Automatic Uncovering of Hidden Behaviors from Input Validation in Mobile Apps
Uncovers hidden behaviors in mobile apps through input validation analysis, revealing backdoors and blacklists. Presents INPUTSCOPE tool for automatic detection of execution context and content in user input validation.
IJON: Exploring Deep State Spaces via Fuzzing
Explore advanced fuzzing techniques for deep state spaces, covering high-level mutation, feedback mechanisms, and practical applications in software testing and security.
Preventing Déjà Vu - Vector Similarity Search for Security Alerts, with Expel and Pinecone
Explore vector similarity search techniques to combat alert fatigue in cybersecurity, enhancing operational efficiency and decision-making for security analysts.
Krace: Data Race Fuzzing for Kernel File Systems
Innovative fuzzing technique for detecting data races in kernel file systems, enhancing concurrency coverage tracking and active interleaving exploration through delay injection.
Enabling Rack-Scale Confidential Computing Using Heterogeneous Trusted Execution Environment
Explore heterogeneous trusted execution environments for large-scale confidential computing, addressing GPU protection challenges and offering a scalable solution for data-intensive tasks without chip-level modifications.
Fuzzing JavaScript Engines with Aspect-Preserving Mutation
Explore innovative techniques for discovering JavaScript engine vulnerabilities through aspect-preserving mutation, enhancing web browser security and bug detection efficiency.
Precise and Scalable Detection of Double-Fetch Bugs in OS Kernels
Explore precise detection of double-fetch bugs in OS kernels, covering multi-read identification, symbolic checking, and mitigation strategies for enhanced system security.
Programming Languages for High-Assurance Vehicles
Explore secure programming for high-assurance vehicles using embedded domain-specific languages in Haskell, focusing on autopilot development, verification tools, and real-world applications.
Cloak and Dagger - From Two Permissions to Complete Control of the UI Feedback Loop
Uncovers Android security flaws allowing malicious apps to control UI feedback loop, enabling stealthy attacks like credential theft and unauthorized app installations without user awareness.
Hardening Java's Access Control by Abolishing Implicit Privilege Elevation
Explores Java's access control vulnerabilities, proposing explicit privilege elevation to enhance security. Demonstrates how removing shortcuts in the Java Class Library can prevent confused-deputy vulnerabilities without performance loss.
HVLearn - Automated Black-Box Analysis of Hostname Verification in SSL-TLS Implementations
Automated analysis of hostname verification in SSL/TLS implementations using automata learning algorithms. Identifies vulnerabilities and specification violations in popular libraries and applications.
React Node.js Video Sharing App Full Tutorial - MERN Stack Youtube Clone
Comprehensive MERN stack tutorial for building a video-sharing platform with advanced features like authentication, CRUD operations, and integration with Firebase and Redux Toolkit.
React Node.js E-Commerce App Full Tutorial - MERN Stack Shopping App
Comprehensive MERN stack tutorial for building a full-featured e-commerce app with Redux, Stripe, and JWT, covering frontend, backend, and admin dashboard development.
Node.js E-Commerce App REST API with MongoDB - Shopping API with Stripe & JWT
Build a comprehensive e-commerce REST API using Node.js, MongoDB, and Stripe. Learn authentication, CRUD operations, and payment integration for a robust shopping platform.
Deploy Node.js and React Apps - Full Deployment with Nginx VPS, SSL
Comprehensive guide to deploying Node.js and React applications on a VPS using Nginx, covering server setup, app configuration, domain management, and SSL implementation.
React Node.js Netflix App - MERN Stack + JWT Full Tutorial
Build a full-stack Netflix clone using MERN stack, featuring user authentication, movie management, and an admin dashboard. Learn to integrate APIs, implement CRUD operations, and create responsive designs.
JWT Authentication Tutorial - Node.js and React
Learn JWT authentication and authorization in Node.js and React, covering implementation, verification, refresh tokens, and automatic token refreshing for secure web applications.
Node.js Social Media REST API with MongoDB
Build a social media REST API with Node.js, Express, and MongoDB. Learn user authentication, CRUD operations, and advanced features like following users and liking posts.
Virtual Reality Brings Real Risks - Are We Ready?
Explore the emerging cybersecurity risks associated with virtual reality technology and learn about efforts to build standards and processes to protect users in this rapidly growing field.
Timeless Debugging - A New Paradigm for Exploit Development
George Hotz introduces QIRA, an open-source tool for timeless debugging, showcasing its potential to revolutionize exploit development and significantly speed up the debugging process.
Insider Attack Resistance in the Android Ecosystem
Exploring insider attack threats in mobile ecosystems and Android's multi-level defense strategies, including hardware-level protections and system software transparency to enhance user security.