Identity-Based Security and Privacy for the Internet of Things
Explore IoT identity management challenges, opportunities, and solutions for seamless authentication, robust security, and user-controlled privacy across diverse devices and platforms.
Padding Oracles Everywhere
Explore padding oracle attacks in cryptography, their widespread impact, and practical exploitation techniques in various systems and protocols.
A Visual Journey to Demystifying OAuth2 and OIDC - Why Do They Exist and How to Properly Use Them to Secure Your Applications
Explore OAuth2, OIDC, and related security standards through visual explanations. Learn their purposes, differences, and proper implementation for secure authentication and authorization.
Cryptographically Secure Data Analysis for Social Good
Secure multi-party computation enables analysis of sensitive salary data to calculate pay disparities while maintaining confidentiality, demonstrating potential for social impact in privacy-constrained contexts.
Putting Privacy Notices to the Test
Exploring challenges and improvements in privacy notices and security warnings, discussing cognitive processes, and presenting user studies to enhance effectiveness through iterative design.
Security and Usability from the Frontlines of Enterprise IT
Exploring the intersection of simplicity, usability, and security in IT controls, sharing insights from Duo's experience protecting diverse organizations and advocating for user-friendly security solutions.
ToStaticHTML for Everyone - About DOMPurify
Exploring DOM-based XSS sanitation challenges and introducing DOMPurify, a novel solution for secure client-side filtering in modern web applications.
Usable Security - The Source Awakens
Exploring usable security research beyond end-users, focusing on system administrators and developers. Uses TLS to illustrate security issues across all levels and actors in information systems.
Geolocation of GSM Mobile Devices
Explore techniques for geolocating GSM mobile devices, including methods, tools, and potential applications in security and forensics.
HTTP Time Bandit
Explore HTTP-based Denial of Service attacks, focusing on a novel method using time-based techniques. Learn about attack classification, mitigation strategies, and tools for identifying vulnerabilities in web applications.
We Have You by the Gadgets
Explore Windows gadget platform vulnerabilities, attack vectors, and the creation of malicious gadgets. Learn about security risks in this embedded application system.
Esoteric Web Application Vulnerabilities
Explore uncommon web application vulnerabilities with expert Andres Riancho. Gain insights into esoteric security flaws and enhance your penetration testing skills.
Simplify Internet of Things with an Intelligent Gateway
Explore intelligent IoT gateways for edge computing, data transformation, and automated machine operations. Learn about scalable, secure IoT architectures and open-source solutions for industrial applications.
Going Mobile with Red Hat JBoss BPM Suite and Red Hat JBoss BRMS
Supercharge agility by combining Red Hat Mobile Application Platform with JBoss BPM Suite and BRMS. Learn to create dynamic native mobile apps driven by rules and processes, with minimal coding required.
Red Hat Business Automation Primer - Vision and Roadmap
Explore Red Hat's vision for business automation, featuring cloud-native tools, intuitive user experiences, and dynamic process development for enhanced efficiency and agility in digital transformation projects.
Distributed API Management in a Hybrid Cloud Environment
Explore Swiss Railways' automated API management platform for hybrid cloud, addressing security, governance, and scalability challenges in microservices architecture at scale.
You Are Being Watched
Explore the vulnerabilities of phone systems and network storage devices, uncovering security flaws and potential exploits in administrative interfaces and user access.
Who dis? The Right Way To Authenticate
Explore secure authentication methods, including tokens, OAuth, and SAML. Learn best practices, common issues, and key takeaways for implementing robust authentication in your systems.
Throw Open The Gates - Trading Control For Visibility
Explore innovative approaches to enterprise security, focusing on visibility over control, with insights from Heroku's security transformation and practical lessons for implementation.
Unicode Vulnerabilities That Could Byte You
Explore Unicode vulnerabilities in web applications, including normalization, capitalization misuse, and encoding conversion risks. Learn about HostSplit, HostBond attacks, and Punycode exploitation.
Say Cheese - How I Ransomwared Your DSLR Camera
Explore DSLR camera vulnerabilities and ransomware techniques in this cybersecurity talk, covering PTP protocols, firmware updates, and responsible disclosure practices.