On Code Execution Tracking via Power Side-Channel
Explore power side-channel analysis for code execution tracking in embedded systems, covering key extraction attacks, control flow integrity, and Hidden Markov Models for security applications.
Bypassing KPTI Using the Speculative Behavior of the SWAPGS Instruction
Unveiling a new speculative execution attack exploiting SWAPGS instruction, bypassing existing CPU and kernel protections. Explores side-channel vulnerabilities and their implications for system security.
Practical Side-Channel Attacks Against WPA-TKIP
Explore practical side-channel attacks against WPA-TKIP in Wi-Fi networks, analyzing vulnerabilities and countermeasures in this widely-used legacy protocol.
Meltdown - Basics, Details, Consequences
Explore Meltdown, a critical security vulnerability that breaks fundamental isolation between user applications and operating systems, allowing unauthorized access to system memory and sensitive data.
Screaming Channels - When Electromagnetic Side Channels Meet Radio Transceivers
Novel side-channel attacks on mixed-design chips exploiting electromagnetic leaks in radio signals, potentially breaking cryptography over large distances. Explores discovery, impact, and countermeasures.
A Hacker's Guide to Reducing Side-Channel Attack Surfaces Using Deep Learning
Explore deep-learning techniques to identify and reduce side-channel attack vulnerabilities, leveraging AI explainability for efficient implementation assessment and improved security.
Side-Channel Attacks
Explore side-channel attacks and machine learning in cybersecurity with expert Stjepan Picek. Learn practical techniques, profiling methods, and key outcomes in this informative webinar.
Bypassing Hardware-Based Trusted Boot Through x86 Downgrade
Exploiting microcode loader vulnerability to downgrade CPU microcode, enabling attacks on Intel security technologies like Boot Guard and TXT by loading older, vulnerable versions of Authenticated Code Modules.
I Block You Because I Love You - Social Account Identification Attack Against a Website Visitor
Practical side-channel attack to identify social web service accounts of website visitors, compromising anonymity through user profiles and activities.
TLBleed - When Protecting Your CPU Caches is Not Enough
Explore TLBleed, a novel side-channel attack leaking information from Translation Lookaside Buffers, demonstrating vulnerabilities beyond CPU caches and challenging current security measures.
Demystifying Key Stretching and PAKEs
Explore key stretching and PAKEs: their history, best practices, and applications in encrypted cloud services. Learn to create toy algorithms and understand their importance in cybersecurity.
Unboxing the White-Box - Practical Attacks Against Obfuscated Ciphers
Explore practical attacks on obfuscated ciphers, focusing on White-Box Cryptography. Learn techniques to assess security, understand vulnerabilities, and evaluate robustness against key extraction in software implementations.
Exploiting Out-of-Order Execution for Covert Cross-VM Communication
Explore a novel side channel attack exploiting CPU out-of-order execution for covert cross-VM communication in cloud environments, with live demos and mitigation techniques.
HEIST - HTTP Encrypted Information can be Stolen Through TCP-Windows
Unveils HEIST, a browser-based attack exploiting SSL/TLS vulnerabilities without network access. Demonstrates how to leak cross-origin response sizes, enabling compression-based attacks and sensitive information extraction from popular websites.
Over the Edge - Silently Owning Windows 10's Secure Browser
Exploiting Windows 10's memory deduplication feature to silently compromise Microsoft Edge, bypassing security measures and gaining arbitrary memory access through JavaScript-based attacks.
Leakage-Resilient Symmetric Cryptography under Empirical
Explore leakage-resilient symmetric cryptography and its empirical applications in this insightful talk by leading researchers in the field.
Attack Directories, Not Caches - Side Channel Attacks in a Non Inclusive World
Explores novel side-channel attacks on non-inclusive cache hierarchies, demonstrating vulnerabilities in modern systems through directory structure exploitation and cross-core Prime+Probe techniques.
How Your DRAM Becomes a Security Problem
Explore DRAM security vulnerabilities and side-channel attacks targeting row buffers, with implications for various devices and systems regardless of software or OS.
Side-Channel Attacks on Everyday Applications
Explore FLUSH+RELOAD side-channel attacks beyond cryptography, demonstrating their potential to leak information from everyday applications like web browsers and text editors.
Practical Timing Side-Channel Attacks on Memory Compression
Explore timing side-channel attacks on memory compression, uncovering vulnerabilities and potential security risks in modern computing systems.
High-Order Masking of Lattice Signatures in Quasilinear Time
Explore advanced techniques for securing lattice-based cryptographic signatures against side-channel attacks using high-order masking methods with improved efficiency.