Cracking JSON Web Tokens - Understanding Security Vulnerabilities
Learn to understand, test, and crack JSON Web Tokens (JWTs) for enhanced web application security. Explore JWT structure, vulnerabilities, and best practices for implementation and protection.
Hacking Hardware - Samy Kamkar
Explore hardware hacking techniques, from credit card manipulation to wireless keyboard emulation, with insights on cryptography, fault injection, and firmware reverse engineering tools.
How Bad Is a Leaked GitHub SSH Key?
Explore the implications of GitHub's leaked SSH key, understand SSH vs TLS authentication, and learn how to protect yourself from potential security risks.
JWTs - Patterns and Anti-patterns in Authentication
Explore JWT use cases, patterns, and anti-patterns for secure authentication. Learn best practices and alternatives for implementing stateless tokens in web applications.
Securing the Future of TLS - What's New in TLS 1.3
Explore TLS 1.3's key improvements, including enhanced security, faster connections, and streamlined handshake process. Learn about new features and their impact on web communication.
Malware Clustering - Static and Dynamic Behavior Analysis
Explore innovative malware clustering techniques using static and dynamic behavior analysis, machine learning, and similarity search for robust, scalable, and repeatable results.
Implementing Differential Privacy for the 2020 US Census
Explore the implementation of differential privacy for the 2020 US Census, including technical challenges, organizational hurdles, and the development of innovative algorithms to protect respondent privacy.
Contact Tracing Apps - Engineering Privacy in Quicksand
Explore privacy challenges and solutions in contact tracing apps, focusing on end-to-end protection within complex ecosystems and overcoming obstacles in real-world implementation.
The Dirty Laundry of the Web PKI
Explores web PKI's flaws, revealing the fragile security infrastructure behind HTTPS connections. Discusses issues with certificate authorities and proposes improvements for future server authentication models.
LLC Cache Attacks: Applicability and Countermeasures
Exploring Last Level Cache attacks, their applicability across various scenarios, and potential countermeasures to enhance system security and protect user privacy.
Protecting Journalists: Designing Secure Systems for All Users
Explore how focusing on journalists' needs in security tool development can improve privacy and protection for all users, bypassing common objections and addressing real technical challenges.
How WhatsApp Reduced Spam While Launching End-to-End Encryption
Explore WhatsApp's innovative approach to reducing spam while implementing end-to-end encryption, featuring effective techniques and challenges faced in protecting user privacy and communication.
API Security Best Practices and Guidelines - 2016
Explore industry-leading best practices for designing secure APIs, navigating standards, and protecting both public and private APIs to maximize benefits while keeping threats at bay.
Partially Specified Channels- The TLS 1.3 Record Layer Without Elision
Explore secure stream-based channels, focusing on multiplexing data streams over a single channel. Learn about TLS 1.3 record layer, model evolution, and challenges in this technical deep dive.
Cisco Cyber Security
Comprehensive training on Cisco network security, covering threats, AAA, access control, firewalls, VPNs, and more. Gain practical skills to protect networks and implement robust security measures.
Microsoft Network Security Essentials - Complete Course
Comprehensive overview of network security essentials, covering threats, protocols, devices, authentication, encryption, compliance, and risk management for IT professionals and security enthusiasts.
Whitfield Diffie - Pioneering Cryptographer and 2015 ACM Turing Award Recipient
Explore cryptography pioneer Whitfield Diffie's life, influences, and contributions to computer security in this insightful interview covering his childhood, education, and career milestones.
Practical Side-Channel Attacks on Embedded Device Cryptography - Dr Owen Lo and Doug Carson
Explore side-channel attacks on embedded devices, including techniques, history, and real-life examples. Learn about power analysis methods and their implications for cryptography.
SSL-TLS and Why It Keeps Your Lake Empty - Andy Shepherd, Symantec
Explore SSL/TLS encryption, its impact on network visibility, and the evolution to TLS 1.3. Learn about security implications and strategies for maintaining network oversight.
Unleashing the Power of Convolutional Neural Networks for Profiled Side-Channel Attacks
Explore cutting-edge applications of convolutional neural networks in profiled side-channel attacks, covering design principles, architecture, and data augmentation techniques.
Dragonblood - A Security Analysis of WPA3’s SAE Handshake
Análisis de seguridad del protocolo SAE en WPA3, explorando vulnerabilidades como ataques de tiempo, curva inválida y denegación de servicio, con énfasis en problemas fundamentales sin resolver.