Authentication Protocols Courses and Certifications

WeAreDevelopers

Understanding OAuth2 for Real

Explore OAuth2 protocol flows and implement a secure OAuth2 Flow with practical insights and theoretical overview from Johannes Pichler's expert session.

• YouTube
• 36 minutes
• On-Demand
• Conference Talk

DEFCONConference

Winning the Game of Active Directory - Securing Against Common Attack Strategies

Master essential Active Directory security strategies, from common attack vectors to implementing robust defensive measures for protecting enterprise environments and preventing network compromises.

• YouTube
• 43 minutes
• On-Demand
• Free Video

DEFCONConference

Abusing Mixed Vendor Kerberos Stacks - Exploiting Windows AD and Linux Authentication

Discover security vulnerabilities in mixed Kerberos environments and learn how to exploit weaknesses between Windows Active Directory and Linux/Unix systems for privilege escalation.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Black Hat

Watching the Watchdog - Protecting Kerberos Authentication With Network Monitoring

Explore advanced Kerberos attack detection techniques and learn to protect Windows networks using network monitoring. Includes a novel "Diamond PAC" attack variant and the "Kerberos Leash" tool.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Okta

Introduction to OAuth and OpenID Connect - Developer Day 2021

Hands-on workshop exploring OAuth and OpenID Connect concepts, focusing on the OAuth Authorization Code flow with PKCE. Learn to obtain access and ID tokens through practical exercises.

• YouTube
• 1 hour 24 minutes
• On-Demand
• Free Video

Service Interoperability With gRPC

Explore Salesforce's gRPC-based solution for standardized service communication, including implementation details and future plans for reactive streams integration.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

fwd:cloudsec

I Trusted You - A Demonstrated Abuse of Cloud Kerberos Trust

Delve into security vulnerabilities in Cloud Kerberos Trust, exploring how attackers can breach Cloud/On-Premises boundaries and authenticate as non-synced users in Azure AD and Active Directory environments.

• YouTube
• 44 minutes
• On-Demand
• Free Video

DEFCONConference

Spooky Authentication at a Distance - Post-exploitation Techniques for Windows Environments

Discover innovative post-exploitation techniques for proxying Windows authentication protocols remotely, enabling user impersonation and domain control without elevated privileges.

• YouTube
• 45 minutes
• On-Demand
• Free Video

DEFCONConference

Unlocking Doors Through Long-Range Relay Attacks on Contactless Credentials

Discover how to execute long-range relay attacks on contactless credentials through ISO 14443A protocol vulnerabilities, including live demonstrations and practical mitigation strategies.

• YouTube
• 38 minutes
• On-Demand
• Free Video

media.ccc.de

DNA Security Systems Based on Molecular Randomness

Explore DNA cryptography and chemical unclonable functions (CUFs) using synthetic DNA sequences for revolutionary security architectures bridging physical and digital worlds.

• YouTube
• 41 minutes
• On-Demand
• Free Video

الطريق الى أمن المعلومات

775 ratings at Udemy

تعرف على أساسيات أمن المعلومات، مفاهيم الحماية، السياسات، بروتوكولات التحقق، وإدارة الهوية والوصول. اكتسب مهارات للتعامل مع التهديدات والمخاطر في عالم الأمن السيبراني.

• Udemy
• 1 hour 50 minutes
• On-Demand
• Free Online Course

USENIX

An Evaluation of ECG Use in Cryptography for Implantable Medical Devices and Body Area Networks

1 review

Evaluates ECG-based cryptography for medical devices, discussing security assumptions, randomness extraction, and potential vulnerabilities in authentication protocols using physiological data.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Okta

Integrating Identity into APIs with Okta and Kong - Developer Day 2021

Discover powerful authentication and authorization scenarios using Kong and Okta. Learn to implement sophisticated API access and management flows with OIDC and OAuth, including CI/CD pipeline integration.

• YouTube
• 30 minutes
• On-Demand
• Free Video

IEEE

Signing Me onto Your Accounts through Facebook and Google - A Traffic-Guided Security Study of Commercially Deployed Single-Sign-On Web Services

Explores security vulnerabilities in popular web-based single sign-on systems, uncovering critical flaws that allow unauthorized access to user accounts on major platforms.

• YouTube
• 23 minutes
• On-Demand
• Conference Talk

Black Hat

Finding a Needle in an Encrypted Haystack

Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk