail
Uncovers vulnerabilities in Trusted Platform Modules through timing analysis, revealing potential security risks in hardware-based cryptographic systems used across various computing platforms.
Black-Box Laser Fault Injection on a Secure Memory
Explore vulnerability research on the Microchip ATECC508A secure memory, examining laser fault injection techniques to bypass cryptographic authentication in IoT devices.
Bring Your Own Token to Replace the Traditional Smartcards for Strong Authentication and Signing
Explore Cisco's innovative BYOT solution replacing traditional smartcards, enabling self-provisioned digital identities for enhanced authentication and cryptographic functions using USB tokens.
BitLeaker - Subverting BitLocker with One Vulnerability
Explore TPM vulnerabilities and their impact on BitLocker encryption, uncovering potential security risks in widely-used commercial devices.
Stegosploit - Drive by Browser Exploits Using Only Images
Innovative technique encoding browser exploits in images, combining steganography and polyglots for undetectable delivery. Explores implementation, challenges, and implications for cybersecurity.
Why Integrity Is Left Alone and Not Given the TLC It Deserves
Exploring the neglected aspect of data integrity in information security, its importance for business decisions, and practical solutions for ensuring data accuracy.
How to Explain Post-Quantum Cryptography to a Middle School Student
Demystifying post-quantum cryptography: Learn about five families of crypto systems resistant to quantum computing, explained through simple analogies and everyday objects like Rubik's Cubes and braids.
Bypassing Port-Security In 2018 - Defeating MacSEC and 802.1x-2010
Explore novel techniques for bypassing 802.1x-2010 and MacSEC, discussing weaknesses in EAP and demonstrating improved methods for network penetration using the open-source tool Silent Bridge.
Breaking Historical Ciphers with Modern Algorithms
Explore modern techniques for decrypting historical ciphers, including Enigma, ADFGVX, and Turning Grill. Learn about recent advancements and ongoing challenges in cryptanalysis of historical encryption methods.
Cracking HiTag2 Crypto - Detailed Look at the Academic Attacks
Detailed exploration of HiTag2 RFID technology, including authentication protocols and encryption. Implements and demonstrates academic attacks for key recovery and tag cloning.
Intro to GPG and the Web of Trust
Learn to use GPG for secure communication, data encryption, and email protection. Explore key concepts like the Web of Trust, key management, and participate in key signing parties to establish authenticity.
Why CloudHSM Can Revolutionize AWS
Explore CloudHSM's potential to revolutionize AWS security through encryption, automation, and credential management, addressing trust concerns in cloud computing for sensitive data protection.
MQTT and CoAP - A Story about IoT Protocol Security
Explore MQTT and CoAP protocols for IoT, their security challenges, and mitigation strategies. Learn about common architectures, potential attacks, and best practices for secure implementation.
Enterprise Security API ESAPI 2.0 Crypto Changes
Explore ESAPI 2.0's cryptographic enhancements, including the shift from ECB mode and the importance of message authenticity in enterprise security.
Cold War Cryptography
Explore Cold War-era encryption methods, ciphers, and cryptographic devices used by intelligence agencies, with insights into historical espionage techniques.
How NOT to Implement Cryptography for the OWASP Top 10 Reloaded
Learn common cryptography implementation mistakes and best practices for securing applications against OWASP Top 10 vulnerabilities with expert Anthony J Stieber.
Seven Grades of Perfect Forward Secrecy
Explore Perfect Forward Secrecy adoption levels across industries, understand its importance post-Heartbleed, and learn how to assess PFS maturity in your organization.
Payment Applications Handle Lots of Money. No, Really - Lots of It.
Explore payment application security, from business processes to technical risks. Learn about attack surfaces, crypto-based countermeasures, and real-world solutions to protect financial transactions.
Side Channel Attacks in the Cloud
Explore cloud security vulnerabilities, focusing on side channel attacks in virtualized environments. Learn about Bernstein's attack and deduplication exploits, with insights on improving isolation techniques.
AWS Vs Azure Security
Comparative analysis of AWS and Azure security features, exploring identity management, storage, encryption, network security, and monitoring capabilities in both cloud platforms.