Secure Systems from Insecure Components
Explore innovative cryptographic approaches to build resilient systems that withstand compromises, offering practical solutions for authentication and data protection in today's vulnerable digital landscape.
Compound Interest - Dealing with Two Decades of Technical Debt in Embedded Linux
Explore strategies for managing technical debt in the GPIO subsystem of the Linux kernel, focusing on improvements in serialization, hot-pluggability, and API optimization while maintaining legacy support.
System Introductions I - PVS
Introduction to PVS (Prototype Verification System) for formal specification and verification of systems, covering key features and applications in mathematical proofs and software development.
The Power of Observability - Merging, Scaling and DevSecOps
Explore observability's role in merging, scaling, and DevSecOps. Learn how Dustin Web Development harmonized their monitoring landscape for improved efficiency and security.
The End of DevSecOps? - Leveraging New Tools and AI in Engineering-First Security
Explore how Generative AI and new tools can simplify communication, reduce toil, and integrate security seamlessly into engineering processes, moving beyond traditional DevSecOps.
Formal Synthesis for Robots - Leveraging Formal Methods in Robotic Design
Explore how formal methods and synthesis techniques can design, explain, and guarantee robot behavior, with examples of modular robots, swarms, and human-robot interaction.
PLSE Seminar Series - J. Aldrich "Using Capability-Based Modules to Enforce Secure Resource Usage"
Explores capability-based modules for secure resource management in programming languages, highlighting their benefits and applications in enhancing software security and reasoning.
Effective Vulnerability Management for Over 400 Projects at the Eclipse Foundation
Discover how Eclipse Foundation streamlines vulnerability management across 400+ projects, enhancing security practices and reporting processes for researchers and developers.
Finding Eviction Sets at Scale - Prune+PlumTree Method
Explore efficient techniques for finding eviction sets at scale using the 9 Prune+PlumTree method, enhancing understanding of cache side-channel attacks and defenses.
Approaches and Challenges to Purpose Limitation across Diverse Data Uses
Explore Meta's innovative solutions for purpose limitation in data privacy, addressing challenges of scale, granularity, and conditional flows through annotation-based policy checks.
Boosting System Resilience - Exponential Backoff
Explore exponential backoff for system resilience, from understanding concepts to implementation. Learn real-world applications, error handling, and benefits for robust software design.
Solving Infinite-State Games via Acceleration
Explore novel symbolic semi-algorithms for solving infinite-state games with temporal winning conditions, introducing acceleration techniques to enhance fixpoint-based game-solving methods.
Flex Analysis: A Safe, Integrated and Flexible Approach to Non-Invasive Aneuploidy Analysis
Explore NGS bioinformatics software for non-invasive aneuploidy analysis, focusing on safety, integration, and flexibility in molecular diagnostics workflows.
Security Under the BEAM - Building Trustworthy Isolation in Operating Systems
Explore the Kry10 Secure Platform, combining BEAM VM isolation, seL4 Microkernel, and formal methods to build trustworthy, fault-tolerant systems for IoT and next-gen software development.
Graceful Under Pressure: Prioritizing Shutdown to Protect Your Data in Embedded Systems - Even When the Power Flickers
Explore strategies for prioritizing shutdown in embedded systems to safeguard data during power fluctuations and ensure graceful system behavior under pressure.
Timely Computation - A Formal Approach to Digital Circuit Design
Explore a formal definition of digital circuits, emphasizing compositional correctness and timing analysis through simple denotations and homomorphisms in Agda.
Quantitative Robustness for Vulnerability Assessment
Explore quantitative robust reachability for measuring bug triggering difficulty in software security. Learn about QRSE and functional E-MAJSAT for improved vulnerability assessment.
Automated Identification of Layering Violations in Embedded Applications - Work in Progress
Explore automated detection of layering violations in embedded systems, focusing on Non Conventional MMIO Accesses and their impact on software portability and design.
Great Security Is One Question Away
Discover how asking the right security questions can transform your Python development practices and enhance overall project safety.
MetricCA: Revolutionizing Metrics Collection and Analysis for DevSecOps
Explore MetricCA, a revolutionary tool for DevSecOps metrics collection and analysis. Learn about maturity models, assessment strategies, and practical implementation techniques.
A Beginner's View of Public Instances
Explore OpenSSF's public instances: hosting, scale, security, and usage guidelines. Gain insights into tools for safer software development and protection against attackers.