Looking in the Rear View Mirror After 25 Years in the Industry
Insightful reflection on 25 years in infosec, offering valuable lessons and perspectives from an experienced professional's journey through various technical roles and industry changes.
Fuzzing the TCP/IP Stack - Beyond the Trivial
Explore advanced TCP/IP stack fuzzing techniques, focusing on innovative approaches like state fuzzing with PicoTCP. Learn about uncovering vulnerabilities and enhancing network security beyond traditional methods.
Setting Up a Bug Bounty and Automation Box - Part 1
Learn to set up a bug bounty and automation environment, covering essential tools and configurations for effective ethical hacking and cybersecurity testing.
Mass Production Testing of Circuit Boards - Techniques and Equipment
Comprehensive guide to mass production board testing, covering testpoints, fixtures, instruments, software, and accessories for efficient and cost-effective quality assurance in electronics manufacturing.
Physical Emissions - CHES 2024
Explore cutting-edge research on physical emissions in cryptographic hardware at CHES 2024, chaired by Patrick Schaumont. Gain insights into latest developments and implications for secure system design.
Ransomware in Action - MedusaLocker ReadText34
Explore MedusaLocker ransomware's behavior and tactics through dynamic analysis, gaining insights into its encryption process and file manipulation techniques.
Why "Safety"? How We Use Measurement to Advance Governance of Technology
Explore Internet Safety Labs' approach to software safety, including measurement methodologies, app safety labels, and data collection techniques for advancing technology governance.
The Hunt for CVE-2023-0286 - Replicating OpenSSL's Latest Vulnerability
Replicate CVE-2023-0286 in OpenSSL, learn to write a libfuzzer harness, and explore vulnerability research techniques for enhanced security awareness and threat prevention.
Debugging Schrodinger's App - DevSecOps Strategies
Explore quantum computing principles applied to debugging complex software systems, enhancing problem-solving skills for modern developers.
Securing the Software Factory
Explore strategies for securing the software development lifecycle, from code to deployment, enhancing overall application security and resilience.
Building Dynamic System Call Sandbox with Partial Order Analysis
Explore dynamic system call sandboxing using partial order analysis to enhance OS security. Learn how to restrict unnecessary system calls and reduce attack surfaces in program execution.
DevSecOps Transformation at Speed and Scale Using Tekton
Standardize CI/CD security automation, centralize platform operations, and prevent software vulnerabilities using Tekton as an open-source orchestrator with integrated scanning tools and continuous compliance.
Quantitative Robustness for Vulnerability Assessment
Explore quantitative robust reachability for measuring bug triggering difficulty in software security. Learn about QRSE and functional E-MAJSAT for improved vulnerability assessment.
Automated Identification of Layering Violations in Embedded Applications - Work in Progress
Explore automated detection of layering violations in embedded systems, focusing on Non Conventional MMIO Accesses and their impact on software portability and design.
Why Put Security in DevOps - and How
Explore integrating security into DevOps practices, understanding its importance and implementation strategies for enhanced software development.
OWASP DefectDojo - Introduction and Overview
Learn about DefectDojo, an open-source application vulnerability management tool. Discover its features for streamlining security testing workflows and enhancing vulnerability tracking and remediation processes.
Automating Security Test Cases Based on ASVS
Learn to automate security test cases using ASVS, enhancing your application's vulnerability assessment and overall security posture.
BOLABuster: Harnessing LLMs for Automating BOLA Detection
Harnessing LLMs to automate BOLA detection in APIs and web applications, reducing requests by 99% while uncovering critical vulnerabilities and submitting multiple CVEs.
101 Things Your Application is Doing Without Your Knowledge
Uncover hidden behaviors in your applications, including unexpected file operations and network connections, even when using trusted dependencies. Learn to identify and manage these covert activities.
Practical Steps to False Positive Reduction and Benign File Analysis
Learn efficient techniques for identifying false positives and analyzing clean files in malware analysis. Gain actionable tips from real-world examples to enhance your workflow and save time and resources.
Accelerating Electric Vehicle Innovation with Cloud Native Technologies
Explore NIO's use of cloud native tech like Containerd, Kubernetes, and KubeEdge to enhance EV software development, improving efficiency and quality in the pursuit of vehicular intelligence.