SysPal - System-Guided Pattern Locks for Android
Innovative Android lock scheme mandating random points in pattern selection. Enhances security without compromising usability, as demonstrated through large-scale studies and real-world testing.
Mitigating LangSec Problems With Capabilities
Explore how capability-based systems like Sandstorm mitigate language-based security vulnerabilities through robust isolation and authorization mechanisms, enhancing web application security.
Verena - End-to-End Integrity Protection for Web Applications
Explore end-to-end integrity protection for web applications, focusing on safeguarding sensitive information against server-side attacks and ensuring data authenticity for users.
Surakav - Generating Realistic Traces for a Strong Website Fingerprinting Defense
Explore a novel defense against website fingerprinting attacks using Surakav, a technique for generating realistic network traces to enhance online privacy and security.
Virtual Consensus in Delos
Explores virtualizing consensus in replicated systems, enabling dynamic protocol changes without downtime. Introduces VirtualLog and Loglets for simplified, diverse, and composable consensus implementations, showcasing benefits in the Delos database.
Wobfuscator - Obfuscating JavaScript Malware via Opportunistic Translation to WebAssembly
Explore innovative techniques for obfuscating JavaScript malware through WebAssembly translation, enhancing code protection and evading detection mechanisms.
If HTTPS Were Secure I Wouldn't Need 2FA - End User and Administrator Mental Models of HTTPS
Explores misconceptions about HTTPS security among end users and administrators, revealing gaps in understanding and providing recommendations for improved protocol design and user interfaces.
The Remote on the Local - Exacerbating Web Attacks Via Service Workers Caches
Explore how service worker caches can amplify web attacks, examining vulnerabilities and potential security risks in modern web applications.
Runtime Recovery of Web Applications under Zero-Day ReDoS Attacks
Explore techniques for protecting web applications against zero-day ReDoS attacks, focusing on runtime recovery strategies to maintain system functionality and security.
Timing-Based Browsing Privacy Vulnerabilities Via Site Isolation
Explore timing-based privacy vulnerabilities in web browsers, focusing on site isolation and its impact on user security and data protection.
Hacking Containers, Kubernetes and Clouds
Demonstrating how tokens left in containers can lead to full cluster and cloud resource control, highlighting critical security vulnerabilities in Kubernetes environments.
The Weakest Link
Sicherheitslücken in Mobilfunk-Webapps ermöglichen Angreifern Rufumleitungen und Kontoübernahmen durch einfache Newsletter-Links. 40% der österreichischen Nutzer waren 2020 betroffen.
Elixir - The Only Sane Choice in an Insane World
Discover why Elixir is the ideal choice for building fast, scalable backends. Learn about its Erlang heritage, pattern matching, and functional programming advantages for modern application development.
CSS vs. JavaScript, Trust vs. Control
Exploring CSS evolution, capabilities, and its relationship with JavaScript. Highlights CSS features like flexbox, grid, and custom properties, while discussing the balance between trust and control in web development.
Did We Lose the Right Direction in Web Development
Exploring the balance between user and developer experience in modern web development, questioning if we've lost focus on core web principles and overused JavaScript.
Max Level Web App Security
Learn advanced web application security techniques, including threat modeling, secure coding practices, and vulnerability assessment strategies for robust protection against cyber threats.
A New Era of Security - How Web Platform Features Can Save Your Application
Explore modern web security features to protect against XSS, CSRF, and other common threats. Learn how to implement CSP3, Trusted Types, and Fetch Metadata Request Headers in your applications.
Server-Side Micro Frontends
Explore server-side micro frontends: concepts, principles, and real-world implementation insights from Standard Chartered Bank. Learn about technology options, DevOps considerations, and challenges in this architectural approach.
Design for Errors - An Introduction to Domain Modeling with a Bit of Arrow
Explore Domain Driven Design and Arrow data types to build clear, resilient, and maintainable APIs through a step-by-step implementation process.
Angular, React, Vue and Co. - Peacefully United Thanks to Web Components and Micro Apps
Explore how Web Components and Micro Apps enable long-term maintenance of enterprise solutions by integrating diverse technologies like Angular, React, and Vue into modular, self-contained parts.
How to Bootifully Make a Front End with JHipster and Vue.js for Your Application
Aprende a crear aplicaciones web rápidas y optimizadas combinando Spring Boot, Vue.js y JHipster. Descubre cómo mejorar tu experiencia de desarrollo y crear frontends eficientes.