The Pros and Cons of Encrypted Client Hello
Explore the advantages and challenges of Encrypted Client Hello (ECH) in TLS, including its impact on privacy, security, and network infrastructure.
Cipherspaces and Darknets - An Overview of Attack Strategies
Explore attack strategies on Tor and darknets, covering threat models, encryption layers, DNS leaks, metadata risks, and mitigation techniques for enhanced anonymity.
Secure Boot from A to Z - Building a Complete Chain-of-Trust
Comprehensive guide to implementing Secure Boot on embedded systems, covering encryption, signatures, bootloaders, and filesystem security with practical examples and real-world applications.
Beyond End-to-End Encryption: Threat Models for Secure Messaging
Explore evolving threat models for secure messaging, covering advanced attacker capabilities, real-world vulnerabilities, and emerging challenges in cybersecurity and privacy protection.
The Road to Free Certificates is Paved with Good Intentions
Exploring the journey towards free SSL/TLS certificates, this talk discusses the challenges, intentions, and implications of widespread HTTPS adoption for web security and privacy.
Security vs. Liberty - Balancing Cybersecurity and Civil Rights in the Digital Age
Debate on balancing security and liberty in cyberspace, exploring encryption, social media's role in terrorism, and government access to digital communications.
Hack Your APIs in 15 Minutes or Less - Exploiting Shadow APIs and Data Vulnerabilities
Learn to identify and exploit API vulnerabilities, understand hacker techniques, and explore creative methods for data theft in this eye-opening talk on modern cybersecurity challenges.
OWASP WrongSecrets - We Have a Secret for Everyone
Explore common pitfalls in secret management and learn best practices for securing sensitive information in various environments, from local setups to cloud deployments.
Deep Dive: Privacy and Security - What's the Right Balance?
Exploring the tension between privacy and security in technology, featuring experts discussing encryption, data protection, and balancing civil liberties with law enforcement needs.
Top Ten Proactive Controls for Secure Software Development
Explore essential software security controls for developers, covering authentication, access control, validation, and more. Learn proactive strategies to build robust, secure applications.
Cilium - Network and Application Security with BPF and XDP
Deep dive into BPF technology for application and network security, exploring Cilium's use in distributed systems with Docker for simplified operations and troubleshooting.
HTTPS Everywhere: Improving Web Security and Usability
Exploring Chrome's efforts to enhance HTTPS adoption: tools for debugging, reporting mechanisms for safe rollout, and strategies to improve web security.
Proactively Defending Your Business Against Security Protocol Attacks - OWASP AppSec California 2015
Explore strategies to proactively defend against security protocol attacks and implementation flaws in HTTPS/SSL/TLS. Learn about recent vulnerabilities, mitigations, and best practices for secure communications.
Getting a Handle on Mobile Security
Comprehensive overview of mobile security challenges and best practices, covering encryption, data protection, and platform-specific concerns for developers building secure mobile applications.
Seven Deadly Sins of Mobile Application Development - Unlocking Mobile Hacking Vulnerabilities
Unlock mobile app security secrets: Learn common development mistakes, session management vulnerabilities, and best practices to protect against attacks and impersonation.
Introducing IO Devices into Trusted Execution Environments
Explore security and software changes for IO support in trusted execution environments, focusing on confidential computing and hardware-based TEEs like Intel SGX and TDX.
Low Trust Edge Network - Performance and Security with Calico, VPP, and WireGuard
Explore optimizing edge network performance and security using Calico, VPP, and WireGuard. Learn strategies for resource constraints and data path optimization in low-trust environments.
New Tales of Wireless Input Devices
Explore security vulnerabilities in wireless input devices and learn about potential attack vectors and countermeasures for enhanced cybersecurity awareness.
Pretty Easy Privacy for Everyone - Hack.lu 2018
Explore p≡p (Pretty Easy Privacy), a user-friendly encryption solution for secure communication. Learn its features, implementation, and potential impact on digital privacy.
Fileless Attack - Detecting the Undetectable
Explore fileless attacks in Linux containers, their detection using eBPF tools like Falco, Tracee, and Tetragon, and learn to identify unexpected activities in cloud-native environments.
Data Security and Storage Hardening in Rook and Ceph
Explore security options for Rook with Ceph, including threat modeling, encryption, access controls, and infrastructure hardening for robust data protection in container-based storage systems.