Cryptography in Distributed Systems
Explore advanced cryptographic techniques for distributed systems, including multi-party revocation, privacy-preserving blockchain identity management, and signature aggregation for improved efficiency.
Bhadra Framework - Threat Modeling for Mobile Communication Systems
Explore the Bhadra framework for threat modeling in mobile communication systems, addressing complex security challenges and providing a structured approach to analyze adversarial behaviors in telecom networks.
Clearing the Clouds - Incident Response in AWS - Isn’t as Bad as You Thought
Demystifying AWS incident response through detailed use cases, focusing on architecture, shared responsibility, and practical strategies for handling AWS-specific security incidents.
Extracting Secrets from Locked Password Managers
Explore vulnerabilities in popular password managers, focusing on security risks during different operational states and potential attack vectors for extracting sensitive information.
What Is a Security Analyst and What Job Role Will They Perform
Explore the role of a security analyst, their responsibilities, and key cybersecurity concepts. Learn about attack chains, compliance, and the security investigation process.
An Extensive Formal Security Analysis of the OpenID Financial Grade API
Comprehensive formal security analysis of OpenID Financial-grade API, uncovering vulnerabilities and proposing mitigations for this high-stakes OAuth 2.0 profile designed for Open Banking scenarios.
KLara - Your New Friend
Cloud-based Yara scanner for efficient malware detection. Scans large malware libraries at high speeds, enhancing threat intelligence and APT hunting capabilities. Open-source project with live demo.
Securing Cyber-Physical Systems - Moving Beyond Fear
Exploring cybersecurity challenges in physical systems, this talk examines root causes of vulnerabilities and proposes systemic approaches to embed security in design, moving beyond fear-based tactics.
Another Road Leads to the Host - From a Message to VM Escape on Nvidia vGPU
Explore vulnerabilities in NVIDIA vGPU, focusing on security risks in cloud infrastructures. Learn about potential VM escape techniques and their implications for AI, deep learning, and cloud gaming.
When Machines Can't Talk
Security analysis of MQTT & CoAP protocols, revealing design flaws, vulnerable implementations, and widespread unsecured deployments in machine-to-machine communication.
New and Newly - Changed Fully Qualified Domain Names - A View of Worldwide Changes to DNS
Innovative approach to monitoring DNS changes, enabling better detection of security threats, phishing, and malicious behavior. Practical examples and demo included.
Fingerprints on Mobile Devices - Abusing and Leaking
Explore vulnerabilities in mobile fingerprint authentication, including authorization attacks, sensor spying, and backdoors. Learn to secure fingerprints and mitigate risks in this eye-opening analysis.
Numchecker - A System Approach for Kernel Rootkit Detection
Explore NumChecker, a VMM-based framework for detecting kernel rootkits using Hardware Performance Counters. Learn about its implementation, effectiveness, and security analysis.
Automating Linux Malware Analysis Using Limon Sandbox
Explore automated Linux malware analysis with Limon sandbox. Learn to collect, analyze, and report runtime indicators using static, dynamic, and memory analysis techniques for comprehensive threat assessment.
On the Indifferentiability of Key-Alternating Ciphers
Explore the cryptographic concept of indifferentiability in key-alternating ciphers, presented by experts at a prestigious conference.
On the Feasibility of Rerouting-Based DDoS Defenses
Analyzes the feasibility of rerouting-based DDoS defenses, highlighting fundamental trade-offs and limitations in current inter-domain infrastructure. Emphasizes the need for rigorous security analysis and real-world testing of new defense proposals.
Understanding the Security of ARM Debugging Features
Comprehensive analysis of ARM debugging features' security implications across various platforms, exposing vulnerabilities and demonstrating the Nailgun attack to highlight potential risks.
Security Analysis of Emerging Smart Home Applications
Empirical security analysis of SmartThings smart home platform reveals design flaws leading to overprivilege and vulnerabilities in event subsystem, demonstrating potential risks in emerging IoT frameworks.
Blunting the Phisher's Spear - A Risk-Based Approach
Explore a risk-based approach to combat spear phishing, introducing the Cyber Risk Index for personalized training and access management to enhance organizational cybersecurity.
NLP for Security Log Analysis - Learning to Crawl Before You Run
Explore the application of NLP in security analysis, focusing on embeddings for insider threat detection and the impact of large language models on the field.
Hiring and Interviewing as Security Engineers
Insights on reducing bias in security hiring and maximizing interviews for various roles, drawing from a decade of global experience across major tech companies and startups.