How I Used to Rob Banks
Explore ethical hacking techniques and security vulnerabilities in banking systems through real-world stories and lessons from a professional penetration tester.
Security for the Masses - How to Stop Preaching to the Choir and Get Involved
Redefining InfoSec: strategies for inclusive security implementation, building trust, and creating champions across organizations to enhance overall security effectiveness.
Real World Use Cases for Tachyon - A Memory-Centric Distributed Storage System
Explore Tachyon, a memory-centric distributed storage system for fast big data processing. Learn about its architecture, features, and real-world applications in various industries.
Java EE Security API
Explore the Java EE Security API, its current state, and future directions. Gain insights into simplifying and improving security implementations in Java EE applications.
WebRTC Security - Is Web-Based Peer-to-Peer Ready for Primetime?
Explore WebRTC security, architecture, and challenges in web-based peer-to-peer communication. Gain insights into deployment scenarios, potential weaknesses, and open security issues in this emerging technology.
HOME Sweet HOME
Explore home network security challenges in the IoT era. Learn about developing secure code for diverse systems and mitigating risks associated with small hardware platforms.
Getting Single Page Application Security Right
Explore SPA security challenges and solutions, covering XSS, CSP, session management, and CSRF in RESTful APIs. Learn practical strategies for building secure web applications using modern frameworks.
Printed Circuit Board Deconstruction Techniques
Explore effective PCB reverse engineering techniques, from affordable home solutions to advanced technologies, for analyzing component interconnections and system functionality.
Hell of a Handshake - Abusing TCP for Reflective Amplification DDoS Attacks
Explores TCP-based amplification DDoS attacks, revealing vulnerabilities in the handshake process and identifying thousands of potential amplifiers through Internet-wide scans of common TCP protocols.
IPv6 Security - Attacks and Countermeasures in a Nutshell
Comprehensive overview of IPv6 security vulnerabilities and countermeasures, discussing current challenges and future research directions in network protocol security.
An Experience Report on Extracting and Viewing Memory Events via Wireshark
Innovative system for monitoring low-level memory events using Wireshark, enhancing debugging, reverse engineering, and security analysis. Offers efficient, non-invasive memory event tracking with wide-ranging applications.
Through the Looking-Glass, and What Eve Found There
Exploring security vulnerabilities in looking-glass web applications used by Autonomous Systems, revealing potential exploits that could lead to remote command execution on backbone routers and compromise Internet infrastructure.
Lowering the USB Fuzzing Barrier by Transparent Two-Way Emulation
Innovative USB testing framework enabling cost-effective, flexible analysis and modification of USB communication. Introduces two-way emulation for enhanced fuzzing and vulnerability detection.
Automated Reverse Engineering Using Lego
Innovative use of Lego robots for automated reverse engineering of smartcard readers, revealing security vulnerabilities through state machine learning and fuzzing techniques.
Symmetric Disclosure - A Fresh Look at K-Anonymity
Explores k-anonymity in social networks, proposing "symmetric disclosure" to reduce overhead in sparse networks by having both parties specify origin and target sets for communication.
Shame, Privacy, and the Public Sphere - A New Definition for a New Era
Explore how shame has evolved in the digital age, its weaponization, and its impact on privacy and public discourse. Gain insights into modern shaming behavior and its consequences.
IoT Cybersecurity - EU Normenupdate
Überblick über aktuelle und kommende EU-Standards zur IoT-Cybersicherheit. Diskussion von Richtlinien, Anforderungen und praktischer Umsetzung für Entwickler und Inverkehrbringer von IoT-Produkten in der EU.
OMGOVHBBQ
Análisis detallado del incendio en el centro de datos de Estrasburgo en marzo de 2021, sus causas y consecuencias para la infraestructura en la nube.
Beyond the Checkbox - Breaking Out of Testing Frameworks
Explore mobile app security beyond standard testing frameworks, learning threat modeling and custom attack strategies for comprehensive vulnerability assessment.
Wie macht man eigentlich Zwiebeln - Anleitung fürs erste eigene Tor Relay
Schritt-für-Schritt-Anleitung zur Einrichtung eines Tor-Relays für Anfänger. Erklärt die Bedeutung des Tor-Netzwerks und bietet praktische Tipps für den Betrieb eines eigenen Relays ohne Vorkenntnisse.
Green Lights Forever - Analyzing the Security of Traffic Infrastructure
Researchers expose security vulnerabilities in traffic signal systems, demonstrating potential for disruption and safety risks. Recommendations for improving embedded systems security are provided.