Hackers for Charity Update - Leveraging Hacking Skills for Humanitarian Causes
Discover how hackers use their skills for charitable causes, exploring the latest initiatives and impact of Hackers for Charity in this insightful update.
Cipherspaces and Darknets - An Overview of Attack Strategies
Explore attack strategies on Tor and darknets, covering threat models, encryption layers, DNS leaks, metadata risks, and mitigation techniques for enhanced anonymity.
Cipherspaces and Darknets - An Overview of Attack Strategies
Explore attack strategies for cipherspaces and darknets, uncovering vulnerabilities and defense mechanisms in encrypted networks and anonymous communication systems.
Endpoint Security Decisions in the Age of Consumerization and Mobile Devices
Explore key decisions for managing endpoint risk in the era of consumerization and mobile devices, balancing security with innovation and user experience.
Defending Against Cross-Site Scripting (XSS) Vulnerabilities
Learn to defend against cross-site scripting (XSS) attacks. Covers vulnerability types, injection points, mitigation strategies, and practical demonstrations for developers and security professionals.
Hacking a Mature Security Program
Explore advanced penetration testing techniques for mature security environments, focusing on sophisticated methods to elevate security postures and adapt to evolving threats.
Recent HIPAA/HITECH Changes - Overview and Impact on Health Information Privacy
Overview of HITECH Act and its impact on HIPAA, examining recent changes to broaden protection of personal health information privacy and security in healthcare technology.
Who to Contact When You Witness a Tech Crime - FBI Guidelines
Learn when, how, and who to contact when witnessing tech crimes, presented by FBI expert Evan Patterson. Gain insights into reporting procedures and appropriate actions for cybercrime situations.
OP-TEE: Using TrustZone to Protect Our Own Secrets
Explore TrustZone technology for securing sensitive data in ARM CPUs, its potential applications, and the open-source OP-TEE implementation for Linux, with insights on current limitations and future possibilities.
Making DevSecOps Happen with Containers - Security Concerns and Solutions
Explore DevSecOps implementation with containers, addressing security concerns through automation and collaboration. Learn to bridge the gap between DevOps and security teams for better application protection.
Read-only Rootfs: Theory and Practice for Embedded Systems
Explore techniques for implementing read-only rootfs in embedded systems, enhancing robustness and facilitating system updates. Learn to manage state storage and overcome challenges in real-world scenarios.
Surviving in the Wilderness: Integrity Protection and System Update for IoT Devices
Explore IoT device security, OTA updates, and integrity protection. Compare approaches like IMA, swupd, dm-verity, and OSTree. Learn implementation using Yocto/OpenEmbedded layers for robust IoT systems.
Over-the-Air Software Updates Without Downtime or Service Disruption Using Unikernels
Explore OTA software updates for IoT devices using unikernels, focusing on IncludeOS's Live Update functionality. Learn about security, performance, and operational benefits without downtime or service disruption.
Securing the Connected Car: Opportunities, Risks, and Best Practices
Explore connected car opportunities, security risks, and best practices for over-the-air updates. Learn from real-world examples like Tesla's innovations and the Jeep Cherokee hack.
Securing Open Source in Connected Devices - Challenges and Solutions
Explores practical approaches to address Open Source security in connected devices, focusing on benefits and pitfalls of the Open Source model in production environments.
Software Updates for Connected Devices - Key Considerations
Explore key considerations for deploying software updates to connected devices, focusing on security, integrity, and best practices for IoT environments.
IoT Lockdown - Battling Bot Net Builders
Discover strategies to secure IoT devices against botnet takeovers and DDoS attacks. Learn essential steps for developers to protect their creations and combat cyber threats effectively.
Surviving the CVE Firehose: Strategies for Open Source Product Security
Strategies for managing and improving product security amidst constant vulnerability threats. Learn to track, prioritize, and address security issues effectively in open source projects.
Verified Boot: From ROM to Userspace
Explore cryptographic system protection on ARM processors, from bootloader to root file system. Learn about FOSS components, implementation challenges, and lessons from a large-scale project.
Zephyr and IoT Security - Enhancing Safety in Connected Devices
Explore IoT security challenges and solutions with Zephyr, focusing on NXP Semiconductor's approach to safeguarding connected devices in the evolving digital landscape.
Xen and the Art of Embedded Systems Virtualization
Explore embedded systems virtualization with Xen, covering unique challenges, ARM implementation, and key features like device assignment and interrupt virtualization for automotive and medical applications.