zxcvbn - Low-Budget Password Strength Estimation
Explore zxcvbn, an innovative password strength estimator that outperforms traditional methods. Learn its efficient design, accuracy, and easy implementation for enhanced online security.
fTPM - A Software-Only Implementation of a TPM Chip
Explore software-based TPM implementation using ARM TrustZone, overcoming hardware limitations to provide robust security features for trusted computing in mobile devices.
Fast, Lean, and Accurate - Modeling Password Guessability Using Neural Networks
Neural networks for modeling password guessability: faster, smaller, and more accurate than existing methods. Enables real-time, client-side password strength evaluation with sub-second latency.
Ghostor - Toward a Secure Data Sharing System from Decentralized Trust
Explore a secure data-sharing system that protects user privacy and ensures data integrity through decentralized trust, hiding identities and detecting server-side violations.
XRD - Scalable Messaging System with Cryptographic Privacy
Scalable messaging system offering cryptographic privacy, using parallel mix networks and novel techniques to support millions of users with low latency while protecting communication metadata.
Key Per IO Security Subsystem Class for NVM Express Storage Devices
Explore KPIO, a new security standard for NVMe storage devices offering granular encryption, enhanced data protection, and improved compliance with data privacy regulations.
Anatomy of a DDoS
Explore DDoS attacks: structure, evolution, and countermeasures. Learn about botnet creation, recent high-profile incidents, and ongoing efforts to combat this cybersecurity threat.
In Search of Security Shangri-La
Exploring the evolution of cybersecurity practices, challenges in integrating security into tech processes, and strategies for achieving a more collaborative and effective security approach in modern organizations.
Building Resilience - How to Learn More from Incidents
Discover strategies to enhance organizational resilience through improved incident learning. Explore research-backed approaches to post-incident reviews and avoid common investigation pitfalls.
Hiding in Plain Signal - Physical Signal Overshadowing Attack on LTE
Explores a novel LTE signal injection attack, demonstrating higher success rates than fake base station attacks. Discusses implications and potential countermeasures for this physical signal overshadowing vulnerability.
Leaky Images - Targeted Privacy Attacks in the Web
Unveils a novel privacy attack exploiting shared images on popular websites, allowing attackers to track user visits and link identities across platforms without using scripts.
FastKitten - Practical Smart Contracts on Bitcoin
Explore FastKitten, a framework for executing complex smart contracts on Bitcoin using trusted computing environments, offering efficiency and low costs for multi-round applications.
AntiFuzz - Impeding Fuzzing Audits of Binary Executables
Explore techniques to protect binary executables against automated bug-finding tools, focusing on impeding fuzzing, symbolic execution, and hybrid fuzzing approaches while maintaining performance.
JEDI - Many-to-Many End-to-End Encryption and Key Delegation for IoT
Explore JEDI, a novel end-to-end encryption protocol for IoT systems, addressing security challenges in smart buildings and cities through key delegation and fine-grained access control.
Understanding and Improving Security and Privacy in Multi-User Smart Homes - A Design Exploration and In-Home User Study
Explore security and privacy challenges in multi-user smart homes, examining design principles and a prototype solution for respectful usage and user agency.
Platforms in Everything - Analyzing Ground-Truth Data on the Anatomy and Economics of Bullet-Proof Hosting
Empirical study on Bullet-Proof Hosting provider Maxided, analyzing business model, supply chain, customers, and finances. Reveals shifts in BPH landscape and potential intervention points for disrupting cybercrime-supporting services.
Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities
Innovative TLS vulnerability scanning methodology reveals widespread CBC padding oracle vulnerabilities, challenging assumptions about their exploitability and highlighting significant security risks in web infrastructure.
The Art of The Scam - Demystifying Honeypots in Ethereum Smart Contracts
Explores honeypot smart contracts in Ethereum, their prevalence, and impact. Presents HoneyBadger tool for detecting honeypots, analyzing 2M+ contracts and identifying 690 honeypots with 240 victims.
Zanzibar - Google’s Consistent, Global Authorization System
Explore Google's Zanzibar, a global authorization system for storing and evaluating access control lists, offering scalability, consistency, and high performance across various services.
LXDs - Towards Isolation of Kernel Subsystems
Explores Lightweight Execution Domains (LXDs) as a solution for isolating kernel subsystems, enhancing security by confining potential exploits without significant modifications or performance impact.
Libmpk - Software Abstraction for Intel Memory Protection Keys
Explore libmpk, a software abstraction enhancing Intel MPK's security and scalability. Learn about its implementation, benefits, and applications in OpenSSL, JavaScript JIT, and Memcached.