Encryption and Authentication: Passwords for All Reasons
Learn about encryption and authentication passwords, exploring their differences, uses, and user expectations. Gain insights into key concepts and challenges in digital security.
Key Management 101 - DEKs, KEKs, and Credentials Living Together
Explore key management essentials, including types of keys, usage, and tools. Learn practical advice for PCI compliance and securing sensitive data in cloud environments.
Encrypted File System for Rust and Android Applications - Rust Zürisee 2023
Explore encrypted file systems for Rust/Android apps, focusing on multi-key secret handling, virtual file systems, and device synchronization. Learn about application-level encryption and native integration.
Building an OpenSSL 3 Provider for PKCS11 - DevConf.CZ 2023
Explore OpenSSL 3's new provider system for PKCS11, learning its advantages, challenges, and implementation details for smartcard access and cryptographic operations.
Crypto Code
Explore cryptographic coding techniques and best practices for secure software development in this concise tutorial.
Securing DNSSEC with Ritual and Ceremony - How Neo-Victorians Keep Out Cads and Bounders
Explore the social factors and ritualized behaviors crucial for DNSSEC key signing ceremonies, examining participant selection, hierarchies, and trust distribution to ensure cryptographic operation credibility.
What's New in Security for Red Hat OpenStack Platform
Explore recent security advancements in Red Hat OpenStack Platform, including key management, encryption, compliance, and future developments for enhanced cloud infrastructure protection.
Who dis? The Right Way To Authenticate
Explore secure authentication methods, including tokens, OAuth, and SAML. Learn best practices, common issues, and key takeaways for implementing robust authentication in your systems.
How to Keep Your Secrets Safe - Alternatives to 'Just Don't' on an Android Device
Explore Android security techniques for safeguarding secrets, from authentication to key management. Learn practical approaches to enhance app security and protect sensitive data.
20 Ways Past Secure Boot
Explore 20 methods to bypass secure boot, including debug access, exploits, timing attacks, glitches, and design flaws. Learn about real-world examples and security implications.
Common API Security Pitfalls
Explore common API security pitfalls, their root causes, and best practices for protection. Learn to assess and improve API security, focusing on authentication, encryption, and input validation.
Reducing Mixtape to Master Key Scenarios - How to Block the Dark Army from Mayhem Using API-Driven Access Control
Discover API-driven access control strategies to enhance security by eliminating "master keys" and implementing temporary, context-based privileged access in your infrastructure.
Insecurity of Smart Energy Meters - A Hardware Security Perspective
Explore hardware security vulnerabilities in smart energy meters, covering threat classifications, current trends, and testing methodologies for advanced metering infrastructure and grid security.
Don't Ignore GDPR - It Matters Now
Explore GDPR's impact on global businesses, covering key requirements, data protection roles, personal data definitions, and subject rights in this informative talk.
Web Application Session Strength
Explore web application security, focusing on session management, token creation, and potential vulnerabilities. Learn strategies to protect against common threats and enhance overall application security.
Cloud Keep - Protect Your Secrets at Scale
Explore Cloud Keep, an open-source key management solution for secure data protection in cloud environments. Learn about its architecture, implementation, and future plans for enhancing cloud security.
Practical PKI
Demystifying PKI: Learn about electronic trust, digital certificates, and identity management. Explore real-world applications and future trends in cybersecurity without complex math.
The Emerging Product Security Leader Discipline
Explore product security leadership, covering defense strategies, DevOps integration, threat modeling, and real-world examples. Learn to leverage risks, implement security practices, and adapt to emerging technologies.
Parsec - A New Platform Abstraction for Security
Explore Parsec, an open-source platform for standardized security interfaces. Learn about its API, architecture, and integration with hardware-backed security features across platforms.
Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps
Explores root causes of data leaks in cloud-based mobile apps, revealing authentication and permission issues. Presents automated analysis techniques to identify vulnerabilities in cloud API usage.
Building Blockchain Apps with Zero Knowledge
Explore blockchain app development with Arkane Network APIs, focusing on user-friendly solutions and overcoming adoption challenges in decentralized applications.