Server Certificates - Self-Signed and Let's Encrypt Certificates for the LAN
Explore server certificate options for LAN, including self-signed and Let's Encrypt. Learn to create, export, and distribute certificates using XCA tool and implement wildcard certificates.
An Open-Source Implementation for Linked-Data-Based Verifiable Credentials with Selective Disclosure and Zero-Knowledge Proofs
Explore an open-source implementation of Linked-Data-based verifiable credentials, enabling secure digital identity management with selective disclosure and zero-knowledge proofs.
Secure Systems from Insecure Components
Explore innovative cryptographic approaches to build resilient systems that withstand compromises, offering practical solutions for authentication and data protection in today's vulnerable digital landscape.
Unlocking the Secrets of TLS - Understanding the TLS Handshake Process
Explore the intricacies of TLS handshake, its evolution, and how secure connections are established on the Internet. Gain insights into past mistakes and lessons learned in this process.
Building Trusted Systems on Top of Leaky Abstractions
Exploring secure system design in complex tech stacks. Covers side-channel attacks, browser security, and trusted execution environments. Insights on building robust systems against known and unknown threats.
Sigstore: 2024 and Beyond
Explore Sigstore's achievements, future roadmap, and vision for securing open source software. Learn about upcoming milestones and opportunities to contribute to this de-facto signing solution.
Sigstore: Using Transparent Digital Signatures to Help Secure the Software Supply Chain
Explore transparent digital signatures with Sigstore to enhance software supply chain security. Learn key techniques for protecting open source ecosystems.
Boosting ID Protection Amid Sophisticated Attacks
Explore evolving identity threats in IoT, OT, and hybrid workspaces. Learn about automated key management and Hardware Security Modules for enhanced protection against sophisticated attacks and human errors.
INVISILINE - Invisible Plausibly Deniable Storage
Explore innovative techniques for creating invisible, plausibly deniable storage systems to enhance data security and privacy in digital environments.
Advanced Network Security Concepts
Comprehensive exploration of advanced network security, covering VPNs, PKI, cloud threats, SDN, and automation. Prepares for various cybersecurity certifications with practical examples and hands-on training.
Nintendo DSi Hacking: Extracting Boot ROMs and New Jailbreak Methods - 37C3 2023
Exploración profunda del hackeo de Nintendo DSi: extracción de boot ROMs, nuevos jailbreaks y revivir consolas con chips NAND desgastados. Análisis técnico de explotación, inyección de fallos y criptografía.
Driving the Need for Identity, Authentication, and Encryption in Containerized Environments
Explore encryption, identity verification, and workload attestation in multi-service environments. Learn to implement TLS with Istio and cert-manager for robust identity management and secure communication.
Faults in Our Bus - Novel Bus Fault Attack to Break Trusted Execution Environments in Embedded Systems
Uncover novel bus fault attacks on Trusted Execution Environments in embedded systems, exploring vulnerabilities in SoC system buses and their implications for IoT security and TEE implementations.
Physical Emissions - CHES 2024
Explore cutting-edge research on physical emissions in cryptographic hardware at CHES 2024, chaired by Patrick Schaumont. Gain insights into latest developments and implications for secure system design.
10 Principles for Secure by Design: Baking Security into Your Systems
Explore 10 key principles for building secure systems, from least privilege to secure by default, with expert insights on implementing robust cybersecurity measures.
What is DNSSEC - Domain Name System Security Extensions
Discover how DNSSEC protects against DNS hijacking, ensures online data integrity, and enhances website security. Learn implementation steps for robust protection.
mmTLS - Scaling the Performance of Encrypted Network Traffic Inspection
Innovative framework for scalable TLS middleboxes, enhancing encrypted traffic inspection performance while preserving security. Outperforms existing solutions with minimal overhead and high throughput.
The Hunt for CVE-2023-0286 - Replicating OpenSSL's Latest Vulnerability
Replicate CVE-2023-0286 in OpenSSL, learn to write a libfuzzer harness, and explore vulnerability research techniques for enhanced security awareness and threat prevention.
Using Vulhub for Dockerized Vulnerability Replication
Explore Vulhub for hands-on vulnerability replication. Learn to set up Docker environments, simulate Heartbleed and Log4j vulnerabilities, and gain practical cybersecurity experience.
Protecting Sensitive Data and Machine Learning Models
Discover techniques for safeguarding sensitive data and ML models, enhancing privacy and security in Python-based AI applications.
A Better Way to SSH: Introducing SSH Certificates
Discover a superior SSH approach using certificates, enhancing security and simplifying access management for cloud-native environments.