
Simulationsumgebung für Hacking-Angriffe: Testen von Sicherheitssystemen, Beobachtung von Reaktionen und Verbesserung der Systemhärtung mit Purple Dome.

Erfahrungen und Konzepte zur Implementierung von Secure Boot auf Linux-Systemen, um Schadsoftware und manipulierte Betriebssysteme zu verhindern.

Einführung in OSINT: Methoden zur Informationsgewinnung aus öffentlichen Quellen, Tools zur Bildanalyse und Lokalisierung, Sicherheitsaspekte beim Teilen persönlicher Daten im Internet.

Analyse von Sicherheitslücken in der DataVault-Verschlüsselungssoftware für USB-Sticks und Festplatten. Aufdeckung schwerwiegender Mängel bei Schlüsselableitung und Verschlüsselung trotz starker Sicherheitsversprechen.

Explore Android custom permissions, uncovering potential security vulnerabilities and design flaws while learning best practices for secure app development.

Explore automated browsing activity, distinguishing between beneficial and malicious bots, and learn strategies for effective bot management and cybersecurity.

Explore techniques for developing privacy-preserving algorithms and mechanisms, focusing on differential privacy principles and their practical applications.

Explore innovative approaches to gun registration using decentralized and encrypted technologies, addressing privacy concerns and enhancing data security.

Explore efficient encryption techniques for cross-domain access control, featuring arbitrary policies and constant-size ciphertexts. Learn about innovative approaches to secure data sharing across multiple domains.

Reveals critical flaws in e-voting systems, demonstrating how sophisticated cryptography can inadvertently introduce vulnerabilities that allow undetectable election fraud despite apparent verifiability.

Explore vulnerabilities in AMD's Secure Encrypted Virtualization technology, focusing on integrity breaches and their implications for system security.

Explore advanced techniques for analyzing and enhancing endpoint detection and response systems, focusing on tactical provenance analysis for improved cybersecurity.

Explore an innovative, efficient oblivious priority queue algorithm with optimal performance and practical applications in secure data structures and sorting.

Automated system for detecting and remediating long-lived multi-stage attacks on CMS-based websites using nightly backups, improving security beyond traditional "backup and restore" models.

Comprehensive analysis of security vulnerabilities in TrustZone-assisted Trusted Execution Environments, exploring architecture issues, implementation bugs, and hardware flaws across popular TEE systems. Offers insights for improving TEE security.

Explore how perspective-taking, privacy cues, and photo valence impact social media photo sharing decisions, revealing surprising findings about privacy considerations.

Explore cyber insurance's growth, challenges, and future directions. Discover how data-driven methodologies and automated tools can enhance risk assessment and management in this evolving field.

Explore how attackers can manipulate word embeddings through corpus modifications, affecting downstream NLP tasks and fooling defenses. Learn about implications for information retrieval and translation.

Explore how just-in-time compilation can introduce timing side channels in software, enabling attackers to infer sensitive information through observable resource usage imbalances.

Explore how mandatory security update labels for IoT devices can incentivize manufacturers to improve product security and influence consumer choices in the expanding IoT market.

Explore microarchitectural vulnerabilities and load value injection techniques to understand transient execution hijacking in modern processors.