On the Insecurity of JavaScript Object Signing and Encryption - AppSec EU 2017
Comprehensive analysis of JavaScript Object Signing and Encryption (JOSE) security, revealing critical vulnerabilities in popular libraries and introducing JOSEPH, an automated evaluation tool.
Jupyter Hub - Teaching Crypto - Hashing
Learn about cryptographic hashing, HMAC implementation, and server setup for teaching crypto concepts using Jupyter Hub, with practical code examples and hands-on exercises.
Preventing Mobile App and API Abuse
Explore mobile app and API security threats, countermeasures, and defense-in-depth techniques through a courier service's evolving security approach against malicious attacks.
Authentication as a Microservice - Portable Customer Identity Management
Explore microservice-based authentication, portable identity management, and JWT security. Learn advantages, pitfalls, and best practices for decoupling user data in modern applications.
API Abuse through Mobile Apps - New Attacks, New Defenses
Explore mobile app API security challenges and defenses, including OAuth2, TLS pinning, and app attestation. Learn through a simulated battle between a delivery app and an attacker.
Might As Well JUMP - Exploit Development For Java Serialization
Explore Java serialization exploit development, including 0day custom exploits, reverse engineering, and ROP techniques. Learn to break HMAC/MAC and create Python exploits for educational purposes.
How to Implement Crypto Poorly
Explore common pitfalls in implementing cryptography, focusing on single sign-on systems and best practices for secure authentication in web applications.
The Exact PRF Security of Truncation - Tight Bounds for Keyed Sponges and Truncated CBC
Explore pseudorandom functions, HMAC, sponge construction, and truncated CBC, examining security bounds and proof challenges in cryptographic primitives.
.NET Data Security - Hope is Not a Strategy
Learn essential .NET data security techniques including encryption, hashing, and digital signatures to protect sensitive information and ensure data integrity in your applications.