Application-Layer Guarantees for Data Authenticity, Integrity, and Privacy
Explore end-to-end data security in modern distributed applications. Learn to implement authenticity, integrity, and privacy guarantees across complex multi-hop routes and untrusted environments.
A Glimpse into DevSecOps - Building a Secure NodeJS Service
Explore DevSecOps through building a NodeJS service, focusing on security integration throughout development and deployment. Learn practical insights and best practices for robust, secure software creation.
Private Frequency Estimation via Projective Geometry
Explore private frequency estimation using projective geometry with insights from Jelani Nelson's conference talk at CIRM.
Privacy: Definitions, Procedures, and Open Problems
Explore privacy definitions, procedures, and open problems in mathematical statistics with John Duchi's comprehensive conference talk.
Public Key Caching Strategies for Token Signature Validation - DevSecCon
Explore public key caching strategies for token signature validation in OAuth2 and OpenID Connect. Compare performance and security trade-offs of different approaches for relying parties.
Secure Practices with .NET Services
Implement robust security measures for .NET services, including encryption, authentication, and best coding practices to safeguard applications and data against cyber threats.
Access Control Done Right the First Time
Master physical access control systems with expert tips on secure installation, reliable operation, and tamper-resistant design. Learn best practices for wiring, badge selection, controller security, and ongoing maintenance.
The Digital Trust Journey: From Key Generation to Signed Certificate
Explore the creation process of digital certificates, from key generation to CA signing. Understand the critical steps ensuring trust and security in online interactions.
Secure Firmware Updates Over the Air - RIOT Summit 2024
Explore secure firmware updates over-the-air, including encryption implementation for SUIT example in RIOT. Includes overview, demo, and insights from IoT security experts.
Is Remote Attestation Relevant for Embedded Devices? - RIOT Summit 2024
Explore remote attestation's relevance for embedded devices, examining latest developments, challenges, and potential benefits in the context of Trusted Execution Environments and RIOT OS.
TLS 1.3 Handshake - Major Changes from Prior Versions
Explore major changes in TLS 1.3 handshake: shorter round trips, enhanced encryption, and improved key generation for better security and performance.
TLS 1.3 Cipher Suites - Key Changes and Improvements
Explore key changes in TLS 1.3 cipher suites, including simplified structure, fewer options, mandatory AEAD and forward secrecy, and the elimination of custom DH groups.
Oblivious RAM: From Theory to Large-scale Real-world Deployment
Explore Oblivious RAM's evolution from theory to real-world deployment. Learn about its applications in blockchain and cloud services, including Signal's implementation and the Oblivious STL library initiative.
Hearing Without Listening: Voice Authentication with Privacy
Explore voice authentication privacy challenges and solutions, including cryptographic methods and secure binary embeddings for protecting user voice prints while enabling authentication.
Go Passwordless with WebAuthn in Ruby
Explore WebAuthn for passwordless authentication in Ruby, enhancing security and user experience with biometrics and public-key cryptography.
GDPR and Beyond - Demystifying Data Governance
Explore GDPR's impact on data governance, learn anonymization and encryption techniques, and discover viable data sharing strategies for compliance and protection.
Capture the Flag 101 Workshop
Dive into Capture the Flag challenges with hands-on practice, learning key concepts and problem-solving techniques for beginner and intermediate levels in cybersecurity.
Data Security and Storage Hardening in Rook and Ceph
Explore data security and storage hardening in Rook and Ceph. Learn about threat modeling, security zones, encryption, access controls, and infrastructure hardening for robust software-defined storage.
Why We Need Security Domains: A Comprehensive Approach to Cybersecurity
Explore essential cybersecurity domains, from compliance to hacking, and understand their importance in developing comprehensive security strategies for modern organizations.
A Deep Dive Into Advanced TLS for gRPC Services
Explore advanced TLS API in gRPC, covering post-handshake verifications, custom root trust, certificate behavior, and revocation configuration for enhanced security in gRPC services.
How LSH Random Projection Works in Search - Python
Explore efficient similarity search using Locality Sensitive Hashing (LSH) and Random Projection. Learn how to handle large-scale data and implement approximate search techniques in Python.