Investigating WebSocket Server Security - Beyond HTTP
Investigates WebSocket server security, introducing new tools for endpoint discovery, server fingerprinting, and vulnerability detection. Focuses on implementation-level differences in open-source libraries.
Hacking Ethereum-based DApps - Security Vulnerabilities and Protections
Explore Ethereum-based DApps vulnerabilities and security measures. Learn attack techniques and protection strategies for blockchain applications.
Introducing Graph Theory to Policy-As-Code
Explore graph theory application in Policy-As-Code using Checkov, focusing on relationships between cloud infrastructure resources and enhancing security through custom policies.
Kubernetes Cluster Security and Usability: Best Practices and Common Pitfalls
Practical guide to securing Kubernetes clusters, covering common misconfigurations, scalable security approaches, and best practices for different deployment scenarios and threat models.
Container Security: It's All About the Supply Chain
Explore container security as a supply chain lifecycle issue, focusing on integrating validation at multiple points to achieve assurance in the software development process.
What We've Learned From Scanning 10K+ Kubernetes Clusters
Insights from scanning over 10,000 Kubernetes clusters, revealing common security vulnerabilities and best practices for robust container orchestration.
Log Story Short: Chopping Through Forests of Data
Explore techniques for efficiently analyzing vast log data to enhance application security and incident response in this insightful presentation by security expert Moti Harmats.
The Hand That Feeds - How to Misuse Kubernetes
Explore Kubernetes vulnerabilities and misconfigurations, learning how to identify and mitigate security risks in containerized environments.
Kubernetes Security: Attacking and Defending K8s Clusters
Explore Kubernetes security through attack scenarios, defense strategies, and best practices. Learn to protect clusters using RBAC, audit logs, and network policies.
Password Hashing Delegation: How to Get Clients to Work for You
Explore innovative password hashing techniques that leverage client-side processing, enhancing security and efficiency in authentication systems.
Network Hashes: A Review of Many Network Protocols - Robert Graham
Comprehensive review of network protocols, covering authentication, encryption, and security aspects across various services like SMTP, HTTP, and VPN.
Microsoft's Expectations for the Password Hashing Competition
Explore Microsoft's perspective on password hashing competitions, discussing security requirements, performance considerations, and potential improvements for authentication systems.
Using Cryptanalysis to Speed Up Password Cracking
Explore cryptanalysis techniques to enhance password cracking efficiency, improving security assessment and penetration testing capabilities.
Tradeoff Cryptanalysis of Password Hashing Schemes
Explore advanced cryptanalysis techniques for password hashing schemes, focusing on tradeoff methods and their implications for security.
qaul - Resilient Communication During Blackouts and Internet Shutdowns
Resilient P2P messaging app for communication during internet shutdowns. Features encryption, mesh networking, and delay-tolerant messaging for use in challenging connectivity environments.
Container Security 101
Comprehensive introduction to container security, covering key concepts, best practices, and practical strategies for securing containerized applications.
The Common Configuration Scoring System for Kubernetes Security
Explore the Common Configuration Scoring System for enhancing Kubernetes security, presented by an expert from Octarine Labs Inc.
IoT Developer's Guide to Building Secure IoT Devices
Learn essential strategies and best practices for developing secure IoT devices, focusing on key vulnerabilities and effective mitigation techniques.
DIY Smart Home Demonstration and How-to Using FOSS
Learn to create your own smart home system using free, open-source software. Explore practical demonstrations and step-by-step guidance for implementing DIY solutions.
Software Update (OTA) for Zephyr
Learn about implementing over-the-air software updates in Zephyr RTOS, covering key concepts, challenges, and practical implementation techniques for embedded systems.
The Bad Guys Just Broke My Crypto - What Do I Do?
Explore cryptography challenges, quantum computing threats, and solutions for secure communications in this talk by Intel UK's Kris Chaplin.