Secrets at Scale - Automated Bootstrapping of Secrets & Identity in the Cloud
Explore Netflix's innovative approach to securely managing secrets and identities for thousands of microservices in a cloud environment, addressing scalability and self-healing challenges.
Disclosing Passwords Hashing Policies
Explore password hashing policies, their disclosure, and implications for security. Learn about password length, breaches, and rating systems for evaluating hashing practices across various platforms.
Watch Out For That Bus! - Personal Disaster Recovery Planning
Practical strategies for personal disaster recovery planning, covering digital security, backups, financial preparedness, and ensuring loved ones can manage your affairs in emergencies.
Security Awareness Training Refresh
Refresh your security awareness with practical tips on password management, phishing prevention, and role-based training. Learn to engage users effectively and create impactful, tailored security programs.
The Emperor’s New Password Manager - Security Analysis of Web-based Password Managers
Security analysis of web-based password managers, revealing vulnerabilities in features like one-time passwords and bookmarklets. Explores diverse root causes and provides guidance for improving password manager security.
Security in the Wild for Low-Profile Activists - Zeynep Tufekci - USENIX Enigma Conference - 2017
Insights into digital security challenges faced by low-profile activists, exploring their unique needs, behaviors, and concerns in various global contexts.
Beyond Takeover - Attacker's In. Now What?
Explore the aftermath of phishing attacks through a unique research perspective, uncovering attacker behaviors, account takeover dynamics, and essential cybersecurity insights for organizations.
Passwords Are Not Going Away
Explore password security, authentication best practices, and user experience considerations in digital identity management. Insights from 23+ years of expertise in the field.
They Would do Better if They Worked Together - The Case of Interaction Problems Between Password Managers and Websites
Explore interaction issues between password managers and websites, uncovering challenges and potential solutions for improved digital security.
Why People - Don't - Use Password Managers Effectively
Explores user attitudes towards password managers, revealing differences between built-in and separate tool users, and provides insights to improve adoption and effective usage of these security tools.
Even The LastPass Will Be Stolen, Deal With It!
Uncover vulnerabilities in LastPass password manager, including methods to steal master passwords, bypass 2FA, and access encrypted vaults, highlighting the importance of robust security measures.
Who Are You? Delegation, Federation, Assertions and Claims
Explore protocols for delegating identity management, including SAML, OAuth, and OpenID Connect. Learn about single sign-on, authentication issues, and considerations for implementing these solutions.
Pavlovian Security - How To Change the Way Your Users Respond When the Bell Rings
Learn to influence user behavior for better security through Pavlovian techniques. Explore motivations, failures, and practical strategies to raise awareness and create secure habits in your organization.
Toward Better Password Requirements
Explore modern password security practices, including composition rules, storage methods, and authentication alternatives, to enhance digital identity protection.
What We've Learned with Two-Secret Key Derivation
Explore two-secret key derivation for enhanced password security. Learn about count keys, server storage, and team management in this insightful presentation on advanced cryptographic techniques.
Keep it Simple, Stupid - Why the Usual Password Policies Don't Work, and What to Do About It
Explores ineffective password policies and presents a solution balancing security and usability. Discusses password history, attack models, human factors, and practical experiences with improved strategies.
Creating Secure Software - Benefits from Cloud Thinking
Explore how cloud-native design patterns enhance software security, covering configuration, statelessness, logging, and automation for both legacy and new development.
Insecure Transit - Microservice Security Challenges and Solutions
Explore microservice security challenges and solutions, covering data breaches, risk assessment, credential management, and network communication. Learn practical strategies for building robust, secure architectures.
Hack Like a Pro - Bug Bounties, Web Vulnerabilities & More
Explore ethical hacking, bug bounties, web vulnerabilities, and API security. Learn how to start in cybersecurity, understand ethical boundaries, and get tips for password management and bug hunting.
Code of Practice for Security in Consumer IoT Products and Services
Explore the UK's Code of Practice for IoT security, addressing password issues, vulnerability disclosure, and software updates. Learn about future challenges and potential certification methods.
Comparing Centrally and Locally Verified Memorized Secrets
Explore the differences between central and local verification of memorized secrets, examining security implications and best practices for password management.