LanDscAPe - Exploring LDAP Weaknesses and Data Leaks at Internet Scale
Explore a comprehensive analysis of LDAP server vulnerabilities, revealing critical security misconfigurations, data leaks, and TLS setup issues across thousands of Internet-connected servers.
EVOKE: Efficient Revocation of Verifiable Credentials in IoT Networks
Discover an innovative approach to managing verifiable credentials in IoT networks through EVOKE, a system that enables efficient revocation mechanisms while minimizing computing and storage overhead for resource-constrained devices.
SpotProxy: Rediscovering the Cloud for Censorship Circumvention
Discover how SpotProxy leverages cloud Spot VMs to create cost-effective, dynamic censorship circumvention proxies that automatically refresh IP addresses while maintaining seamless connectivity.
WEBRR: A Forensic System for Replaying and Investigating Web-Based Attacks in The Modern Web
Explore a novel forensic system that enables deterministic replay and investigation of web-based attacks through JavaScript Execution Unit Partitioning, offering enhanced visibility into cyber threats.
MOAT: Towards Safe BPF Kernel Extension
Discover how MOAT system enhances Linux kernel security by isolating BPF programs using Intel Memory Protection Keys, offering efficient protection with minimal performance impact.
Content Moderation in the InterPlanetary File System - A Study of Problematic Content Detection and Filtering
Explore content moderation challenges in IPFS, examining problematic content detection, hosting patterns, and improved filtering methods for decentralized web infrastructure.
SmartCookie: Blocking Large-Scale SYN Floods with a Split-Proxy Defense on Programmable Data Planes
Discover how SmartCookie leverages programmable switches to block SYN flood attacks while maintaining network performance, offering innovative defense mechanisms for modern high-speed networks.
Diffie-Hellman Key Exchange Security Issues in Commercial VoWiFi Deployments
Explore critical security vulnerabilities in VoWiFi deployments, focusing on IPsec tunnel key exchanges and their implications for mobile network operators and user equipment worldwide.
CalcuLatency: Leveraging Cross-Layer Network Latency Measurements to Detect Proxy-Enabled Abuse
Explore how CalcuLatency uses network latency measurements to detect proxy-enabled abuse, combining application and network layer analysis for effective proxy identification.
Using Throttling and Traffic Shaping to Combat Botnet Spam
Discover effective strategies for combating botnet spam through traffic shaping and throttling techniques, while understanding spammer behavior patterns and implementing practical connection management solutions.
BGP Prefix Hijacking and the Spam Wars - Network Layer Security Implications
Delve into BGP prefix hijacking's role in spam warfare, exploring how spammers exploit network routing to defeat blacklists and the concerning implications for IPv4 address manipulation.
Reverse Engineering the Eufy Ecosystem: A Deep Dive into Security Vulnerabilities and Proprietary Protocols
Delve into critical security vulnerabilities discovered in Eufy's IoT ecosystem through reverse engineering, revealing privacy risks and exploring countermeasures for smart home devices.
Security Analysis of Shimano Di2 Wireless Gear Shifting in Bicycles
Uncover critical security vulnerabilities in Shimano Di2 wireless bicycle gear-shifting systems, including replay attacks, targeted jamming, and information leakage through ANT+ communication protocols.
Breaking Into an O-RAN 5G Indoor Base Station - Security Analysis and Vulnerabilities
Uncover critical security vulnerabilities in O-RAN 5G indoor base stations through detailed analysis of hardware, software, and services, revealing remote code execution risks and standard deviations.
Attacking with Something That Does Not Exist: Proof of Non-Existence Can Exhaust DNS Resolver CPU
Explore how NSEC3 proof of non-existence in DNSSEC can be exploited to exhaust DNS resolver CPU resources, with detailed attack implementation and performance analysis.
Amplifying Threats: The Role of Multi-Sender Coordination in SMS-Timing-Based Location Inference Attacks
Explore how multiple SMS senders can enhance location inference attacks through timing side channels, revealing improved accuracy and potential security vulnerabilities in mobile networks.
Setting Up an HTTP/3 Reverse Proxy with MITMProxy
Learn how to set up and configure an HTTP/3 reverse proxy using mitmproxy v11, covering certificate setup, ALT-SVC headers, and connection testing for modern web protocols.
Hacker Numerology - Understanding System Security Through Number Analysis
Explore the fascinating relationship between numbers and system security, learning to deduce security properties through identifier pattern analysis and observation.
Winning Strategies in API Security: Case Studies of Successful Attack Prevention
Explore real-world API security victories through case studies and learn effective data science strategies to detect and prevent attacks.
Analyzing and Preventing DDoS Attacks - Technical and Business Strategies
Dive into real-world DDOS attack analysis, learning essential prevention strategies and technical solutions while understanding how to communicate security measures effectively to leadership teams.
Is trust the weakest link in cybersecurity? | Mohammed Aldelaimi | TEDxBaghdad
This talk explores one of the most dangerous and underestimated threats in cybersecurity: social engineering. Rather than relying on advanced technology, modern hackers increasingly exploit human psychology—trust, fear, urgency, and routine—to bypass even the strongest digital defenses. Through rea